Description

  • Intelligent Platform Management Interface allows for the management of a host’s CPU, firmware (BIOS), and operating system
  • Requires Baseboard Management Controller , Intelligent Chassis Management Bus, Intelligent Platform Management Bus, IPMI Memory, Communications Interfaces
  • Systems that use IPMI are Baseboard Management Controllers and are built into many motherboards

Port

  • UDP Port 623

Interaction / Commands

  • try out default passwords
  • there is a flaw in RAKP protocol (IPMI 2.0), which can be used to find password hash for valid user account
    • use Metasploit module ipmi_dumphashes

Footprinting

sudo nmap -sU --script ipmi-version -p 623 host_name

or use Metasploit’s auxiliary ipmi_version module