Nmap ipmi-version NSE Script

Script Overview

---

Script source code: https://github.com/nmap/nmap/tree/master/scripts/ipmi-version.nse
Script categories: discovery, safe
Target service / protocol: asf-rmcp, udp
Target network port(s): 623
List of CVEs: -

Script Description

---

The ipmi-version.nse script performs IPMI Information Discovery through Channel Auth probes.

Ipmi-version NSE Script Arguments

---

The ipmi-version.nse script does not have any arguments.

Ipmi-version NSE Script Example Usage

---

Here's an example of how to use the ipmi-version.nse script:

nmap -sU --script ipmi-version -p 623 <host>

Ipmi-version NSE Script Example Output

---

Here's a sample output from the ipmi-version.nse script:

PORT     STATE SERVICE  REASON
623/udp  open|filtered  unknown
| ipmi-version:
|   Version: IPMI-2.0
|   UserAuth: password, md5, md2
|   PassAuth: null_user
|_  Level: 1.2,2.0

Ipmi-version NSE Script Example XML Output

---

Here's a sample XML output from the ipmi-version.nse script produced by providing the -oX <file> Nmap option:

 <table>
   <table key="Version">
     <elem>IPMI-2.0</elem>
   </table>

   <table key="UserAuth">
     <elem>password</elem>
     <elem>md5</elem>
     <elem>md2</elem>
   </table>

   <table key="PassAuth">
     <elem>kg_default</elem>
     <elem>null_user</elem>
   </table>

   <table key="Level">
     <elem>1.2</elem>
     <elem>2.0</elem>
   </table>
 </table>

Author

---

• Claudiu Perta [email protected]>

References

---

• https://nmap.org/nsedoc/scripts/ipmi-version.html
• https://github.com/nmap/nmap/tree/master/scripts/ipmi-version.nse

See Also

---

Related NSE scripts to the ipmi-version.nse script:

• ipmi-brute.nse
• ipmi-cipher-zero.nse

Visit Nmap NSE Library for more scripts.

The ipmi-version.nse script may fail with the following error messages. Check for the possible causes by using the code snippets highlighted below found in the script source code. This can often times help in identifying the root cause of the problem.

IPMI - Invalid response

---

Here is a relevant code snippet related to the "IPMI - Invalid response" error message:

83:	  nmap.set_port_state(host, port, "open")
84:	
85:	  -- Invalid reply
86:	  local info = ipmi.parse_channel_auth_reply(reply)
87:	  if info["ipmi_command"] ~= 56 then
88:	    return "IPMI - Invalid response"
89:	  end
90:	
91:	  -- Valid reply
92:	  local Version = {}
93:	  if info["ipmi_compat_20"] then