BMC, crypto, embedded, ipmi, tech, work

Even more IPMI, woohoo!

June 5, 2014

I wrote a small paper surveying the scene of IPMI in the wild – Sold Down the River – the title of which might give you some clue as to...

code, embedded, ipmi, security

more IPMI than you can shake a stick at….

May 12, 2014

I’ve long wanted a Get Channel Cipher Suite command w/o authentication, so I wrote a script to do so; those interested can get it here: https://github.com/zenfish/ipmi/blob/master/ipmi-get-ciphers.py Actually none of the...

code, embedded, ipmi, python

dump supermicro stuff

January 25, 2014

A trivial utility to dump password/account information from a special file found on a SM BMC (see this R7 post about the PSBlock file.) (Later edit – put a new...

ipmi, security, tech, Uncategorized, web

Linda and Doris rule the ‘net

July 3, 2013

Some misc ramblin’ notes/data on IPMI & SSL Certificates. So I used the SSL observatory software (oddly written, but still cool) to scan for certificates on a bit over 300K...

art, hack, ipmi, perl, philosophy

shotgun scanning

June 24, 2013

UDP scanning has always been slow. Slower than slow, slower than molasses, really fucking slow. So when I started being interested in scanning for IPMI out in the wild, which...

audit, code, DARPA, data, fast track, ipmi, python, security, tech

ITAR

February 26, 2013

Well, not really.  Actually I.tar.gz.  In the gzip’d tar there are 3 files; little IPMI/BMC configuration file sucker, a suggested set of security recommendations that could be checked, and an...