Re: AS400 Net Recon

[xelerated <xelerated () gmail com>]

Hi,

I have not tested this myself. But it looks good for as/400 specifics.

http://www.security-database.com/toolswatch/AS-400-Auditing-Framework-Beta.html

Then there is the trusty OSSTMM for your overall methodology to test with.

http://www.osstmm.org






On Tue, Feb 12, 2008 at 3:11 PM, Jon Kibler <jon.r.kibler () gmail com> wrote:
> Hi,
>
>  I have a client with AS400s on their LAN. They want a vulnerability
>  scan, but having been burned in the past, I want to ask before doing:
>  Are there any issues with scanning (nmap, nessus, etc.) AS400s?
>
>  While I am at it, any good information on AS400 security? I see a few
>  corporately published books for sale on the net about AS400 security,
>  but I don't want to drop a couple of grand for a book by some
>  organization I am not familiar with.
>
>  Any help appreciated.
>
>  Jon K.
>
>  ------------------------------------------------------------------------
>  This list is sponsored by: Cenzic
>
>  Need to secure your web apps NOW?
>  Cenzic finds more, "real" vulnerabilities fast.
>  Click to try it, buy it or download a solution FREE today!
>
>  http://www.cenzic.com/downloads
>  ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------