Oob penetration testing

Feb 1, We are planning to start pen testing of out of band management devices (HP iLO & Dell DRAC). Can you please share any reference on how to test / methodology when OOB mgmt devices are in scope of testing. Thanks,. Phani. Re: OOB Management devices pen testing, c1rcl3s, 2/1/16 AM.

penetration testing. We can perform both stealing of NetNTLM hashes and SMB relay attacks combining with XSS. If the XSS is persistent, each time the victim visits the page he will be infected. Note that when dealing with JavaScript you are under the Same Origin Policy (SOP).