RE: Default passwords for TSO and CICS ?

From: Shane Miller (SMillerat_private)
Date: Fri Jul 05 2002 - 14:43:07 PDT

  • Next message: Evrim ULU: "Re: blind demodulation - sound card - lucent winmodem - new topics"

    Default accounts and passwords for VM/CMS and CICS
    
    CICS:
    SYSA	SYSA
    PROG	PROG
    OPER	OPER
    $SRV	$SRV
    VCSRV	VCSRV
    PRODCICS	PRODCI
    POST	BASE
    CICSUSER	CISSUS
    DBDCCICS	DBDCCIC
    FORSE	FORSE
    
    VM/CMS: These passes are IDS
    Operator
    MAINT
    OPERATIONS
    OPERATNS
    CMSBATCH
    VTAM
    
    
    
    > -----Original Message-----
    > From: Cold Fire [mailto:coldfireat_private] 
    > Sent: Thursday, July 04, 2002 6:48 PM
    > To: Rainer Duffner
    > Cc: pen-testat_private
    > Subject: Re: Default passwords for TSO and CICS ?
    > 
    > 
    > On Thu, Jul 04, 2002 at 09:03:58PM +0000, Rainer Duffner wrote:
    > 
    > <snip>
    > > 
    > > I must admit that I don't no either of the above OSs - I 
    > have limited
    > > experience with zVM/CMS (-> ipl Linux S/390), but some of 
    > the usual default 
    > > accounts I tried didn't work.
    > > Does anybody know some TSO default accounts, if any ?
    > > Or CICS ? 
    > 
    > Nice to see something interesting on this list, these arn't 
    > defaults, but you might have some luck.
    > 
    > CF
    > 
    > 
    > Common VM/CMS Accounts:
    > 
    >                  Username         Password
    >                  --------         --------
    >                  $aloc$
    >                  admin            operator, manager, adm, 
    > sysadmin, sysadm
    >                  alertvm          alert
    >                  ap2svp
    >                  apl2pp
    >                  autolog1         autolog
    >                  autolog2         autolog
    >                  batch
    >                  batch1           batch
    >                  batch2           batch
    >                  botinstl
    >                  ccc
    >                  cms
    >                  cmsbatch         cms, batch, batch1
    >                  cmsuser          cms, user
    >                  cpms
    >                  cpnuc
    >                  cprm
    >                  cspuser          user, csp
    >                  cview
    >                  datamove
    >                  demo1            demo
    >                  demo2            demo
    >                  direct
    >                  dirmaint         dirmaint1
    >                  diskcnt
    >                  entty
    >                  erep
    >                  formplus
    >                  fsfadmin         fsf, adm, sysadmin, sysadm, 
    > admin, fsfadm
    >                  fsftask1
    >                  fsftask2
    >                  gcs
    >                  gcsrecon
    >                  idms
    >                  idmsse
    >                  iips
    >                  infm-mgr         infm, man, manager, mgr
    >                  inoutmgr         mgr, manager
    >                  ipfappl
    >                  ipfserv
    >                  ispvm
    >                  ivpm1
    >                  ivpm2
    >                  maildel
    >                  mailman
    >                  maint            service
    >                  moeserv
    >                  netview          network, view, net, monitor
    >                  oltsep
    >                  op1
    >                  opbackup         backup
    >                  operatns         op, operator, manager, admin
    >                  operator         op, operatns, manager, admin
    >                  opserver
    >                  pdm470
    >                  pdmremi
    >                  peng
    >                  presdbm          dbm
    >                  procal
    >                  prodbm           prod
    >                  promail
    >                  psfmaint         maint
    >                  pssnews          news
    >                  pvm
    >                  router
    >                  rscs
    >                  rscsv2
    >                  savsys
    >                  sfcm1            sfcm
    >                  sfcntrl
    >                  sim3278
    >                  smart
    >                  sna
    >                  sqldba           database
    >                  sqluser          user, sql
    >                  syncrony
    >                  sysadmin         admin, adm, sysadm, 
    > manager, operator
    >                  sysckp
    >                  sysdump1         sysdump
    >                  syserr
    >                  syswrm
    >                  tdisk            disk, temp
    >                  temp
    >                  tsafvm
    >                  vastest          test
    >                  vm3812
    >                  vmarch
    >                  vmasmon
    >                  vmassys
    >                  vmbackup         backup
    >                  vmbsysad
    >                  vmmap            map
    >                  vmtape           tape
    >                  vmtest           test, testuser
    >                  vmtlibr
    >                  vmutil           util, utils
    >                  vseipo
    >                  vsemaint         maint
    >                  vseman
    >                  vsm
    >                  vtam
    >                  vtamuser         user, vtam
    >                  x400x25
    > 
    > 
    > -- 
    > 'Cold Fire, Britains most notorious hacker' Observer, July 
    > 1996 'The most recent conviction was that of [Cold Fire] 
    > whose On-line escapades spanned from hacking into educational 
    > sites to more sinister activities such as tapping into 
    > industrial and United States military sites.' DC Paul Cox, 
    > SO6 Scotland Yard CCU
    > 
    > --------------------------------------------------------------
    > --------------
    > This list is provided by the SecurityFocus Security 
    > Intelligence Alert (SIA) Service. For more information on 
    > SecurityFocus' SIA service which automatically alerts you to 
    > the latest security vulnerabilities please see: 
    https://alerts.securityfocus.com/
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Sun Jul 07 2002 - 14:47:51 PDT