Utile and email address to determine an operating system
Alexander Rocco Corporation has multiple OSs running in its many offices. Before conducting a security test to determine the vulnerabilities you need to correct, you want to determine whether any OSs are running that you're not aware of. Mike Constantine, the network administrator/security officer, is resistant to giving you information after he learns you're there to discover network security vulnerabilities. He sees you as a threat to his position. After several hours of interviews, you can ascertain only that Mike's personal e-mail address is mtscon@gmaitcom, and Oracle 8i is running on one of the company's systems. Based on this information, answer the following questions:
1. What tools might you use after learning Mike's e-mail address?
2. What did you determine after entering Mike's e-mail address in the https:// groups.google.com Web site?
3. Could the information you learned from https://groups.google.com be used to conduct vulnerability testing or exploits?
Write a memo to the IT manager, Bob Jones, about the possibility of a Net-Ware server being pan of the company's network. Make sure your memo explains how you gathered this information and offers constructive feedback. Your memo shouldn't point a finger at any company employees; it should discuss problems on a general level.