Footprinting for security auditors