RUB-NDS/PRET
PRET
PRET ist ein Framework für Netzwerkdrucker-Exploitation und ein Sicherheitsdienstprogramm, das für die Entdeckung von Druckhardware und die Prüfung von Firmware entwickelt wurde. Es dient als Toolkit für das Eindringen in Druckinfrastrukturen durch Manipulation druckerspezifischer Steuersprachen und Protokolle.
Das Projekt bietet spezialisierte Funktionen für das Auslösen von Remote Code Execution mittels Buffer Overflows und die Verwaltung von Druckerdateisystemen unter Verwendung der Printer Job Language. Es ermöglicht die Extraktion von Geräte-Metadaten, wie Firmware-Versionen und Speicherressourcen, sowie die Modifikation von Hardwareverhalten und Systemparametern.
Das Framework deckt eine breite Oberfläche für Sicherheitstests ab, einschließlich der Entdeckung von Netzwerkgeräten, Schwachstellenanalyse durch Input-Flooding und die Interzeption von Druck-Workflows. Es enthält zudem Tools für die Extraktion von Systeminformationen und Hardware-Level-Denial-of-Service-Tests.
Features
- Firmware Exploitation - Delivers crafted payloads via printer languages to trigger buffer overflows and gain unauthorized remote code execution.
- Network Hardware Penetration Tools - Serves as a security utility for discovering printing hardware and intercepting print jobs on local networks.
- Printer-Specific File Access - Reads and writes files on internal device storage using specific control languages to identify sensitive data.
- Remote Device File System Analysis - Allows accessing and modifying internal storage on remote printers to extract sensitive credentials and configuration files.
- Printer File Managers - Provides capabilities to navigate, delete, and modify files and directories on a remote printer's storage.
- PJL File Management - Implements a manager for reading, writing, and modifying files on printer internal storage using the Printer Job Language.
- Firmware Vulnerability Assessment - Extracts device metadata and tests firmware vulnerabilities like buffer overflows through crafted payloads.
- Network Device Discovery - Searches for available printing devices on the local network using standard network management protocols.
- Infrastructure Pentesting - Evaluates the security of print workflows by intercepting print jobs and bypassing authentication controls.
- Network Security Auditing - Scans local networks to identify printing devices and audit them for common security vulnerabilities.
- Printer Exploitation Frameworks - Provides a comprehensive toolkit for auditing and exploiting network printers by manipulating printer-specific protocols.
- Remote Code Execution Tools - Delivers payloads through printer languages to trigger buffer overflows and gain system control.
- Vulnerability Assessment and Testing - Performs file system fuzzing and input flooding to identify buffer overflows and unauthorized access points.
- Printer Parameter Modifications - Provides the ability to update environment variables and system parameters to alter printer hardware behaviors.
- Security Information Extraction - Queries memory and configuration settings to uncover credentials, accounting data, and sensitive system details.
- Hardware Setting Manipulation - Translates commands into device languages to modify settings, bypass accounting, or test for denial of service.
- Print Workflow Interception - Captures print jobs and toggles job retention to intercept or block the output of documents.
- Denial of Service Tools - Ships utilities for simulating resource exhaustion and triggering system crashes to test printer stability.
- Device and Environment Metadata - Retrieves system information including firmware versions, page counters, and available memory resources.
- Hardware Level Management - Executes low-level hardware operations such as restarting the device or manipulating non-volatile memory.
- Analysis Frameworks - Specialized toolkit for printer exploitation and security testing.
- Exploitation Frameworks - Tool for testing and exploiting printer security vulnerabilities.
- Network Security Tools - Security testing tool for printer protocols and hardware.
- Service Brute Forcing - Printer exploitation toolkit.
