This session will educate the participant in understanding how to exploit z/OS vulnerabilities and misconfigurations, that if not remediated could provide a malicious person with the capability to escalate privileges and/or gain access to resources this person would normally not have access too. The session will be both educational and provide a hands-on lab component for people to learn how to look for vulnerabilities and misconfigurations so that they can enhance their own security implementation at their installations. Attendees should have a reasonable understanding of z/OS and how security controls are implemented. The session will provide an overview of z/OS and its security controls but it will be used as a level set rather than a detailed education session.