Hacking Network Printers
(Mostly HP JetDirects, but a little info on the Ricoh Savins)

Here is my little article on how network printers like JetDirects and Ricoh Savins can be hacked. I've attached it as a PDF since it has too many graphics to make posting it with the forum software practical.

The web version can be found at:

http://www.irongeek.com/i.php?page=s...printerhacking

I plan to do updates as needed, so please give me some feed back. My last few posts haven’t got many replies, I’d like to hear from you all. Here is the table of contents to give you an idea about the subject matter:

Intro to the concepts
Diagnostics page
JetDirect password notes
Controlling the JetDirect box with telnet/web browser
Controlling the finding JetDirect boxes with JetAdmin
Finding Network printers using Nmap and SNMP tools
Using a JetDirect box as an Nmap Idlescan Zombie
Setting up a direct IP printer in Windows and Linux
Side note on a Pharos Uniprint vulnerability
DoSing the network or the printer
Changing the LCD display text using HPhack, IGhphack or Hijetter
Phenoelit's Hijetter and PFT
Setting the LCD Display with Hijetter
Changing settings with Hijetter
Using Hijetter to treat some JetDirect boxes as files/web servers
Finding stored faxes and print jobs on Jetdirect printers
Don't forget to look for Stored Documents via the web interface
Sniffing print jobs and replaying them
A note on Plain-text authentication protocols
Other Ideas
Links to Tools
Useful links for further research
Change Log