3 ms·
Sure, I've always segregated BMC dedicated ports to a non-connected network. But the BMC can also talk on the regular ethernet ports whenever it feels like it.
by greglindahl 8y ago
Sure, I've always segregated BMC dedicated ports to a non-connected network. But the BMC can also talk on the regular ethernet ports whenever it feels like it.
- angry_octet 8y agoIt can usually only vampire onto the first ethernet port. Depends on the motherboard, whether both ports are e.g. Intel, or one Intel, the other something else. Also, usually only 1000base-T not 10G.
- yellowapple 8y agoI'm sure even 10baseT is more than enough to phone home.
- angry_octet 8y agoThe 1000base-T ports are often not connected to the production network, only the 10G.
- angry_octet 8y agoFFS downvote if I call you a Trumptard, but don't downvote if I'm right. Page 1-4: https://www.supermicro.com/manuals/other/IPMI_Users_Guide.pdf https://www.supermicro.com/manuals/other/IPMI_Users_Guide.pd...
- dsl 8y agoThe IPMI module can do DMA. It would be trivial to shim into the running kernel and talk to any interface the host has.
- angry_octet 8y agoBut that means the implant has to be active on every server, actively patching the kernel (and how long would that patch work with kernel changes). It would cause bugs, and be likely to be discovered. Maybe an option on a specific machine that you knew was being used by the target.