Re: [PEN-TEST] Pen-Testing AS/400

[Joe Traietta <JTraietta () ASAHIBANKNY COM>]

You could look at:

http://www.woevans.com/ <http://www.woevans.com/>

this is Wayne Evans' site, he has links to a lot of useful security
information on the AS/400.

        -----Original Message-----
        From:   Enno Rey [SMTP:erey () IX URZ UNI-HEIDELBERG DE]
        Sent:   Monday, December 11, 2000 5:14 AM
        To:     PEN-TEST () SECURITYFOCUS COM
        Subject:        [PEN-TEST] Pen-Testing AS/400

        Hi,

        I'm currently involved in a pen-test in an environment with lots of
AS/400s
        (some with IP, some without).
        I've been working with one some time ago but I certainly don't have
the
        expertise to judge the security of those boxes.
        Does anybody have any hints for some security documents concerning
the
        AS/400 or some kind of checklist or something else that could help
me.
        I've already been searching the archives. I found that in august
Noah Dunker
        posed nearly the same question, but never got any answer...
        And I found www.redbooks.ibm.com/abstracts/gg244200.html from 1994.

        Anything else that could help me?

        Thanks a lot in advance &

        regards,

        Enno Rey