ayoul3 / cicspwn Goto Github PK
View Code? Open in Web Editor NEWCICSpwn is a tool to pentest a CICS Transaction servers on z/OS.
CICSpwn is a tool to pentest a CICS Transaction servers on z/OS.
i have this error
cicspwn-master]# python3.5 cicspwn.py localhost 992 -i -a cics
File "cicspwn.py", line 127
except CommandError, e:
^
SyntaxError: invalid syntax
i keep getting an erro when running the tool:
Traceback (most recent call last):
File "./cicspwn.py", line 2607, in
main(results)
File "./cicspwn.py", line 2355, in main
if not check_valid_applid(results.applid, do_authent,custom_cics=results.custom_cics):
File "./cicspwn.py", line 347, in check_valid_applid
do_authenticate(results.userid, results.password, pos_pass)
File "./cicspwn.py", line 298, in do_authenticate
em.move_to(pos_pass,pwd_y_pos)
File "/usr/local/lib/python2.7/dist-packages/py3270-0.3.4-py2.7.egg/py3270/init.py", line 383, in move_to
xpos -= 1
TypeError: unsupported operand type(s) for -=: 'NoneType' and 'int'
As i see it, it's more of a py3270 issue but wanted to see if anyone had any tips.
I have tried to use the tool on what I hope is my freshly secured CICS install (python cicspwn.py -a CICS localhost 3270 -i -U MYID -P MYPASS) but am getting the error "[#] Could not find a password field. Was looking for "password", "code" or "pass" strings"
However my CICS screen looks like this so I'm a bit confused why I'm getting the above error message:
Traceback (most recent call last):
File "cicspwn/cicspwn.py", line 2604, in
connect_zOS(results.IP+":"+results.PORT)
File "cicspwn/cicspwn.py", line 283, in connect_zOS
if not em.is_connected():
File "/usr/local/lib/python2.7/dist-packages/py3270/init.py", line 336, in is_connected
self.exec_command(b'ignore')
File "/usr/local/lib/python2.7/dist-packages/py3270/init.py", line 299, in exec_command
c.execute()
File "/usr/local/lib/python2.7/dist-packages/py3270/init.py", line 77, in execute
return self.handle_result(result.decode('ascii'))
File "/usr/local/lib/python2.7/dist-packages/py3270/init.py", line 95, in handle_result
raise CommandError(msg.decode('ascii'))
py3270.CommandError: Unknown action: ignore
Traceback (most recent call last):
File "cicspwn.py", line 18, in
import py3270
ImportError: No module named py3270
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.