RE: Research Project- If you wanted to Hack an AS/400 theoretically, what would you do? (NFM)

If you're talking about trying to prevent hacks against your system:

1. Talk to a penetration test company like FoundStone.  A rep could
probably describe their tests, which would reveal what they consider to
be vulnerabilities in the platform.

2. Log in here
https://app-06.www.ibm.com/servers/resourcelink/hom03010.nsf?OpenDatabas
e and look for OS/400 advisories. That would reveal potential exploits.
The site says zSeries but covers all eServers.

If you're talking more in general terms:

3. Check the hacker newsgroups, etc. for known exploits.

4. Check out OS/400 security tools to see what they consider to be
potential exploits.


In a more general sense, try to discover what services the machine is
running and see if you can exploit them.  If the machine is properly
secured, it will likely take social engineering vs. hardware/brute force
to gain access.

-----Original Message-----
From: Rob Phillips [mailto:niceguy420l@xxxxxxxxx] 
Sent: Wednesday, January 28, 2004 8:31 AM
To: Midrange Systems Technical Discussion
Subject: Research Project- If you wanted to Hack an AS/400
theoretically,what would you do? (NFM)