Create escpos_tcp_command_injector.rb

[futileskills]

Add ESC/POS Printer Command Injector Module for Epson-Compatible Printers

Description:
This PR introduces a new auxiliary module to Metasploit that exploits an unauthenticated ESC/POS command vulnerability in networked Epson-compatible printers. The vulnerability allows an attacker to send crafted commands over the network to inject custom ESC/POS print commands, which are used in various receipt printers.

---

Key Features:

• Customizable Message: The attacker can specify a custom message to be printed.
• Cash Drawer Trigger: The module can optionally trigger an attached cash drawer.
• Paper Feed and Cut: New functionality to feed the paper and then cut it, which provides more realistic and complete receipt testing.
• Default Behavior: By default, the module can print a message, trigger a cash drawer, or feed and cut paper if configured.

---

Vulnerable Target:

• Printer Model: Any Epson-compatible printer that supports the ESC/POS command set over port 9100.
• CVE Information: CVE is currently under submission for the vulnerability in Epson-compatible network printers.

---

Module Options:

• RHOST (Target IP): The target IP address of the printer.
• RPORT (Target Port): The port used for communication (default is 9100).
• MESSAGE: The custom message to be printed.
• PRINT_MESSAGE: Boolean flag to enable printing the message.
• TRIGGER_DRAWER: Boolean flag to optionally trigger the attached cash drawer.
• CUT_PAPER: Boolean flag to feed and cut the paper.
• FEED_LINES: Integer to specify the number of lines to feed before cutting.
• DRAWER_COUNT: Integer to specify the number of times to trigger the cash drawer.

---

Exploit Details:

The exploit uses the ESC/POS command sequence to:

1. Initialize the printer.
2. Print the user-defined message.
3. Optionally trigger the connected cash drawer.
4. Optionally feed the paper and perform a full cut.

---

Potential Use Cases:

• Security Research: Test and demonstrate vulnerabilities in legacy or misconfigured Epson-compatible printers.
• Penetration Testing: Evaluate the physical security and potential unauthorized access to networked receipt printers.
• Network Forensics: Analyze network traffic involving printers to uncover potential exploits or misconfigurations.

---

Notes:

• Compatibility: This module is compatible with networked Epson-compatible printers that expose the ESC/POS protocol on the default port (9100).
• Safety Warning: This is intended for ethical use in controlled environments. It is illegal to use this tool on devices you do not own or have explicit permission to test.

CVE is pending, will update when I hear back.

[github-actions]

Thanks for your pull request! Before this can be merged, we need the following documentation for your module:

• Writing Module Documentation
• Template
• Examples

[futileskills]

I'm new to contributing here and this is my first PR. Could I get some clarification on what kind of documentation you'd like for this module?
I've added a file header and some inline comments, and I can put together a Markdown doc or update the README if that's helpful.
Thanks for any guidance!

[bcoles]

I'm new to contributing here and this is my first PR.

Welcome!

Could I get some clarification on what kind of documentation you'd like for this module?

Refer to the links here: #20478 (comment)

I can put together a Markdown doc or update the README if that's helpful.

Please also validate your markdown formatted documentation with msftidy_docs:

./tools/dev/msftidy_docs.rb documentation/modules/auxiliary/admin/printer/escpos_tcp_command_injector.md

[cdelafuente-r7]

Thank you @futileskills for this module! It looks great! I just left a few comments and suggestions for you to review when you get a chance.

[futileskills]

Thank you @futileskills for this module! It looks great! I just left a few comments and suggestions for you to review when you get a chance.

Thank you! I really appreciate your feedback! I'm just starting to learn Ruby so take it easy on me lol.

[futileskills]

Okay, I think I got everything working. The only thing that I still want to add is additional in depth documentation for this module, but i figured I can add the link to that later on. - Once I finish it. It will be more of a in-depth documentation of what I have learned and the main concept behind the module. Here is what I have so far: https://github.com/futileskills/ESCPOS-Injector-Documentation-
Later on when I am happy with it I will request an update to add the link directly.

If there is anything else y'all would like to see please let me know and thank you again for all the help! @bcoles @cdelafuente-r7

[cdelafuente-r7]

Thank you @futileskills for making the changes. I just left one more comment, but otherwise it looks good to me. Someone else from R7 will take over and do a second round of review/testing (if possible). Thanks again for your contribution.

[futileskills]

Thank you @futileskills for making the changes. I just left one more comment, but otherwise it looks good to me. Someone else from R7 will take over and do a second round of review/testing (if possible). Thanks again for your contribution.

Thank you! Glad to be able to finally contribute.