> For the complete documentation index, see [llms.txt](https://www.xtormin.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.xtormin.com/pentesting-en-infraestructuras/servicios/ipmi.md).

# IPMI

<table data-header-hidden><thead><tr><th width="195"></th><th></th></tr></thead><tbody><tr><td><strong>Puerto/s</strong></td><td>623</td></tr><tr><td><strong>Protocolo/s</strong></td><td>UDP, TCP</td></tr></tbody></table>

## Enumeración

### Metasploit

```bash
msfconsole
```

```bash
use auxiliary/scanner/ipmi/ipmi_version
set RHOSTS file:/root/Pentest/scope/services/ipmi/ipmi_hosts.txt
run
```

```bash
use auxiliary/scanner/ipmi/ipmi_cipher_zero
set RHOSTS file:/root/Pentest/scope/services/ipmi/ipmi_hosts.txt
run
```

```bash
use auxiliary/scanner/ipmi/ipmi_dumphashes
set RHOSTS file:/root/Pentest/scope/services/ipmi/ipmi_hosts.txt
run
```
