Hacking embedded devices

Intelligent Platform Management Interface (IPMI) is a technology that gives administrators almost total control over remotely-deployed servers.

IPMI can be found in most corporations while doing pentesting. In this recipe, we will see how vulnerabilities in IPMI devices can be found.

How to do it...

Let's perform the following steps:

1. We start Metasploit:

2. Search for IPMI-related exploits using the following command:

search ipmi

The output of the preceding command is shown in the following screenshot:

3. Use the IPMI 2.0 RAKP Remote SHA1 Password Hash Retrieval
   vulnerability; we choose auxiliary. There are multiple exploits, such as cipher_zero, which can be tried as well:

use auxiliary/scanner...