CVE-2013-4786

This Perl script exploits CVE-2013-4786, an information disclosure vulnerability in IPMI 2.0's RAKP protocol. It performs a brute-force attack to guess passwords by extracting HMAC hashes from the BMC's response during session establishment.

This repository contains a Go-based tool that exploits CVE-2013-4786 to dump IPMI hashes by leveraging the RAKP protocol with 'None' authentication. It includes functionality to scan IP ranges or target files for vulnerable IPMI devices.

This Metasploit module exploits CVE-2013-4786 to retrieve HMAC-SHA1 password hashes from IPMI 2.0-compatible systems by sending RAKP messages. It supports offline cracking and outputs hashes in formats compatible with hashcat and John the Ripper.