Dell Chassis Compromised! Username: root Password: calvin for IP address: 10.1.1.5 Scanning IP addresses, this could take a few minutes depending on how large the subnet range… Written by Dave Kennedy and python delldrac.py 10.1.1.1/24ĭaves-MacBook-Pro-2:Desktop david$ python delldrac.py 10.1.1.1/16 Below is an example of the output:ĭaves-MacBook-Pro-2:Desktop david$ python delldrac.py This will give you the results of all of the default installations of the Dell DRAC and Dell Chassis Management Interfaces. It’s extremely quick in that it scans /24’s in less than a minute and class B’s in about an hour. Today, we are releasing a new tools called the Dell Drac and Chassis Scanner for Default Credentials v0.1a which will scan CIDR notations look for default installations. When the DRAC interface is installed, it installs with default credentials of username “root” and password of “calvin”. During a penetration test, the Dell DRAC installations (web interface) can lead to an entire compromise of the overall infrastructure and ultimately own everything else. Each blade has its own web interface that gets installed by default on 443 (HTTPS).

When a new Dell Chassis hardware infrastructure is installed, a web interface is also present to help with management of the Chassis. By David Kennedy in Penetration Testing, Security Testing & Analysis

Generate dell idrac enterprise license