πNew WriteupβοΈ
βββββββββββββββ
πDate: Sun, 17 Sep 2023 14:09:43 GMT
βββββββββββββββ
βοΈTitle: HTBβββShibboleth | 87/100
βββββββββββββββ
πLink: https://medium.com/p/d8d35a9d93af
βββββββββββββββ
Tags: #ipmi #hackthebox #penetration_testing #zabbix #ctf_writeup
βββββββββββββββ
πDate: Sun, 17 Sep 2023 14:09:43 GMT
βββββββββββββββ
βοΈTitle: HTBβββShibboleth | 87/100
βββββββββββββββ
πLink: https://medium.com/p/d8d35a9d93af
βββββββββββββββ
Tags: #ipmi #hackthebox #penetration_testing #zabbix #ctf_writeup
Medium
HTBβββShibboleth | 87/100
Hi! Today Iβm working on Shibboleth from HackTheBox. This Medium rated machine had some really fun twists and turns to it. Afterβ¦
β€· Title: IPMIβββPort 623/UDP/TCPβββHow to exploit?
ββββββββββββββββββββββββ
πͺ Author: Very Lazy Tech
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 04 Apr 2025 09:02:07 GMT
ββββββββββββββββββββββββ
β Tags: #hacking #penetration_testing #bug_bounty #port_623 #ipmi
ββββββββββββββββββββββββ
πͺ Author: Very Lazy Tech
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 04 Apr 2025 09:02:07 GMT
ββββββββββββββββββββββββ
β Tags: #hacking #penetration_testing #bug_bounty #port_623 #ipmi
Medium
IPMI β Port 623/UDP/TCP β How to exploit?
β¨ Free Link
β€· Title: 22-Year-Old IPMI Flaw Exposes 24,000 Servers to Offline Password Cracking
ββββββββββββββββββββββββ
πͺ Author: Waqas
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 29 Jul 2026 09:10:26 +0000
ββββββββββββββββββββββββ
β Tags: #Security #22_Year_Old IPMI Flaw Exposes 24K Servers to Offline Password Cracking #BMC #Cybersecurity #IPMI #Lava #Password #Vulnerability
ββββββββββββββββββββββββ
πͺ Author: Waqas
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 29 Jul 2026 09:10:26 +0000
ββββββββββββββββββββββββ
β Tags: #Security #22_Year_Old IPMI Flaw Exposes 24K Servers to Offline Password Cracking #BMC #Cybersecurity #IPMI #Lava #Password #Vulnerability
Hackread
22-Year-Old IPMI Flaw Exposes 24,000 Servers to Offline Password Cracking
Researchers found 24,650 public BMC interfaces leaking IPMI password hashes, exposing servers to offline password cracking through a decades-old protocol flaw.
β€· Title: 36,872 Exposed BMCs Leak Password Hashes and Face In-the-Wild Attacks via CVE-2013-4786
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 03 Aug 2026 15:00:22 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #BMC #CVE_2013_4786 #Data Center Security #HPE iLO #IPMI #password_cracking #Supermicro
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 03 Aug 2026 15:00:22 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #BMC #CVE_2013_4786 #Data Center Security #HPE iLO #IPMI #password_cracking #Supermicro
Daily CyberSecurity
36,872 Exposed BMCs Leak Password Hashes and Face In-the-Wild Attacks via CVE-2013-4786
TL;DR Researchers at LAVA found 36,872 exposed BMCs on the public internet. Most leaked password-derived hashes before login through CVE-2013-4786, a 20-year-old IPMI 2.0 flaw rated high-severity.β¦