Auxiliary module to HP LaserJet Printer SNMP Enumeration

[mcantoni]

This module allows enumeration of files previously printed via SNMP request. It provides details as filename, client, timestamp and username informations. The default community used is "public".
(old request: http://dev.metasploit.com/redmine/issues/6864).

msf auxiliary(snmp_enum_hp_laserjet) > set RHOSTS 1.2.3.4
RHOSTS => 1.2.3.4
msf auxiliary(snmp_enum_hp_laserjet) > run

[+] IP address  : 1.2.3.4
[+] Hostname    : HPPRINTERTEST
[+] Description : HP ETHERNET MULTI-ENVIRONMENT,ROM none,JETDIRECT,JD102,EEPROM V.34.63,CIDATE 02/26/2007
[+]
[+] File name   : Secret.pdf
[+] Username    : Jack
[+] Client      : HOSTNAME1
[+] Timestamp   : 20140106170130
[+]
[+] File name   : Test.doc
[+] Username    : Mark
[+] Client      : HOSTNAME2
[+] Timestamp   : 20140106170246
...
..
.

[wvu]

Hey, @mcantoni. Please see #2920. Sorry I forgot! :(

[mcantoni]

Ok, thank you. Evaluate to add also this "new" module. It doesn't use PJL but SNMP to retrieve the history of printed files. I hope you have a device to do some test (HP laserjet printer with SNMP public). It's free to be modified. I hope could be useful to others.

[wvu]

Testing!

[wvu]

Please use %q{}.

[wvu]

I can see the document names in my pcap, but I'm not seeing them in my output. I'll have to look into this later.

[mcantoni]

I had the opportunity to positively verify the script with these devices: HP LaserJet 3005, HP LaserJet 3505, HP LaserJet 3800, HP LaserJet 4015, HP LaserJet 4250. (Currently I can not provide a pcap.)

[wvu]

This has _NOT_ been merged yet.

[wvu]

See #2996 (comment).