##
# This module requires Metasploit: http//metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

require "msf/core"
require "rex/proto/pjl"

class Metasploit4 < Msf::Auxiliary

  include Msf::Auxiliary::Scanner
  include Msf::Auxiliary::Report
  include Msf::Exploit::Remote::Tcp

  def initialize(info = {})
    super(update_info(info,
      'Name' => "Printer Ready Message Scanner",
      'Description' => %q{
        This module scans for and can change printer ready messages using PJL.
      },
      'Author' => [
        "wvu", # Author
        "MC", # Comrade
        "YGN" # Comrade
      ],
      'References' => [
        ["URL", "https://en.wikipedia.org/wiki/Printer_Job_Language"]
      ],
      'License' => MSF_LICENSE
    ))

    register_options([
      Opt::RPORT(9100),
      OptBool.new("CHANGE", [false, "Change ready message", false]),
      OptString.new("MESSAGE", [false, "Ready message", "PC LOAD LETTER"])
    ], self.class)
  end

  def run_host(ip)
    connect
    pjl = Rex::Proto::PJL::Client.new(sock)
    rdymsg = pjl.pjl_get_rdymsg
    if datastore["CHANGE"]
      message = datastore["MESSAGE"]
      pjl.pjl_set_rdymsg(message)
      rdymsg = pjl.pjl_get_rdymsg
    end
    disconnect

    if rdymsg
      print_good("#{ip} #{rdymsg}")

      report_note({
        :host => ip,
        :port => rport,
        :proto => "tcp",
        :type => "printer_ready_message",
        :data => rdymsg
      })
    end
  end

end