BSidesSF 2016

In early 2013 Soldier of Fortran had an idea. What if there were mainframes on the internet? He knew there had to be, the internet is just full of all kinds of weird stuff. But what if there’s also mainframes on there, what would that mean? Using some google-fu he started the hunt, easily finding a handful, then later moving on to SHODAN and finally masscan. He found hundreds of ‘green’ screens up and running with their beautiful EBCDIC art for all the world to see. This talk will walk through the story of how he found the mainframes. Going through the process to find the mainframes and how he helped augment tools like SHODAN to make hunting easier. He’ll detail the tools he wrote specifically to hunt internet mainframes, the troubles he’s gotten in to for looking for them and then provide MANY examples of the the kind of (scary) things he’s encountered on the web. There may even be some live examples of some of those mainframes. Talks about new changes Soldier of Fortran made to Nmap 7 and how those changes make it easier to find mainframes will be discussed and some live demos *may* be performed.