pytmipe

PYTMIPE & TMIPE PYTMIPE PYthon library for Token Manipulation and Impersonation for Privilege Escalation is a Python 3 library for manipulating Windows tokens and managing impersonations in order to gain more privileges on Windows. TMIPE is the python 3 client which uses the pytmipe library...

concealed_position

隐藏位置 Concealed Position Concealed Position 是一种利用“自带漏洞”概念的 Windows 本地权限提升攻击。具体而言，Concealed Position CP 利用了 Windows 中 设计如此 的包点与打印逻辑，该逻辑允许低权限用户暂存并安装打印机驱动程序。CP 专门安装带有已知漏洞的驱动程序，然后利用这些漏洞提权至 SYSTEM。Concealed Position 首次在 DEF CON 29 上展示。 可用的漏洞利用有哪些 Concealed Position 提供了四个漏洞利用——名字都同样愚蠢： ACIDDAMAGE -...

PRETty

PRETty “打印机利用工具包”局域网自动化工具 （它只是 PRET 的一个 Python 包装器……实际上就是个 for 循环） PRETty 在网络中存在大量打印机时很有用。无需扫描、记录并手动对每台打印机运行 PRET，PRETty 会自动发现并对目标网络中的所有打印机运行选定的 PRET 载荷。 此外，PRETty 可用于自动向给定的打印机列表发送命令/载荷（参见“列表”部分）。 指南： 安装 一行命令包含 PRET 安装：sudo apt -y install imagemagick ghostscript arp-scan tshark && sudo pip instal...

The vulnerability of the software for centralized printer and MFP supervision, related to inconsistencies in responses to incoming requests, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software for centralized printer control and the Printsupervision printer system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

CVE-2024-34329

CVE-2024-34329 Producto probado: Datacard XPS Card Printer Driver Versión: = 8.4 Descripción: La aplicación es propensa a una vulnerabilidad de Escalada de Privilegios Local LPE debido a permisos inseguros de archivos/carpetas en su instalación predeterminada, por lo que otorga derechos de contro...

printerbugnew

Pure RPC over TCP Printer Spooler Trigger For Windows 11 22H2+ / Windows Server 2025 Usage printerbugnew.py username password domain attackerhost tcpport Examples Anonymous connection printerbugnew.py 192.168.1.100 With credentials printerbugnew.py 192.168.1.100 admin Password123 DOMAIN Trigger...

printix-CVE-2022-29551

CVE-2022-29551 Lanzamiento Simple | Versión para imprimir Una vulnerabilidad de "Método o función peligrosa expuesta" en PrintixService.exe, en "Printix Secure Cloud Print Management" de Kofax Printix, versión 1.3.1156.0 y anteriores, permite a un atacante local o remoto la capacidad de instalar...

CVE-2022-30206

CVE-2022-30206 Este es el PoC para CVE-2022-30206. Introducción Realice las siguientes operaciones para el borrado arbitrario de archivos: 1. Ejecute addprinter.exe para crear una impresora y establecer SpoolDirectory en C:\Users\Public\tmp\1. 2. Ejecute FileLock.exe TargetFile para redirigir el...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

CVE-2021-1675-PrintNightmare

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | 1 de junio de 2021 CVE-2021-1675 es una vulnerabilidad crítica de ejecución remota de código y escalada local de privilegios conocida como "PrintNightmare". Se han publicado exploits de prueba de concepto Python, C++ par...

PRET

PRET - 打印机利用工具包 你的打印机安全吗？在别人发现之前检查一下…… PRET 是一款用于打印机安全测试的新工具，基于鲁尔大学波鸿分校的一篇硕士论文开发。它通过网络或 USB 连接到设备，并利用指定打印机语言的功能。目前支持 PostScript、PJL 和 PCL，大多数激光打印机都支持这些语言。这可以实现诸如捕获或操纵打印作业、访问打印机文件系统和内存，甚至对设备造成物理损坏等酷炫功能。所有攻击方法均在 Hacking Printers Wiki 中有详细记录。 PRET 的主要理念是简化最终用户与打印机之间的通信。因此，在输入类 UNIX 命令后，PRET 会将其转换为...

CVE-2021-1675

PrintNightmare CVE-2021-1675 Este script de Zeek detecta eventos exitosos de DCE RPC RpcAddPrinterDriver,Ex, que son necesarios para explotar con éxito la vulnerabilidad. Las pruebas se basan en el PCAP de explotación de Lares Lab. Probado con las versiones de Zeek 3.0.2 y 4.0.1. Notices...

printer-cracktro

printer cracktro Mis entradas para el Pwn2Own Toronto 2022 estaban dirigidas a dos impresoras diferentes. Una está basada en Linux Lexmark y la otra está basada en DryOS CANON. Después de vulnerar el software de la impresora, las entradas mostraban una pequeña animación estilo crack-intro oldscho...

concealed_position

Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...

CVE-2023-22960

CVE-2023-22960 的 PoC 详细信息 这是我发现的 CVE-2023-22960 的 PoC。该漏洞允许攻击者绕过所有固件版本在 2023 年 1 月之前发布的 Lexmark 打印机型号的嵌入式 Web 服务器界面的凭据暴力破解防护机制。该问题同时影响用户名-密码和 PIN 认证。 官方安全公告 - https://publications.lexmark.com/publications/security-alerts/CVE-2023-22960.pdf PoC 测试对象 ： Lexmark MX622adhe Lexmark CX735adse Lexmark...

nmap-printer-nse-scripts

Este repositorio no tiene un README...

Sharp Multifunction Printers - Directory Listing

It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file. id: CVE-2024-33605 info: name: Sharp Multifunction Printers - Directory Listing author: gy741 severity: hig...

Lexmark Printers - Command Injection

Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 1 of 4. id: CVE-2023-26067 info: name: Lexmark Printers - Command Injection author: DhiyaneshDK severity: high description: | Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 1 of 4. impact: |...

Kyocera Printer d-COPIA253MF - Directory Traversal

Kyocera Printer d-COPIA253MF plus is susceptible to a directory traversal vulnerability which could allow an attacker to retrieve or view arbitrary files from the affected server. id: CVE-2020-23575 info: name: Kyocera Printer d-COPIA253MF - Directory Traversal author: 0xAkoko severity: high...

Honeywell PM43 Printers - Command Injection

Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 e.g. P10.19.050006 id:...