| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <Pine.WNT.4.64.0806160942310.3504@MI> Date: Mon, 16 Jun 2008 09:55:57 +0200 (ora solare Europa occidentale) From: Marco Ivaldi <raptor@...iaservice.net> To: bugtraq@...urityfocus.com Subject: Re: AS/400 Vulnerabilities Hello Bugtraq, On Fri, 13 Jun 2008, security curmudgeon wrote: > I would guess there is little research being done on them. The odds of a > box falling over due to a few malformed TCP packets, but being resistant > or not vulnerable to more complex attacks seems pretty far fetched. > While this vendor and technology is widely deployed, it isn't a sexy > target for research. Speaking of AS/400 security research, I'd like to point out the following resources: http://seclists.org/pen-test/2008/Feb/0083.html http://www.venera.com/downloads.htm http://www.venera.com/order.htm http://www.security-database.com/toolswatch/AS-400-Auditing-Framework-Beta.html Cheers, -- Marco Ivaldi, OPST Red Team Coordinator Data Security Division @ Mediaservice.net Srl http://mediaservice.net/
Powered by blists - more mailing lists