How to hack MFP / MFD RTOS ( Operating System )

[PA3040]

Dear All,

Does any one have experience to communicate with MFP or MFD operating system

Normally we can do this with SDK development kit that we must buy from OEM

If we can access os then we can connect machine with custom developed embedded systems

Does any one have this type of experience with Ricoh machine

I know Ricoh recently officially launched smart embedded connectivity via WiFi

But I am asking just like H.......a.......c........k.........hjhkhk

Please do not misunderstand since it is called revers engineering

[skynetto]

Re: How to hack MFP / MFD RTOS ( Operating System )

Good luck with Ricoh RSA firmware encrypted system.

[teebee1234]

Re: How to hack MFP / MFD RTOS ( Operating System )

I don't know of any way to do it (not that it can't be done). Here is a link to the developer site, which has 4 tiers of membership (not sure if it is of any help but you can check it out).

Ricoh RIDP

[Eric1968]

Re: How to hack MFP / MFD RTOS ( Operating System )

Ricoh is using NetBSD on their machines. A very robust operating system. You may be able to write software for the machine, but in my 21 year career I never saw anyone "hacking" a Ricoh MFP and get to the source code level.

[PA3040]

Re: How to hack MFP / MFD RTOS ( Operating System )

I don't know of any way to do it (not that it can't be done). Here is a link to the developer site, which has 4 tiers of membership (not sure if it is of any help but you can check it out).

Ricoh RIDP

Dear tee
Thanks for the reply with link and I will check and update you

[PA3040]

Re: How to hack MFP / MFD RTOS ( Operating System )

Ricoh is using NetBSD on their machines. A very robust operating system. You may be able to write software for the machine, but in my 21 year career I never saw anyone "hacking" a Ricoh MFP and get to the source code level.

Yes, It is really hard to access entire OS. But we can develop embedded systems for fulfill our some requirements catching some signal from the chip level
Actually my original post was asking about revers engineering of entire OS

My current requirement is collect the copy count automated way without attending tech to the machine

I mean, we have to develop embedded system pick the copy count from the machine then we can send it to server via GSM modem

Any one have idea

Thanks in advance

[Eric1968]

Re: How to hack MFP / MFD RTOS ( Operating System )

You don't have to develop anything, you can use @Remote or Kyofleetmanager to do this. These solutions also keep track of toner levels and various other things, so forget about reverse engineering the source code. I'm not saying that it's not possible, but I think it's a waste of time.

[skynetto]

Re: How to hack MFP / MFD RTOS ( Operating System )

If you cant use @Remote you can still develop a C++/C# program to work with SNMP data. On Ricoh RiDP (upon registration) you can find the Private MIB specification for all Ricoh machines. With these data you can gather all the information the MFP sends thru SNMP. Collectiong these data on a remote server or sending a mail from a client PC to your mail its just then a piece of cake.

[PA3040]

Re: How to hack MFP / MFD RTOS ( Operating System )

You don't have to develop anything, you can use @Remote or Kyofleetmanager to do this. These solutions also keep track of toner levels and various other things, so forget about reverse engineering the source code. I'm not saying that it's not possible, but I think it's a waste of time.

Those are valuable details and information

But unfortunately majority of our machines are non connectivity machines. Therefore we have to develop wireless connection to connect mobile Network, That is the only way I think we have to gather the information's

in our case all tech's must collect the copy counts of each machines from 25th to 30 each months for Invoice

any advice

[PA3040]

Re: How to hack MFP / MFD RTOS ( Operating System )

If you cant use @Remote you can still develop a C++/C# program to work with SNMP data. On Ricoh RiDP (upon registration) you can find the Private MIB specification for all Ricoh machines. With these data you can gather all the information the MFP sends thru SNMP. Collectiong these data on a remote server or sending a mail from a client PC to your mail its just then a piece of cake.

majority of our machines are only USB and not connected to PC.

My experiment models are Ricoh kir c3 and kir c4

Both models FRAM are communicating with BICU using SPI protocol, I can develop the embedded system to communicate with SPI to collect copy volume, apart from that not that much hard


Do you have any idea in this regard

[PA3040]

Re: How to hack MFP / MFD RTOS ( Operating System )

Good luck with Ricoh RSA firmware encrypted system.

Still I could not find abbreviation for RSA......sorry

[Eric1968]

Re: How to hack MFP / MFD RTOS ( Operating System )

Those are valuable details and information

But unfortunately majority of our machines are non connectivity machines. Therefore we have to develop wireless connection to connect mobile Network, That is the only way I think we have to gather the information's

in our case all tech's must collect the copy counts of each machines from 25th to 30 each months for Invoice

any advice

You're talking about Ricoh MFP's. MFP means that it's a multifunctional machine. So you're saying that all of these MFP's are not connected to a network? So the customer buys a machine (let's say an MP C3001, which can do network scanning, printing, etc.) and uses this machine without connecting it to the network, which leaves only the copy function available????

[PA3040]

Re: How to hack MFP / MFD RTOS ( Operating System )

[QUOTE=Eric1968;424186]You're talking about Ricoh MFP's. MFP means that it's a multifunctional machine. So you're saying that all of these MFP's are not connected to a network? So the customer buys a machine (let's say an MP C3001, which can do network scanning, printing, etc.) and uses this machine without connecting it to


Our models are MP2000 and MP2001L AA versions those are MFP's but No NIC

Sorry if you got misunderstood by my wrong explained

[Eric1968]

Re: How to hack MFP / MFD RTOS ( Operating System )

[QUOTE=PA3040;424192]

You're talking about Ricoh MFP's. MFP means that it's a multifunctional machine. So you're saying that all of these MFP's are not connected to a network? So the customer buys a machine (let's say an MP C3001, which can do network scanning, printing, etc.) and uses this machine without connecting it to


Our models are MP2000 and MP2001L AA versions this are MFP's but No NIC

Sorry if you get misunderstood by my wrong explained

No problem.

If the machines are not networked you've got a challenge!

[rthonpm]

Re: How to hack MFP / MFD RTOS ( Operating System )

To get anywhere on the heavily modified version of BSD Ricoh is using, you'd need super user access, which you won't get. If you were, you'd still have the issue of getting any kind of connection to a mobile network. With old school offline machines, your easiest way of getting metres is going to be the equally old school way of getting faxed metre sheets, or a manual collection once a month.