Get the latest tech news
Pwning a Brother labelmaker, for fun and interop
today, we'll jump into a rabbithole of exploiting a printer, and up being angry at vendors and capitalism alike. come over, it's gonna be fun :3c
That turned out to be a grave mistake, since after the reboot, the CGI admin interface wouldn't start, and CUPS was working only partially (Administration page would return 500). As a last ditch effort, I went back to my first idea of using ErrorLog for arbitrary file write - I found out that CUPS 1.6.1 improperly parses the URL while logging errors, hence I could turn %0a into a real newline. Myself, I'm in the process of making a small application allowing for direct label printing from a webserver on the device itself, because that will ultimately reduce the amount of times I have to touch CUPS in the future.
Or read this on Hacker News