Printers

Discovery

Windows

• SharpPrinter - Discover Printers: https://github.com/rvrsh3ll/SharpPrinter
• ListNetworks - Enumerate all visible network printers in local network: https://github.com/vinifr/-ListNetworks

Linux

• Praeda - Automated printer data harvesting tool: http://h.foofus.net/?page_id=218

Exploitation

• PRET - Printer Exploitation Toolkit: https://github.com/RUB-NDS/PRET

Attack Patterns

• Plunder Pillage & Print: https://hackinparis.com/data/slides/2014/DeralHeilandandPeterArzamendi.pdf
• LDAP/SMB/SMTP Pass-Back-Attack: http://foofus.net/goons/percx/praeda/pass-back-attack.pdf
• LDAP - power address book functionality
• SMB - saving scans to file shares
• SMTP - scan to email
• Export configuration and look for credentials
• LDAP traffic is unencrypted (usually), can MITM

Guides

• An Introduction to Printer Exploitation: https://0x00sec.org/t/an-introduction-to-printer-exploitation/3565