conf 2022-11-15 09:45 – 10:30 La Marive FR

The Printer goes brrrr

Name: Black Alps 2022
Start: 2022-11-15
End: 2022-11-16
Location: La Marive, Yverdon-les-Bains

Abstract

Network printers have been featured for the first time at Pwn2Own competition in Austin 2021. Three popular LaserJet printers were included in the completion: HP, Lexmark and Canon. During the event, we (Synacktiv) managed to compromise all of them allowing us to win the whole competition. In this talk, we will focus on how we achieved code execution on the Canon printer.

Speakers

Thomas Jeunet

Thomas Jeunet is a long time pentester and now computer security researcher at Synacktiv. This research is his first publication. His main interests are vulnerability research, exploit development, and reverse engineering, particularly on exotic architecture.

Mehdi Talbi

Mehdi Talbi, PhD, is a computer security researcher at Synacktiv. His main interests are vulnerability research, exploit development, reverse engineering, and source code auditing. Mehdi has published his work in several peer-reviewed journals (Journal in computer Virology) and magazines (Phrack). He has also presented his work at several international conferences including Infiltrate, Blackhat Europe, Virus Bulletin, SSTIC, Warcon, etc. Mehdi is one of the contributor to the Haka open source project showcased at DEF CON and Black Hat Arsenal.

Rémi Jullian

in infosec as an intrusion detection engineer for the French National Security

Talk

The Printer goes brrrr