HD Moore's Penetration Tester's Guide to IPMI and BMCs(community.rapid7.com)

https://community.rapid7.com/community/metasploit/blog/2013/06/23/a-penetration-testers-guide-to-ipmi