code, dinosaurs, embedded, ipmi, python, security, tech

Get Device ID (moar IPMI… yawn….)

October 12, 2014

I’d had this sitting around for awhile and thought I’d take another look at it; in this I simply toss out an IPMI Get Device ID command and see what happens....

code, embedded, ipmi, security, tech

mega mega mega… chan chan chan….

September 4, 2014

Or… Notes on the IPMI Protocol Security Model. I wrote in Sold Down the River about the curious aspects of channels and authentication and users and all that stuff. Here’s...

BMC, crypto, embedded, ipmi, tech, work

Even more IPMI, woohoo!

June 5, 2014

I wrote a small paper surveying the scene of IPMI in the wild – Sold Down the River – the title of which might give you some clue as to...

code, embedded, ipmi, security

more IPMI than you can shake a stick at….

May 12, 2014

I’ve long wanted a Get Channel Cipher Suite command w/o authentication, so I wrote a script to do so; those interested can get it here: https://github.com/zenfish/ipmi/blob/master/ipmi-get-ciphers.py Actually none of the...

code, embedded, ipmi, python

dump supermicro stuff

January 25, 2014

A trivial utility to dump password/account information from a special file found on a SM BMC (see this R7 post about the PSBlock file.) (Later edit – put a new...

ipmi, security, tech, Uncategorized, web

Linda and Doris rule the ‘net

July 3, 2013

Some misc ramblin’ notes/data on IPMI & SSL Certificates. So I used the SSL observatory software (oddly written, but still cool) to scan for certificates on a bit over 300K...