The (M)ainf(RAY)me Vulnerability Scanner
M-RAY is designed to be an extensible tool for pentesters that can:
- Identify misconfigurations and and vulnerabilities in z/OS
- Simplify the process of running REXX scripts
- Clone the repository
- Change directories into the m-RAY directory
- Install dependencies with
pip install -r requirements.txt
Use tso option.
Provide user credentials for SSH, can be a password or a private key.
Use unix option.
Provide user credentials for SSH, can be a password or a private key.
Use recon option.
Provide user credentials for SSH, can be a password or a private key.
Provides information about the User Catalog.
Use enum option.
Provide user credentials for SSH, can be a password or a private key.
Select each script you would like to run. Script will be uploaded to a directory of
the user's choice, executed, results returned, and the script removed from the upload directory.
- Soldier of Fortran's Mainframe Enum Script: https://github.com/mainframed/Enumeration
- Jim Taylor's SETRRCVT Script: https://github.com/lnlyssg/zos/blob/main/SETRRCVT.rexx