AppSec EU 2017 Printer Security by Jens Müller and Vladislav Mladenov
515 views · Published 26 May 2017 · 41:16 · Indexed 25 October 2026
Channel: OWASP Foundation · 2017 · Science & Technology
From a security point of view, printers have been overseen for a long time. Even though these devices have direct access to sensitive information like confidential reports, contracts, or patient recipes, there is no research summarizing attacks on printers. More importantly, there is no general methodology on printer security evaluation, and no pentesting tools are available. In our research, we provide the first comprehensive study regarding the security of printers. We evaluate 20 different printers revealing serious security flaws on all of them. We categorize the attacks in four different classes: Denial-of-Service (DoS), Protection Bypass, Print Job Manipulation, and Information Disclosure. Our evaluation was supported by a novel open source pentesting tool called PRET. We extend our analysis on systems beyond printers and evaluate Google Cloud Print and other PostScript processing websites. The result reveals information leakages and further security issues. - Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project
More from this channel
-
45:50
Revenge of the Geeks: Hacking Fantasy Sports Sites - Dan Kuykendall
-
51:38
Application Security at DevOps Speed and portfolio scale - Jeff Williams
-
35:56
HTML5 JS Security - maty siman
-
44:33
CSRF: not all defenses are created equal - Ari Elias-Bachrach
-
42:24
Running at 99% Surviging an Application DoS: Ryan Huber
-
34:16
libinjection: from sqli to xss - Nick Galbreath
-
47:55
Million Browser Botnet - Jeremiah Grossman Matt Johanssen
-
46:05
Next Generation Red Teaming - Robert Wood