I looked at this back in 2013. Here's some slides from a talk I did after spending 48 hours with them[1]. The BMC back then was by a company called ATEN, who m

I looked at this back in 2013. Here's some slides from a talk I did after spending 48 hours with them[1]. The BMC back then was by a company called ATEN, who make KVMs. The modern BMC is by ASPEED - I don't know if they're related. What's described in the article is exactly how the old ATEN firmware worked normally. It was a spectacularly poor product from a security perspective. [1] - http://mandalorian.com/dl/himym.pdf http://mandalorian.com/dl/himym.pdf