CosmicRakp

CosmicRakp Tabla de contenidos Introducción CVE-2013-4786 Instalación Uso Créditos Licencia Introducción CosmicRakp es una herramienta poderosa escrita en Go que permite a equipos de red team y pentesters volcar hashes de IPMI. Este proyecto busca ser eficiente, rápido y fácil de usar...

PT-2026-92020

OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defaults. The IPMI service then accepts a RAKP Message 3 whose HMAC is computed...

K16846: IPMI vulnerability CVE-2013-4786

Security Advisory Description The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol RAKP authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC...