Enumerating CICS user IDs for the CESL/CESN login screen
CESN and CESL are single sign-on transactions in CICS. On these screens, users enter their credentials. As attackers, it is possible to enumerate valid user IDs to authenticate to the mainframe.
In the following recipe, you will learn how to use Nmap to enumerate CICS user IDs for CESL/CESN login screens.
How to do it...
To find valid user IDs for the CESL/CESN login screen, use the following Nmap command:
$ nmap -sV --script cics-user-enum <target>
If the script finds a valid user ID, it will be included in the results, as follows:
PORT STATE SERVICE 23/tcp open tn3270 | cics-user-enum: | Accounts: | PLAGUE: Valid - CICS User ID |_ Statistics: Performed 31 guesses in 114 seconds, average tps: 0
How it works...
The nmap -sV --script cics-user-enum <target> command launches the cics-user-enum NSE script when...
