shaananc

It would've given me away. I wasn't super concerned that it would be looked up though. If this was a real attack and not just a demo for class, it would've been a better idea to fake the whois info.

I just posted the targets response when he found out. He was very gracious.

The other student was an international student, his English overall was quite formal. Really lovely guy though :)

thanks!

typo in the redacted version.

That's very true, but it was just a class project, and wouldn't have been the end of the world.

it's a redacted version of the full link.

could you link me to where the original is?

I meant that with that level of trust it wouldn't be too hard to adapt the attack to shift to gaining that sort of information. ie; We are adding you to our employee database but we need your SSN last 4.