I once wrote my own PHP script to achieve something very similar. The target was incredibly surprised when I knew his IP and exactly what was on his external network. This seems like a pretty good method if you are planning to do this to more than one target! Nice guide 
1 Like