PrinterLogic's Enterprise Print Management software allows IT professionals to simplify printer driver management and empower end users. -- https://www.printerlogic.com/
The following findings were identified by performing both dynamic testing of the PrinterLogic SaaS platform and code analysis of the source code contained in the virtual appliance available for download from the PrinterLogic website (Build 1.0.757: July 29th, 2022).
| root@kali:~# /usr/games/cowsay -f ducksec4 'QUACK THE PLANET!!!' | |
| _____________________ | |
| < QUACK THE PLANET!!! > | |
| --------------------- | |
| \ | |
| \ | |
| \ ___ | |
| __.' '. | |
| (__} o ) | |
| '._. / |
| /* | |
| * John Conway's Game of Life. | |
| * | |
| * This is written for POSIX, using Curses. Resizing of the terminal is not | |
| * supported. | |
| * | |
| * By convention in this program, x is the horizontal coordinate and y is | |
| * vertical. There correspond to the width and height respectively. | |
| * The current generation number is illustrated when show_generation is set. | |
| * |
| #!/bin/bash | |
| # By Eldar Marcussen for SEEK 29/04/2020 | |
| echo 'Simplistic Java Expression Language Injection detection' | |
| echo '==================================================}*>>>' | |
| echo ' [*] Identifying use of spring eval with variables:' | |
| grep -HrnE '<spr(ing)?:eval.*\$\{' "$1" | |
| echo ' [*] Identifying EL code definitions.' | |
| grep -hroE '<spr(ing)?:(message|theme).*code=[^>]+>' "$1" | sort -u | sed -e"s/.*code=[\"\']//" -e"s/[\'\"].*//" > /tmp/elcList.txt | |
| echo ' [+] Code list saved as /tmp/elcList.txt' | |
| echo ' [*] Shortlisting codes with arguments.' |
| Xntrik dreams in base64 | |
| he can smell malware through the insulation on an ethernet cable | |
| People talk about the time he turned left instead of right and the entire traffic system fell over | |
| His moustache is classified as a cyberweapon under the Wassenaar Agreement. | |
| - His moustache is also dual use | |
| The top secret method of HTTP compression that is immune to BREACH/CRIME attacks: @xntrik's skinny jeans. |
| /0[ ,\"\'\}] | |
| /1[ ,\"\'\}] | |
| /2[ ,\"\'\}] | |
| /3[ ,\"\'\}] | |
| /4[ ,\"\'\}] | |
| /5[ ,\"\'\}] | |
| /6[ ,\"\'\}] | |
| /7[ ,\"\'\}] | |
| /8[ ,\"\'\}] | |
| [^\#]*from any to any |
| ## | |
| # This module requires Metasploit: http://metasploit.com/download | |
| # Current source: https://github.com/rapid7/metasploit-framework | |
| ## | |
| require 'msf/core' | |
| class Metasploit3 < Msf::Exploit::Remote | |
| Rank = ManualRanking |