RE: [PATCH] nmap-service-probes: Misc database corrections, printer additions

[Aaron Leininger <rilian4 () hotmail com>]

> No authentication needed?  Am I the only one who thinks this screams
> for a simple, non-default display hacking NSE script?
>
> nmap --script jetdirect-display --script-args 'msg=I haZ Pwn3d yur prInt3r#@$#' printer.corp.com

Ask and you shall receive!(sorry this took 4 months. Didn't have the time to sit down and hash this out til now) I 
believe I have a simple script that uses something very near to your syntax that will set the display on most HP 
LaserJet printers. I have tested the script against an HP LaserJet 4100 (not case sensitive. message always appears in 
full caps) and a 5si (is case sensitive. displays message using the caps/lower case sent to it)

If no arguments are provided, the script will simply set the display to 'READY' which is the default. 

> Anyway, I sometimes feel like we need a whole humor category of
> scripts just for messing with people :). 

Hear hear! 
I put this script in the intrusive category for lack of a better spot. Please let me know where it belongs if not 
there. 

script is attached. Output sample is pasted below:
=============
example w/o argument:
$nmap -p9100 --script=./hprdymsg.nse my.printer.ip

Starting Nmap 4.85BETA10 ( http://nmap.org ) at 2009-07-10 11:52 PDT
Interesting ports on myprinter (my.printer.ip):
PORT     STATE SERVICE
9100/tcp open  jetdirect
|_ hprdymsg: "READY" was set as the display for printer at my.printer.ip

Nmap done: 1 IP address (1 host up) scanned in 0.25 seconds

example w/ argument: (notice that both ' and " have to be used for an argument w/ a space.)
nmap -p9100  --script-arg 'msg="p0wn3d pr1nt3r"' --script=./hprdymsg.nse my.printer.ip

Starting Nmap 4.85BETA10 ( http://nmap.org ) at 2009-07-10 12:01 PDT
Interesting ports on myprinter (my.printer.ip):
PORT     STATE SERVICE
9100/tcp open  jetdirect
|_ hprdymsg: "p0wn3d pr1nt3r" was set as the display for printer at 10.4.10.77

Nmap done: 1 IP address (1 host up) scanned in 0.27 seconds


_________________________________________________________________
Windows Live™ Hotmail®: Find, add, and share the best celeb pics, right from Hotmail. Check it out.
http://www.windowslive.com/Online/Hotmail/Campaign/QuickAdd?ocid=TXT_TAGLM_WL_QA_HM_celebrity_photos2_072009&cat=celebrity

Attachment: hprdymsg.nse
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org