Lorin Thwaits

Sly way to throw a static IP address in a URL

I've seen octal and character substitution tricks in URLs before, but I didn't know you could use hexadecimal for the IP in a URL.  Sure enough, this:

http://0xd390cc87/

is exactly equivalent to this:

http://211.144.204.135/

(D3 = 211, 90 = 144, CC = 204, and 87 = 135)

Just found out now in a piece of stupid flippin' phishing email that was sent to me.  Danged Shanghai-based swindlers.

posted @ Thursday, September 20, 2007 4:10 AM