From IPMI to Full Infrastructure Compromise via Proxmox
In this blog, I’ll walk through how a single exposed IPMI/BMC interface let me take full control of a physical server — and how that server turned out to be a Proxmox hypervisor, handing me every virtual machine and container running on top of it, along with the backups behind them. Prologue “A bug is never just a mistake. It represents something bigger. An error of thought that makes you who you are.” — Elliot Alderson, Mr. Robot ...