DEF CON 31 - Breaking BMC The Forgotten Key to the Kingdom - Alex Tereshkin, Adam Zabrocki

The Baseboard Management Controller (BMC) is a specialized microcontroller embedded on the motherboard, typically used in servers and other enterprise-level hardware. The security of the BMC is critical to the overall security of the system, as it provides a privileged level of access and control over the hardware components of the system, including the ability to perform firmware updates, and even power the system on and off remotely.

When the internal offensive security research team was analyzing one of the …

access adam alex baseboard management controller bmc breaking con controller critical def def con def con 31 embedded enterprise hardware key management microcontroller motherboard privileged security servers system