zipmi – https://github.com/zenfish/zipmi – is a pure-Python IPMI/BMC stack — an `ipmitool`-style CLI plus a library where every byte is an inspectable and mangleable object. Built for people/AI (are AIs people yet?) who need to understand, test, or research BMCs, not just run commands.
– Every IPMI field is real, not an opaque blob. Dissect, build, corrupt, fuzz, and replay any packet with full byte-level visibility — the thing `ipmitool` and `pyghmi` don’t give you. Drop into the middle of a session and ask “what does this byte mean?” or “what if I flip field X?”
– Deep OEM coverage: 1725 vendor commands most tools/people don’t know exist. Dell iDRAC6/9/10, Supermicro X11/X14, AMI MegaRAC, and 9 OpenBMC vendor flavors — reverse-engineered from firmware and Ghidra, callable by name, not just raw opcodes.
– Security research batteries included. Full IPMI 2.0 cipher suites 0–14 + 17, cipher-0 and RAKP-hash checks, unauthenticated `bmc-id` fingerprinting, plus a built-in virtual BMC and fuzzers to test against with no hardware.
– friendly (hahhahahh… ipmi hex bytes friendly….) color coded output (with -d) showing the full request/response back-and-forth with every packet field labeled.
Big thanks to Claude Code, which worked with me over the last half-year on this project — all aspects of the package.
I’ll put some more out when I catch a breath.
Leave a Reply
You must be logged in to post a comment.