Outline
Here's what we cover in this class.
-
Day 1 - Morning
Intro to the OS
We start with a simple introduction to the operating system including its history, how to navigate around, patching, accessing memory and system boot. We also cover CICS and how its used in a typical enterprise.
Labs: Creating folders, copy/paste files. Access memory with REXX. Accessing CICS and a real CICS transaction. -
Day 1 - Afternoon
Security, JCL and Shells
After lunch we cover how security is managed on a mainframe, then we dive deep in to how to write JCL followed by REXX, C and HLASM. We then take a tour of the TN3270 protocol ending the day.
Labs: RACF commands and SURROGAT. REXX and C shell with JCL. TN3270 scripting and attacks. -
Day 2 - Morning
How to do a Pentest
In Day 2 we cover the steps of a pentest. Before lunch cover the areas of reconnaissance, how to get a shell/interact with the mainframe, and enumeration once you're on the mainframe.
Labs: Nmap. FTP and JCL. REXX Enumeration. -
Day 2 - Afternoon
Owning the Mainframe
We wrap up the training with offline password cracking and some of the many ways to do privilege escalation on a mainframe.
Labs: Crack passwords. Privilege escalation with REXX and APF. -
Capture
the
Flag!
