HPE iLO4 Authentication Bypass (CVE-2017-12542)

Exploits CVE-2017-12542 in HPE Integrated Lights-Out 4 before 2.53: unauthenticated REST access to /rest/v1/AccountService/Accounts and related APIs. !/usr/bin/env python3 -- coding: utf-8 -- """HPE iLO4 authentication bypass CVE-2017-12542.""" import json from kittysploit import from...

HPE iLO4 Add New Administrator User

!/usr/bin/env python """ Exploit trigger was presented @reconbrx 2018 Vulnerability found and documented by synacktiv: https://www.synacktiv.com/posts/exploit/rce-vulnerability-in-hp-ilo.html Original advisory from HP: https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03769enus Other...

HPE iLO4 < 2.53 - Add New Administrator User Exploit

Exploit for multiple platform in category remote exploits !/usr/bin/env python """ Exploit trigger was presented @reconbrx 2018 Vulnerability found and documented by synacktiv: https://www.synacktiv.com/posts/exploit/rce-vulnerability-in-hp-ilo.html Original advisory from HP:...

HPE Integrated Lights-Out 4 Remote Code Execution Vulnerability(CVE-2017-12542)

Subverting your server through its BMC: the HPE iLO4 case ========================================================= Introduction ------------ iLO is the server management solution embedded in almost every HP servers for more than 10 years. It provides every feature required by a system...