RE: [SPAM] - RE: obtain an IP of an MSN Messengercontact - Email found in subject

["Ian stuart Turnbull" <ian.t7 () hotmail co uk>]

Nice one Guys, thanks for the info.
In fact I'd like to do this from within a program. The WsControl|WSOCK32.dll 
worked on Win98/ME but it won't get resolved on XP unfortunately. In fact 
that was using a 56KB modem and I'm behind a router now so I'm not sure if 
WsControl would've worked on Win98/ME as I don't have that machine anymore.
Is there a comparable funstion on WinXP for WsControl does anyone know?
Thanks for your help folks.

Ian t


> From: "Richard Stevens" <richard () tccnet co uk>
> To: <full-disclosure () lists grok org uk>
> Subject: RE: [SPAM] - [Full-disclosure] RE: obtain an IP of an MSN 
> Messengercontact - Email found in subject
> Date: Wed, 5 Apr 2006 13:38:09 +0100
> MIME-Version: 1.0
> Received: from lists.grok.org.uk ([195.184.125.51]) by 
> bay0-pamc1-f2.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 
> 5 Apr 2006 05:39:19 -0700
> Received: from lists.grok.org.uk (localhost [127.0.0.1])by 
> lists.grok.org.uk (Postfix) with ESMTP id E4EC5716;Wed,  5 Apr 2006 
> 13:38:30 +0100 (BST)
> Received: from comms.tccnet.local (unknown [212.42.172.68])by 
> lists.grok.org.uk (Postfix) with ESMTP id CB69E68for 
> <full-disclosure () lists grok org uk>;Wed,  5 Apr 2006 13:38:10 +0100 (BST)
> X-Message-Info: JGTYoYF78jHCX29z4c5lUVPHK8Trelonzb6rFVyrzxg=
> X-Original-To: full-disclosure () lists grok org uk
> Delivered-To: full-disclosure () lists grok org uk
> Content-class: urn:content-classes:message
> X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [SPAM] - 
> [Full-disclosure] RE: obtain an IP of an MSN Messengercontact - Email found 
> in subject
> Thread-Index: AcZYp6QyCoijzprqRdGImjq5XDPZYAABaNpQ
> X-BeenThere: full-disclosure () lists grok org uk
> X-Mailman-Version: 2.1.5
> Precedence: list
> List-Id: An unmoderated mailing list for the discussion of security 
> issues<full-disclosure.lists.grok.org.uk>
> List-Unsubscribe: 
> <https://lists.grok.org.uk/mailman/listinfo/full-disclosure>, 
> <mailto:full-disclosure-request () lists grok org uk?subject=unsubscribe>
> List-Archive: <http://lists.grok.org.uk/pipermail/full-disclosure>
> List-Post: <mailto:full-disclosure () lists grok org uk>
> List-Help: <mailto:full-disclosure-request () lists grok org uk?subject=help>
> List-Subscribe: 
> <https://lists.grok.org.uk/mailman/listinfo/full-disclosure>, 
> <mailto:full-disclosure-request () lists grok org uk?subject=subscribe>
> Errors-To: full-disclosure-bounces () lists grok org uk
> Return-Path: full-disclosure-bounces () lists grok org uk
> X-OriginalArrivalTime: 05 Apr 2006 12:39:19.0840 (UTC) 
> FILETIME=[F585A200:01C658AD]
>
> I don't think it makes any difference if its natted.
>
> Try a
> telnet maila.microft.com 25
> >From behind your nat router
>
> Then do a netstat.
>
> You'll get either the public ip address of the server, or the public IP
> address of the nat router/firewall that the server is behind.
>
>
>
>
>
> -----Original Message-----
> From: full-disclosure-bounces () lists grok org uk
> [mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of Nick
> Eoannidis
> Sent: 05 April 2006 12:52
> To: full-disclosure () lists grok org uk
> Subject: [SPAM] - [Full-disclosure] RE: obtain an IP of an MSN Messenger
> contact - Email found in subject
>
> Um this will not work on most dsl connections as the network is NAT'd
> you need a direct connection to the internet to use the msn netstat
> trick
>
> either a DSL modem or a dialup modem that gives your machine the WAN IP
> - then this will work.
>
> Nikon,
>
> xyberpix wrote:
>
> Message: 6
> Date: Tue, 4 Apr 2006 13:27:52 +0100
> From: xyberpix <xyberpix () xyberpix com>
> Subject: Re: [Full-disclosure] obtai an IP of an MSN Messenger contact
> To: Ian stuart Turnbull <ian.t7 () hotmail co uk>
> Cc: full-disclosure () lists grok org uk
> Message-ID: <C6DE7C2B-BDD2-47AE-8890-ED1C9F54E578 () xyberpix com>
> Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> If he's online, send him a file, as you're sending the file, do an
> netstat -an, and you should see the address that you're transferring to.
> That is so long as he's not using a proxy ;-)
>
> HTH
>
> Blog: http://blogs.securiteam.com
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_________________________________________________________________
The new MSN Search Toolbar now includes Desktop search! 
http://join.msn.com/toolbar/overview

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/