
Security News
Static vs. Runtime Reachability: Insights from Latio’s On the Record Podcast
The Latio podcast explores how static and runtime reachability help teams prioritize exploitable vulnerabilities and streamline AppSec workflows.
github.com/bmc-toolbox/bmclib
A library to interact with BMCs of different vendors
Hardware | Supported | Partially Supported |
---|---|---|
Dell M1000e | :heavy_check_mark: | |
Dell iDRAC8 | :heavy_check_mark: | |
Dell iDRAC9 | :heavy_check_mark: | |
HP c7000 | :heavy_check_mark: | |
HP iLO3 | :heavy_check_mark: | |
HP iLO4 | :heavy_check_mark: | |
HP iLO5 | :heavy_check_mark: | |
Supermicro X10 | :heavy_check_mark: | |
Supermicro X11 | :heavy_check_mark: |
Hardware | Supported |
---|---|
Dell M1000e | :heavy_check_mark: |
Dell iDRAC8 | :heavy_check_mark: |
Dell iDRAC9 | :heavy_check_mark: |
HP c7000 | :heavy_check_mark: |
HP iLO2 | :heavy_check_mark: |
HP iLO3 | :heavy_check_mark: |
HP iLO4 | :heavy_check_mark: |
HP iLO5 | :heavy_check_mark: |
Supermicro X9 | |
Supermicro X10 | |
Supermicro X11 |
Hardware | User accounts | Syslog | NTP | SNMP | Ldap | Ldap groups | BIOS | HTTPS Cert |
---|---|---|---|---|---|---|---|---|
Dell M1000e | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | - | ||
Dell iDRAC8 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
Dell iDRAC9 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: |
HP c7000 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | - | ||
HP iLO4 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
HP iLO5 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | |
Supermicro X10 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | ||
Supermicro X11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: |
export BMCLIB_LOG_LEVEL=debug for bmclib to debug log
export BMCLIB_LOG_LEVEL=trace for bmclib to trace log
export BMCLIB_TEST=1 to run on a dummy bmc (dry run).
All of the tooling that uses bmclib is part of the bmc-toolbox
dora uses bmclib to identify and inventorize assets.
bmcbutler uses bmclib to manage configuration on BMCs.
actor uses bmclib to abstract away various BMCs and expose a consistent web API to interact with them.
bmclib was originally developed for Booking.com. With approval from Booking.com, the code and specification were generalized and published as Open Source on github, for which the authors would like to express their gratitude.
bmclib interfaces with Redfish with https://github.com/stmcginnis/gofish
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Latio podcast explores how static and runtime reachability help teams prioritize exploitable vulnerabilities and streamline AppSec workflows.
Security News
The latest Opengrep releases add Apex scanning, precision rule tuning, and performance gains for open source static code analysis.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.