Another attack takes advantage of the backup feature (or "cloning", as Xerox calls it) on the printer. In the case of Lexmark and Xerox printers, he said the backups exported the account passwords in plain text.

In yet another attack. he was able to redirect the test pages that most printers spit out by intercepting the Lightweight Directory Access Protocol (LDAP) in a sort of man-in-the-middle attack. Here he attacked Sharp and Ricoh printers, redirecting their test pages to him, and setting him up as a valid user.

At the end of his talk, Heiland announced the release of a new penetration testing tool called , which he said is Latin for "to plunder, spoils of war, booty." The tool, in the right hands, can help IT administrators discover multifunction printer vulnerabilities on their network, with modules for each of the vendors cited above. The release of the tool will also undoubtedly put pressure on the printer manufacturers to patch or fix these multifunction printer problems entirely.