http://fish2.com/ipmi/
https://community.rapid7.com/community/metasploit/blog/2013/07/02/a-penetration-testers-guide-to-ipmi
https://community.rapid7.com/community/metasploit/blog/2013/11/06/supermicro-ipmi-firmware-vulnerabilities
Several scan/pentest scripts:
https://github.com/zenfish/ipmi
https://github.com/alexoslabs/ipmitest