Re: Host discovery

[Pete Herzog <lists () isecom org>]

Hi,

This is covered in the OSSTMM (osstmm.org). For example, they found 
you, just review your web server logs. You can still see if there's 
host info in the email you received from them. That's another clue. 
Email they read with read receipt or web bugs embedded called from 
your web server help too. Their documents posted to their website may 
contain local host information. Check the OSSTMM, there's lots of 
things to try.

Sincerely,
-pete.

Managing Director, ISECOM

Oliver Kindernay wrote:
> Yes but when company use webhosting's mail server this won't work.

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------