I had the good fortune to present at ShmooCon 2023 with Jan Nunez on our research into Mainframe CICS applications. This presentation is the culmination of over a year of research and we were happy to present as well as demo our work-in-progress tool.
Over the course of this talk we discuss:
- What are mainframes and why they are so critical to today’s infrastructure
- How mainframe applications work
- How the TN3270 protocol works
- How to break the TN3270 protocol
- How to mitigate the attacks demonstrated
You can watch the full presentation below: