CosmicRakp

CosmicRakp 目录 简介 CVE-2013-4786 安装 使用 致谢 许可证 简介 CosmicRakp 是一款使用 Go 语言编写的强大工具，允许红队成员和渗透测试人员导出 IPMI 哈希值。该项目旨在高效、快速且易于使用。 CVE-2013-4786 该工具利用了 CVE-2013-4786 中详述的漏洞，允许未经授权的用户通过 RAKP（远程认证密钥协议）机制从 IPMI 设备中检索加盐密码哈希值。实现方式是通过启动一个 IPMI 2.0 RAKP 认证过程，使用允许 'None' 认证的密码套件，从而能够检索加盐密码哈希值。 安装 root@kitploit:...

VulnCheck KEV: CVE-2013-4786

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol RAKP authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC...

CVE-2013-4786 for LOM vulnerability

Mitigation recommendations for vulnerability CVE-2013-4786: 1. Setup SSL on the LOM port to encrypt credentials during login. 2. Follow the Secure Deployment Guide for Citrix ADC to isolate all management ports including the BMC management port on a management VLAN as is industry best practice...

[security bulletin] HPSBHF02981 rev.1 - HP Integrated Lights-Out 2, 3, and 4 (iLO2, iLO3, iLO4), IPMI 2.0 RCMP+ Authentication Remote Password Hash Vulnerability (RAKP)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04197764 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04197764 Version: 1 HPSBHF02981 rev....

CVE-2013-4786

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol RAKP authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC. Recent assessments: Assessed...

CVE-2013-4786

creationtimestamp| type| source ---|---|--- 2013-07-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38633 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ipmi/ipmidumphashes.rb 2023-10-24 15:02:57+00:00|...

IPMI 2.0 RAKP Remote SHA1 Password Hash Retrieval

This module identifies IPMI 2.0-compatible systems and attempts to retrieve the HMAC-SHA1 password hashes of default usernames. The hashes can be stored in a file using the OUTPUTFILE option and then cracked using hmacsha1crack.rb in the tools subdirectory as well hashcat cpu 0.46 or newer using...