The exploit starts a SOCKS proxy on the MFP, allowing the attacker to move laterally through the network infrastructure. If your appetite isn't whet enough already, here is a video that shows the printer being exploited and compromised via a malicious website. ![]() The vulnerabilities that were discovered affect more than 150 HP multi-function printers (MFPs). This paper will walk you through the steps of our journey, from how we discovered the vulnerabilities, how we lovingly crafted the exploits and provides mitigation advice also. ![]() What do you get when you combine a hardware hacker ( Alexander), a red teamer who wants to learn hardware security ( Timo), and a spare HP multi-function printer? Two happy hackers, unconventional zero-days, new tooling for the F-Secure red team - and for you a detailed write-up of the journey.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |