From: Sat Jagat Singh (flyingdervishyahoo.com)
Date: Fri Feb 15 2008 - 10:33:26 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

When I had the same issue a few months ago, I found
"Hacking iSeries" by Shalom Carmel useful. Check out
his site at:

http://www.venera.com/

The book is pretty good and recommended if you want to
get the most concise information quickly. But you can
get most of the same information just by reading the
whitepapers posted there in conjunction with following
the URLs on the References and links page. The IBM
Redbook series is particularly good for a background
on how security on the iSeries is suppose to work.

Some of the most common security errors on these
systems appears to be open SMB file shares and default
passwords.

Best of luck to you.

--- Jon Kibler <jon.r.kiblergmail.com> wrote:

> From Jon Kibler Tue Feb 12 12:11:43 2008
> X-Apparently-To: flyingdervishyahoo.com via
> 206.190.38.156; Thu, 14 Feb 2008 21:34:40 -0800
> X-Originating-IP: [205.206.231.26]
> Return-Path:
>
<pen-test-return-1078485978-flyingdervish=yahoo.comsecurityfocus.com>
> Authentication-Results: mta502.mail.mud.yahoo.com
> from=gmail.com; domainkeys=fail (bad sig)
> Received: from 205.206.231.26 (EHLO
> outgoing.securityfocus.com) (205.206.231.26)
> by mta502.mail.mud.yahoo.com with SMTP; Thu, 14
> Feb 2008 21:32:40 -0800
> Received: from outgoing.securityfocus.com by
> outgoing.securityfocus.com
> via smtpd (for
> mta-v8.mail.vip.mud.yahoo.com [209.191.118.103])
> with ESMTP; Thu, 14 Feb 2008 21:15:07 -0800
> Received: from lists.securityfocus.com
> (lists.securityfocus.com [205.206.231.19])
> by outgoing2.securityfocus.com (Postfix) with QMQP
> id 6BFD41437F3; Thu, 14 Feb 2008 21:26:18 -0700
> (MST)
> Mailing-List: contact
> pen-test-helpsecurityfocus.com; run by ezmlm
> Precedence: bulk
> List-Id: <pen-test.list-id.securityfocus.com>
> List-Post: <mailto:pen-testsecurityfocus.com>
> List-Help: <mailto:pen-test-helpsecurityfocus.com>
> List-Unsubscribe:
> <mailto:pen-test-unsubscribesecurityfocus.com>
> List-Subscribe:
> <mailto:pen-test-subscribesecurityfocus.com>
> Resent-Sender: listbouncesecurityfocus.com
> Sender: listbouncesecurityfocus.com
> Errors-To: listbouncesecurityfocus.com
> Delivered-To: mailing list
> pen-testsecurityfocus.com
> Delivered-To: moderator for
> pen-testsecurityfocus.com
> Received: (qmail 2243 invoked from network); 12 Feb
> 2008 21:17:40 -0000
> DKIM-Signature: v=1; a=rsa-sha256;
> c=relaxed/relaxed;
> d=gmail.com; s=gamma;
>
>
h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
>
> bh=CXhMForDIWB8baGZP0W7R6lPnPEI+qpslF4o4+m3EeM=;
>
>
b=HY5KsaKvukCK77b2reiZ3y16EupWNOZ6NZOxTJLIakF4GabqP132QLPl475nboZMOIc7Zfo+JIAw65mmes5G8/Uw2YTQnkUb3L68XRVtIc62VFoeR92OQ91pA/ZvjiHNhxxIVQKp3OeuM/JWYrqeofQDcx5rdk3ohOzITnche30=
> DomainKey-Signature: a=rsa-sha1; c=nofws;
> d=gmail.com; s=gamma;
>
>
h=message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
>
>
b=cfGGdfptK0jDX9LYqQfIE6R55v0XrlahLBKTXzcHhM+p4nkuQqlT5Iesx3lwWKUuCC83BjRsA1vELA0uJvrsLBhf7ZytLPVcxOqG1U4HUBDol/XEgF9o95l4Cc1hlkK0L+iRMN9TjkipLutRIZcZIHqPLKhHouKYd+P0EWwTGJg=
> Message-ID:
>
<f69ec0c70802121211k2fd1d959lc7ec79c049a540bamail.gmail.com>
> Date: Tue, 12 Feb 2008 15:11:43 -0500
> From: "Jon Kibler" <jon.r.kiblergmail.com>
> To: pen-testsecurityfocus.com
> Subject: AS400 Net Recon
> MIME-Version: 1.0
> Content-Type: text/plain; charset=ISO-8859-1
> Content-Transfer-Encoding: 7bit
> Content-Disposition: inline
> Resent-Message-Id:
>
<20080215042618.6BFD41437F3outgoing2.securityfocus.com>
> Resent-Date: Thu, 14 Feb 2008 21:26:18 -0700 (MST)
> Resent-From:
> pen-test-return-1078485978securityfocus.com
> Content-Length: 835
>
> Hi,
>
> I have a client with AS400s on their LAN. They want
> a vulnerability
> scan, but having been burned in the past, I want to
> ask before doing:
> Are there any issues with scanning (nmap, nessus,
> etc.) AS400s?
>
> While I am at it, any good information on AS400
> security? I see a few
> corporately published books for sale on the net
> about AS400 security,
> but I don't want to drop a couple of grand for a
> book by some
> organization I am not familiar with.
>
> Any help appreciated.
>
> Jon K.
>
>
------------------------------------------------------------------------
> This list is sponsored by: Cenzic
>
> Need to secure your web apps NOW?
> Cenzic finds more, "real" vulnerabilities fast.
> Click to try it, buy it or download a solution FREE
> today!
>
> http://www.cenzic.com/downloads
>
------------------------------------------------------------------------
>
>

      ____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]