Mainframe Hacking in 2019
summary
Mainframe offensive work in 2019 focuses on measurable techniques and tools: an IMP masscan+python scanner collects ~600 TN3270 screenshots, an Nmap Lua 3270 library (added 2015, shipped in Kali) enables kicks enumeration and TSO/user enumeration (whole userlist in ~10 minutes), and Metasploit z/OS modules plus kicksPwn/FTP→JCL let attackers upload and run jobs to get TSO/Unix shells. Demos show APF escalation (lvaPF) yields system special/operations, network job entry lets nodes submit jobs as arbitrary users, and full compromise follows from one cracked account.
AI-written summary · about
chapters (6)
- 0:00Introduction and importance
- 10:33Mainframe basics and architecture
- 26:53Mapping and attacking mainframes
- 37:55Privilege escalation and control
- 43:35Live demo and exploitation
- 53:11Closing and community
related talks
46mDealing The Perfect Hand - Shuffling Memory Blocks On z/OS
39mHow to think like a hacker
51mIndustrial Control Systems : Pentesting PLCs 101 (Part 2/2)
58mHacking in 2016 - How is our systems broken?
01h 06mHow hacking works
47mLive Hacking: Breaking into Your Web App
55mHow hacking works
46mNakatomi Space: Lateral Movement as L1 Post-exploitation in OT