Demo video;
youtu.be/dMxekFm1KLw
CVE-2023-29984 : Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service ... cve.report/CVE-2023-29984
Very simple vulnerability I discovered on a large number of printers…. Basically, create a URL request to the printer IP with “%00” in it and it crashes/reboots the printer. CVE link and demo video below.
cve.mitre.org/cgi-bin/cvenam…
youtu.be/dMxekFm1KLw
At the request of both PSIRT teams I have agreed to delay the release of this exploit until 1st July.
Hey @BrotherOffice @FujifilmUS, I’ve tried contacting your PSIRT teams. I have an very simple DOS exploit for a large number of your printers. I will publicly release it 1st April if I don’t hear back. This is a polite record that I’ve tried to contact you.
Hey @BrotherOffice @FujifilmUS, I’ve tried contacting your PSIRT teams. I have an very simple DOS exploit for a large number of your printers. I will publicly release it 1st April if I don’t hear back. This is a polite record that I’ve tried to contact you.
Eventful week, discovered a #ZeroDay vulnerability on many Brother/Fuji Xerox printers that does an unauthenticated DOS (sends them in a constant reboot cycle). How to perform it? Via a simple URL to the printer IP address😬 Contact been made with vendor PSIRT. Watch this space…
Something I was working on last year.... A script (Python) running on a $50 Raspberry Pi that shows you what users are entering into search engines such as Google. This works by pulling URL logs from a #paloaltonetworks firewall via its API.
youtu.be/i9izpnybRnw
If, from a @PaloAltoNtwks firewall, you could get a list of what users have searched on Google and YouTube, do you think that would be:
40%Useful and interesting
0%Not of interest
60%Scary (but cool)
5 votes • Final results*Incoming* API script to #PaloAltoFirewall to display all Google searches in the last 24 hours. This could throw up some interesting results - ping me if you want to help test...... @PaloAltoNtwks
Hmmm, interesting how different apps are programmed with the user-agent field in HTTP traffic. Here, the Evernote app leaks the exact version of Evernote and Windows OS version. Very useful information for an attacker, knowing the attack surface @PaloAltoNtwks #PaloAlto #Hacking
Not sure who needs to hear this but NEVER do SSL decryption on BYODs (mobiles, tablets, etc) that heavily use Apps. #PaloAlto #SSLDecryption #Firewalls @PaloAltoNtwks
og150 retweeted
My only interview question about a decade back for my first Network Engineering position was "Do you want to be a network engineer?" That was it.
Prior to that, I helped out the team whenever I was asked. Eventually the work I did opened the doors.
Work hard, get noticed.
IT supports last refuge for diagnosing an issue is…[drum roll]…. “It’s the network”.
Plot twist - the majority of times it’s not the network.
og150 retweeted
They completely understand the logic behind it. If you rate limit users, they’re more likely to give you more money for faster speedtest results. Making money at the expense of RF performance is the name of the game for many in the hospitality space.
My humble opinion of the day; Outsourcing does not work, except in the minds of the management layer too far removed from what’s happening on the ground.