inurl:"/address/speeddial.html?start" and intext:"Please configure the password" and intitle:"Brother"

  • 日期：2017-11-29
  • 类别：
  • 作者：Ankit Anubhav
  • 语法：inurl:"/address/speeddial.html?start" and intext:"Please configure the password" and intitle:"Brother"

  • The following dork gives the list of Brother Printers whose panels do not have an administrator password.

    Steps to take control of the Brother printer ::

    1.Use the dork to get the list of Brother printers whose password is not configured. The user will get output like hxxp://{URL}/address/speeddial.html?start=1&pageid=10
    2.Extract the URL/IP and construct a URL like hxxp://{URL}/admin/password.html
    3.This URL will lead the attacker to the page where administrator password can be set.

    Ankit Anubhav, NewSky Security