WebUSBWebGPUWebPCIEWebNVMEWebSATAWebATX12V

AMI MegaRAC (the BMC web UI for servers) has this feature where they allow you to select a .iso image for a CD-ROM in the web console (next to the KVM/VNC viewer).

How did they implement the CD-ROM emulation?
They open a WebSockets connection to the BMC, emulate a SCSI CD-ROM drive in JavaScript (!) and send raw SCSI packets back&forth via WebSockets, which the BMC then forwards via internal USB to the host system.

legion495@mk.absturztau.be

@volpeon@icy.wyvern.rip WebDOCSIS

littlefox@gotosocial-dev.svc.0x0a.network

@manawyrm @volpeon oh goth it's beautiful I love it

manawyrm@chaos.social

@littlefox @volpeon less fortunate: they also fucked up the permissions checks on that websocket in a bunch of BMCs.

You can send arbitrary SCSI packets to the host system with this mechanism...
Both Linux and Windows really aren't hardened against evil block storage devices.

Imagine the rest of the story.

Abspeckgeflüster – Forum für Menschen mit Gewicht(ung)

WebUSBWebGPUWebPCIEWebNVMEWebSATAWebATX12V