Web sites

• Introductory Reference to the IBM AS/400
• Wayne Madden, AS/400-iSeries Starter Kit
• The IBM iSeries Infocenter is a vast space that contains a lot of information, and a mandatory resource for any serious iSeries hacking.
• The IBM eServer iSeries Support Technical databases include a searchable database of reported bugs (APARs), of patches (PTFs), and the software knowledge base which alone is worth a visit.
• Get inexpensive AS/400 accounts here:
  • http://www.holgerscherer.de/
  • http://www.timeshare400.com/
  • http://www.share400.com/
• IBM alphaworks is the bleeding edge of the next generation computing from IBM.
• Ignite400 is a web site dedicated to iSeries based web applications. A free registration is required to use all of the resources.
• The Search400 web site is among the leading iSeries professional web sites. Look up the tips sections, with tips and advice provided by search400 site members on security, administration and programming.
• iSeries Network is another leading professional iSeries web site.
• Yet another free and great resource, ITJungle.com used to be called midrange.com.
• Samples of advanced iSeries code, includes API usage and TCP/IP socket programming.
• An example of user profile swapping code - equivalent to SUID.
• A list of Client Access servers
• SMTPSCAN tool
• Brutus tool for cracking POP3 servers
• Jim Sloan's TAA Tool library used to be shipped as part of the regular OS/400 offering until he left IBM.
• Bob Cancilla, Making the Case for OS/400 Security
• Pat Botz and Carol Woodbury, What Makes OS/400 Virus-Resistant?
• Dan Riehl, Nefarious Masqueraders and other articles
• Wayne O. Evans, Audit Checklist
• SecurityFocus iSeries articles
• Advanced AS/400 programming techniques
• UCLA Public Domain Software Library for AIX, get your iSeries netcat here.
• iSeries installation instructions for PASE C compilers and related stuff.
  • http://www.deloli.net
  • http://www.i5php.net
• Installation of PERL on iSeries
• More unofficial PASE tools from IBM
• Java shell
• Various security tools and a lot of useful related information
• Jeffrey Hunter's Java pages
• SQL Injection
• Setting up VNC on iSeries

Printed and electronic Books

• Powertech 2004 iSeries Security Configuration Study
• IBM redbooks
  • Managing OS/400 with Operations Navigator V5R1 Vol 2: Security
  • AS/400 Internet Security Scenarios: A Practical Approach
  • Managing users and permissions with Operation Navigator
  • Implementation and Practical Use of LDAP on the iSeries Server
• IBM Online libraries
  • iSeries Security Reference, version 5.1 (
  • iSeries Security Reference, version 5.2
  • iSeries Security Reference, version 5.3
  • iSeries Security Reference, version 5.4
  • iSeries Basic system security and planning
  • Tips and Tools for Securing your iSeries (SC41-5300-06)
  • Work Management, Version 4
  • Query/400 user's guide
  • Query Management user's guide
  • Programmers' Development Manager
  • Data File Utility guide
  • ILE C/C++ for AS/400 MI Library Reference (SC09-2418-00)
  • Machine Interface function reference
• Leif Svalgaard, AS/400 Machine Level Programming, 2002
• Carol Woodbury & Wayne Madden, Implementing AS/400 Security 4th edition, 29th Street Press
• Carol Woodbury & Patrick Botz, Experts' Guide to OS/400 & i5/OS Security, 29th Street Press
• McClure, Scambray & Kurtz, Hacking Exposed: Network Security Secrets and Solutions, McGraw-Hill Osborne Media
• Ed Skoudis, Counter Hack, Prentice Hall

iSeries Security vendors and experts

• KDP Software
• NetIQ (previously Pentasafe)
• PowerTech
• Raz-Lee
• Bsafe
• Patrick Townsend & Associates
• Safestone
• Castlehill Computer Services
• Centerfield Technology
• Bytware Inc,
• Kisco Information Systems
• Bradley Stone's BVS tools
• SEA - Software Engineering of America