Record · corpus.blog/posts/01a0ca8c-5818-702e-a631-4a3dd1f83712

Approach to mainframe penetration testing on z/OS

Kaspersky Securelist · published 20 August 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 95
Words captured: 5,586

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/hacksomeheavymetal/zOS/blob/master/pentesting.md

github.com

https://github.com/samanL33T/Awesome-Mainframe-Hacking

github.com

https://github.com/botesjuan/mainframe-pentest

github.com

https://www.ibm.com/products/resource-access-control-facility

ibm.com

https://github.com/klsecservices/zos-mindset

github.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/23091320/zOS_mainframe_pentesting_01_1.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19154640/zos_mainframe_pentesting_02.png

media.kasperskycontenthub.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=descriptions-zos-unix-system-services

ibm.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=jobs-what-is-jes

ibm.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=more-what-is-data-set

ibm.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=interfaces-what-is-tso

ibm.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19154933/zos_mainframe_pentesting_03.png

media.kasperskycontenthub.com

https://github.com/lanjelot/patator

github.com

https://github.com/zedsec390/NMAP

github.com

https://github.com/hacksomeheavymetal/zOS/blob/master/default_accounts.txt

github.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=racf-changing-your-password

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=exits-new-password-phrase-exit-ichpwx11

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=guide-racf-installation-exits

ibm.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=zos-what-is-racf

ibm.com

https://docs.broadcom.com/doc/ca-acf2

docs.broadcom.com

https://docs.broadcom.com/doc/ca-top-secret

docs.broadcom.com

https://www.ibm.com/docs/en/linux-on-systems?topic=lvm-http-server

ibm.com

https://github.com/vanhauser-thc/thc-hydra

github.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=zc-processing-work-zos-how-system-starts-manages-batch-jobs

ibm.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19155418/zos_mainframe_pentesting_04.png

media.kasperskycontenthub.com

https://github.com/mainframed/NC110-OMVS/blob/master/Python%20Scripts/NetEBCDICat.py

github.com

https://www.commandlinux.com/man-page/man1/nc.1.html

commandlinux.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=interfaces-what-is-zos-unix

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=protocols-introduction-network-job-entry-nje

ibm.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19160723/zos_mainframe_pentesting_05.png

media.kasperskycontenthub.com

https://www.alchemistowl.org/pocorgtfo/pocorgtfo12.pdf

alchemistowl.org

https://github.com/zedsec390/NJElib

github.com

https://en.wikipedia.org/wiki/Virtual_Telecommunications_Access_Method

en.wikipedia.org

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19160851/zos_mainframe_pentesting_06.png

media.kasperskycontenthub.com

https://en.wikipedia.org/wiki/IBM_3270

en.wikipedia.org

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19160942/zos_mainframe_pentesting_07.png

media.kasperskycontenthub.com

http://x3270.bgp.nu/

x3270.bgp.nu

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19161047/zos_mainframe_pentesting_08.png

media.kasperskycontenthub.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=zos-introduction-cics

ibm.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19161133/zos_mainframe_pentesting_09.gif

media.kasperskycontenthub.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=interfaces-what-is-ispf

ibm.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19161208/zos_mainframe_pentesting_10.gif

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19161241/zos_mainframe_pentesting_11.png

media.kasperskycontenthub.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=scd-tsocmd-run-tsoe-command-from-shell-including-authorized-commands

ibm.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=zos-introduction-websphere-application-server

ibm.com

https://nvd.nist.gov/vuln/detail/CVE-2012-5955

nvd.nist.gov

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/14095644/zos-mainframe-pentesting-21.png

media.kasperskycontenthub.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=zos-what-is-saf

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=areas-acee-accessor-environment-element

ibm.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=integrity-what-is-authorized-program-facility

ibm.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19161548/zos_mainframe_pentesting_13.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19161633/zos_mainframe_pentesting_14.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19161816/zos_mainframe_pentesting_15.png

media.kasperskycontenthub.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=labels-assigning-security-data-sets

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=commands-controlling-use-operator

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=security-using-unixpriv-class-profiles

ibm.com

https://www.ibm.com/docs/en/zos/2.5.0?topic=tape-dasd-volume-authority

ibm.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=set-what-are-dasd-volumes-labels

ibm.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19162127/zos_mainframe_pentesting_16.png

media.kasperskycontenthub.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=smpe-checking-that-you-have-appropriate-access

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=descriptions-extattr-set-reset-display-extended-attributes-files

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=resources-authorizing-access-racf-protected

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=tsoe-protecting-tso-resources

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=syntax-testauth-command

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=zos-mvs

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=command-updating-apf-list

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=srrc-supplied-resource-classes-zos-systems

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=users-summary-steps-defining

ibm.com

https://www.ibm.com/docs/da/zos/2.4.0?topic=phrases-levels-authority

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=users-user-attributes

ibm.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=class-steps-setting-up-bpxsuperuser

ibm.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=unix-omvs-command-shell-session

ibm.com

https://www.ibm.com/docs/en/zos/3.1.0?topic=submitted-allowing-surrogate-job-submission

ibm.com

https://github.com/mainframed/TShOcker/blob/master/CATSO.rexx

github.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=configuration-racf-resource-classes

ibm.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19163330/zos_mainframe_pentesting_17.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19164105/zos_mainframe_pentesting_18.png

media.kasperskycontenthub.com

https://github.com/mainframed/Enumeration/blob/master/OMVSEnum.sh

github.com

https://www.ibm.com/docs/en/zos/2.4.0?topic=services-managing-hierarchical-file-system-data-sets

ibm.com

https://www.ibm.com/docs/en/zos-basic-skills?topic=systems-what-is-zfs-file-system

ibm.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19164149/zos_mainframe_pentesting_19.png

media.kasperskycontenthub.com

https://nvd.nist.gov/vuln/detail/CVE-2012-5951

nvd.nist.gov

https://github.com/mainframed/logica/blob/master/fixed/kuku.rx

github.com

https://www.ibm.com/docs/en/was/8.5.5?topic=files-changing-encoding-algorithm-xor

ibm.com

https://github.com/interference-security/scripts-tools-shells/blob/master/websphere-xor-password-decode-encode.py

github.com

https://publibz.boulder.ibm.com/epubs/pdf/glda2a31.pdf

publibz.boulder.ibm.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/08/19164809/zos_mainframe_pentesting_20.png

media.kasperskycontenthub.com

https://github.com/klsecservices/racfudit

github.com

https://github.com/mainframed/NC110-OMVS/blob/master/binary/nc

github.com

https://github.com/mainframed/MainTP

github.com

https://github.com/mainframed/TShOcker

github.com

https://github.com/ayoul3/cicspwn

github.com

https://github.com/sensepost/birp

github.com

https://github.com/mainframed/logica/blob/master/utcam.sh

github.com

https://github.com/zBit31/testauth

github.com