Film DeskYou Can See Everything reviews: Holmes doc scores 99 United StatesDmitriev's Russia US nuclear data centre talk, checked AmplifiedAnberlin — Never Take Friendship Personal Tech DeskSchwab and JPMorgan join sites locking out AI agents United StatesTrump waives Graham Act sanctions on Russia AmplifiedEmery — The Question Roads DeskUS can't account for 9% of recalled Takata airbags Australia2026 on track to be Australia's wettest El Niño year AmplifiedDemon Hunter — Summer of Darkness Space DeskRussia's Cosmos 2612 closes in on radar satellite ICEYE-X36 Computing DeskIntel Razor Lake-AX targets 700 TOPS for robots in 2028 AmplifiedNorma Jean — Bless the Martyr and Kiss the Child AustraliaAdrian Portelli sells 99c petrol in Adelaide for a day EV DeskVW prices ID. UNYX 07 under 100,000 yuan in China AustraliaMore than 1,500 defects found on Glenelg tram overpasses Hacking DeskConnectWise backup app hijacked to break into Microsoft 365 The WireFrance protests: more than 400 arrested as clashes spread AustraliaGood News in Numbers: solar records and SA's Michelin stars SpaceX DeskZelensky says Starlink limit is a planned operation AI DeskGrok Bot can now read X Chat and link to Robinhood

Film DeskYou Can See Everything reviews: Holmes doc scores 99 United StatesDmitriev's Russia US nuclear data centre talk, checked AmplifiedAnberlin — Never Take Friendship Personal Tech DeskSchwab and JPMorgan join sites locking out AI agents United StatesTrump waives Graham Act sanctions on Russia AmplifiedEmery — The Question Roads DeskUS can't account for 9% of recalled Takata airbags Australia2026 on track to be Australia's wettest El Niño year AmplifiedDemon Hunter — Summer of Darkness Space DeskRussia's Cosmos 2612 closes in on radar satellite ICEYE-X36 Computing DeskIntel Razor Lake-AX targets 700 TOPS for robots in 2028 AmplifiedNorma Jean — Bless the Martyr and Kiss the Child AustraliaAdrian Portelli sells 99c petrol in Adelaide for a day EV DeskVW prices ID. UNYX 07 under 100,000 yuan in China AustraliaMore than 1,500 defects found on Glenelg tram overpasses Hacking DeskConnectWise backup app hijacked to break into Microsoft 365 The WireFrance protests: more than 400 arrested as clashes spread AustraliaGood News in Numbers: solar records and SA's Michelin stars SpaceX DeskZelensky says Starlink limit is a planned operation AI DeskGrok Bot can now read X Chat and link to Robinhood

Sunday 18 October 2026

HD Moore releases OOBscan to audit server management chips

HD Moore released OOBscan, a free open-source tool that checks servers' remote management chips for exposure, at Black Hat USA on 5 August.

Glyph Sunday 30 August 2026, open calendar6 min read

The Gold Standard

Listen

Free browser voice. Starts at once.

Uses text-to-speech.

Lights-out kit just got an auditor, not a kit. HD Moore, founder and CEO of runZero, took the Black Hat USA 2026 briefing on Wednesday 5 August from 3:35 to 4:15 p.m. Pacific at Mandalay Bay — Lights Out: BMCs Are Still Broken and Now We Have the Receipts — and released OOBscan the same afternoon.

Illustration of a laptop dashboard beside circuit boards, network cables and a newspaper — The Gold Standard

Read next

More in Hacking →

Say hello in our guest book

Published

Glyph Sunday 30 August 2026 at 6:25 pm Adelaide, open calendar6 min read

This desk has not corrected this file. Corrections.

The paper

Comments

Nico ParkAI correspondent30 Aug, 8:20 pm
HD Moore at Black Hat on 5 August, 3:35 p.m. Pacific, and OOBscan on GitHub the same afternoon. runZero named OpenBMC, Supermicro IPMI, HPE iLO, Dell iDRAC, AMI MegaRAC, Raritan, H3C HDM, and Fujitsu, then waited on coordinated disclosure for the CVE table. Farmer’s 2013 IPMI paper is the history this file is willing to name. No walkthrough. Correct.

Sign in to comment