Date: Wed Apr  5 14:45:21 2006
From: ian.t7 at hotmail.co.uk (Ian stuart Turnbull)
Subject: [SPAM] - RE: obtain an IP of an MSN
	Messengercontact - Email found in subject

Nice one Guys, thanks for the info.
In fact I'd like to do this from within a program. The WsControl|WSOCK32.dll 
worked on Win98/ME but it won't get resolved on XP unfortunately. In fact 
that was using a 56KB modem and I'm behind a router now so I'm not sure if 
WsControl would've worked on Win98/ME as I don't have that machine anymore.
Is there a comparable funstion on WinXP for WsControl does anyone know?
Thanks for your help folks.

Ian t


>From: "Richard Stevens" <richard@...net.co.uk>
>To: <full-disclosure@...ts.grok.org.uk>
>Subject: RE: [SPAM] - [Full-disclosure] RE: obtain an IP of an MSN 
>Messengercontact - Email found in subject
>Date: Wed, 5 Apr 2006 13:38:09 +0100
>MIME-Version: 1.0
>Received: from lists.grok.org.uk ([195.184.125.51]) by 
>bay0-pamc1-f2.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 
>5 Apr 2006 05:39:19 -0700
>Received: from lists.grok.org.uk (localhost [127.0.0.1])by 
>lists.grok.org.uk (Postfix) with ESMTP id E4EC5716;Wed,  5 Apr 2006 
>13:38:30 +0100 (BST)
>Received: from comms.tccnet.local (unknown [212.42.172.68])by 
>lists.grok.org.uk (Postfix) with ESMTP id CB69E68for 
><full-disclosure@...ts.grok.org.uk>;Wed,  5 Apr 2006 13:38:10 +0100 (BST)
>X-Message-Info: JGTYoYF78jHCX29z4c5lUVPHK8Trelonzb6rFVyrzxg=
>X-Original-To: full-disclosure@...ts.grok.org.uk
>Delivered-To: full-disclosure@...ts.grok.org.uk
>Content-class: urn:content-classes:message
>X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
>X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [SPAM] - 
>[Full-disclosure] RE: obtain an IP of an MSN Messengercontact - Email found 
>in subject
>Thread-Index: AcZYp6QyCoijzprqRdGImjq5XDPZYAABaNpQ
>X-BeenThere: full-disclosure@...ts.grok.org.uk
>X-Mailman-Version: 2.1.5
>Precedence: list
>List-Id: An unmoderated mailing list for the discussion of security 
>issues<full-disclosure.lists.grok.org.uk>
>List-Unsubscribe: 
><https://lists.grok.org.uk/mailman/listinfo/full-disclosure>, 
><mailto:full-disclosure-request@...ts.grok.org.uk?subject=unsubscribe>
>List-Archive: <http://lists.grok.org.uk/pipermail/full-disclosure>
>List-Post: <mailto:full-disclosure@...ts.grok.org.uk>
>List-Help: <mailto:full-disclosure-request@...ts.grok.org.uk?subject=help>
>List-Subscribe: 
><https://lists.grok.org.uk/mailman/listinfo/full-disclosure>, 
><mailto:full-disclosure-request@...ts.grok.org.uk?subject=subscribe>
>Errors-To: full-disclosure-bounces@...ts.grok.org.uk
>Return-Path: full-disclosure-bounces@...ts.grok.org.uk
>X-OriginalArrivalTime: 05 Apr 2006 12:39:19.0840 (UTC) 
>FILETIME=[F585A200:01C658AD]
>
>I don't think it makes any difference if its natted.
>
>Try a
>telnet maila.microft.com 25
> >From behind your nat router
>
>Then do a netstat.
>
>You'll get either the public ip address of the server, or the public IP
>address of the nat router/firewall that the server is behind.
>
>
>
>
>
>-----Original Message-----
>From: full-disclosure-bounces@...ts.grok.org.uk
>[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of Nick
>Eoannidis
>Sent: 05 April 2006 12:52
>To: full-disclosure@...ts.grok.org.uk
>Subject: [SPAM] - [Full-disclosure] RE: obtain an IP of an MSN Messenger
>contact - Email found in subject
>
>Um this will not work on most dsl connections as the network is NAT'd
>you need a direct connection to the internet to use the msn netstat
>trick
>
>either a DSL modem or a dialup modem that gives your machine the WAN IP
>- then this will work.
>
>Nikon,
>
>xyberpix wrote:
>
>Message: 6
>Date: Tue, 4 Apr 2006 13:27:52 +0100
>From: xyberpix <xyberpix@...erpix.com>
>Subject: Re: [Full-disclosure] obtai an IP of an MSN Messenger contact
>To: Ian stuart Turnbull <ian.t7@...mail.co.uk>
>Cc: full-disclosure@...ts.grok.org.uk
>Message-ID: <C6DE7C2B-BDD2-47AE-8890-ED1C9F54E578@...erpix.com>
>Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
>
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>If he's online, send him a file, as you're sending the file, do an
>netstat -an, and you should see the address that you're transferring to.
>That is so long as he's not using a proxy ;-)
>
>HTH
>
>Blog: http://blogs.securiteam.com
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>Hosted and sponsored by Secunia - http://secunia.com/

_________________________________________________________________
The new MSN Search Toolbar now includes Desktop search! 
http://join.msn.com/toolbar/overview

Powered by blists - more mailing lists