├── README.md ├── exploit ├── exploit.py ├── requirements.txt └── ssh_key │ ├── id_rsa_lexmark │ └── id_rsa_lexmark.pub ├── tools ├── README.md ├── fw_decrypt.py ├── keys.py ├── rootfs_decrypt.py └── wtm_oracle │ ├── Makefile │ ├── client │ ├── dump_bootrom.py │ ├── dump_otp.py │ ├── rng_test.py │ ├── unwrap_aeskey.py │ ├── util.py │ └── wtmclient.py │ ├── include │ ├── debug.h │ ├── tcp.h │ ├── util.h │ └── wtmio_client.h │ ├── lkm │ ├── Makefile │ ├── kconfig │ └── khax.c │ └── src │ ├── main.c │ ├── tcp.c │ ├── util.c │ └── wtmio_client.c └── writeup └── writeup.md /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/README.md -------------------------------------------------------------------------------- /exploit/exploit.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/exploit/exploit.py -------------------------------------------------------------------------------- /exploit/requirements.txt: -------------------------------------------------------------------------------- 1 | requests -------------------------------------------------------------------------------- /exploit/ssh_key/id_rsa_lexmark: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/exploit/ssh_key/id_rsa_lexmark -------------------------------------------------------------------------------- /exploit/ssh_key/id_rsa_lexmark.pub: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/exploit/ssh_key/id_rsa_lexmark.pub -------------------------------------------------------------------------------- /tools/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/README.md -------------------------------------------------------------------------------- /tools/fw_decrypt.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/fw_decrypt.py -------------------------------------------------------------------------------- /tools/keys.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/keys.py -------------------------------------------------------------------------------- /tools/rootfs_decrypt.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/rootfs_decrypt.py -------------------------------------------------------------------------------- /tools/wtm_oracle/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/Makefile -------------------------------------------------------------------------------- /tools/wtm_oracle/client/dump_bootrom.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/client/dump_bootrom.py -------------------------------------------------------------------------------- /tools/wtm_oracle/client/dump_otp.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/client/dump_otp.py -------------------------------------------------------------------------------- /tools/wtm_oracle/client/rng_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/client/rng_test.py -------------------------------------------------------------------------------- /tools/wtm_oracle/client/unwrap_aeskey.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/client/unwrap_aeskey.py -------------------------------------------------------------------------------- /tools/wtm_oracle/client/util.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/client/util.py -------------------------------------------------------------------------------- /tools/wtm_oracle/client/wtmclient.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/client/wtmclient.py -------------------------------------------------------------------------------- /tools/wtm_oracle/include/debug.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/include/debug.h -------------------------------------------------------------------------------- /tools/wtm_oracle/include/tcp.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/include/tcp.h -------------------------------------------------------------------------------- /tools/wtm_oracle/include/util.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/include/util.h -------------------------------------------------------------------------------- /tools/wtm_oracle/include/wtmio_client.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/include/wtmio_client.h -------------------------------------------------------------------------------- /tools/wtm_oracle/lkm/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/lkm/Makefile -------------------------------------------------------------------------------- /tools/wtm_oracle/lkm/kconfig: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/lkm/kconfig -------------------------------------------------------------------------------- /tools/wtm_oracle/lkm/khax.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/lkm/khax.c -------------------------------------------------------------------------------- /tools/wtm_oracle/src/main.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/src/main.c -------------------------------------------------------------------------------- /tools/wtm_oracle/src/tcp.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/src/tcp.c -------------------------------------------------------------------------------- /tools/wtm_oracle/src/util.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/src/util.c -------------------------------------------------------------------------------- /tools/wtm_oracle/src/wtmio_client.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/tools/wtm_oracle/src/wtmio_client.c -------------------------------------------------------------------------------- /writeup/writeup.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/blasty/lexmark/HEAD/writeup/writeup.md --------------------------------------------------------------------------------