Get the latest tech news

Pwning a Brother labelmaker, for fun and interop


today, we'll jump into a rabbithole of exploiting a printer, and up being angry at vendors and capitalism alike. come over, it's gonna be fun :3c

That turned out to be a grave mistake, since after the reboot, the CGI admin interface wouldn't start, and CUPS was working only partially (Administration page would return 500). As a last ditch effort, I went back to my first idea of using ErrorLog for arbitrary file write - I found out that CUPS 1.6.1 improperly parses the URL while logging errors, hence I could turn %0a into a real newline. Myself, I'm in the process of making a small application allowing for direct label printing from a webserver on the device itself, because that will ultimately reduce the amount of times I have to touch CUPS in the future.

Get the Android app

Or read this on Hacker News

Read more on:

Photo of Fun

Fun

Photo of Brother labelmaker

Brother labelmaker

Photo of Pwning

Pwning

Related news:

News photo

Optimizing JavaScript for Fun and for Profit

News photo

Delivering Signals for Fun and Profit (2001)

News photo

How many Microsoft missteps were forks that were just a bit of fun?