CVE-2021-3441

This exploit demonstrates a stored XSS vulnerability in HP OfficeJet printers by sending a crafted XML payload via a PUT request to the ProductConfigDyn.xml endpoint. The payload injects a JavaScript alert into the DeviceLocation field, which is then stored and executed in the context of the printer's web interface.

This repository contains a Python tool designed to scan HP printers for indicators of compromise related to CVE-2021-3441, an XSS vulnerability in HP's embedded web server. It checks HTTP response headers and specific XML paths for suspicious characters that may indicate exploitation.