ayoul3/cicspwn

CICSpwn is a tool to pentest a CICS Transaction servers on z/OS.

cicspwn's Issues

Issue with interaction to py3270

i keep getting an erro when running the tool:

Traceback (most recent call last):
File "./cicspwn.py", line 2607, in
main(results)
File "./cicspwn.py", line 2355, in main
if not check_valid_applid(results.applid, do_authent,custom_cics=results.custom_cics):
File "./cicspwn.py", line 347, in check_valid_applid
do_authenticate(results.userid, results.password, pos_pass)
File "./cicspwn.py", line 298, in do_authenticate
em.move_to(pos_pass,pwd_y_pos)
File "/usr/local/lib/python2.7/dist-packages/py3270-0.3.4-py2.7.egg/py3270/init.py", line 383, in move_to
xpos -= 1
TypeError: unsupported operand type(s) for -=: 'NoneType' and 'int'

As i see it, it's more of a py3270 issue but wanted to see if anyone had any tips.

ascii conversion stopping error

Traceback (most recent call last):
File "cicspwn/cicspwn.py", line 2604, in
connect_zOS(results.IP+":"+results.PORT)
File "cicspwn/cicspwn.py", line 283, in connect_zOS
if not em.is_connected():
File "/usr/local/lib/python2.7/dist-packages/py3270/init.py", line 336, in is_connected
self.exec_command(b'ignore')
File "/usr/local/lib/python2.7/dist-packages/py3270/init.py", line 299, in exec_command
c.execute()
File "/usr/local/lib/python2.7/dist-packages/py3270/init.py", line 77, in execute
return self.handle_result(result.decode('ascii'))
File "/usr/local/lib/python2.7/dist-packages/py3270/init.py", line 95, in handle_result
raise CommandError(msg.decode('ascii'))
py3270.CommandError: Unknown action: ignore

SyntaxError: invalid syntax

i have this error

 cicspwn-master]# python3.5 cicspwn.py localhost 992 -i -a cics
  File "cicspwn.py", line 127
    except CommandError, e:
                       ^
SyntaxError: invalid syntax

"Could not find a password field"

I have tried to use the tool on what I hope is my freshly secured CICS install (python cicspwn.py -a CICS localhost 3270 -i -U MYID -P MYPASS) but am getting the error "[#] Could not find a password field. Was looking for "password", "code" or "pass" strings"

However my CICS screen looks like this so I'm a bit confused why I'm getting the above error message:

not functioning..ends up with error

Traceback (most recent call last):
File "cicspwn.py", line 18, in
import py3270
ImportError: No module named py3270