Approach to mainframe penetration testing on z/OS. Deep dive into RACF

We have explored the RACF security package in z/OS and developed a utility to interact with its database. Now, we are assessing RACF configuration security for penetration testing.