Skip to main content

Hexadecimal URLs

Hexadecimal URLs

Some strange phishing emails were there in my Rediff Webmail. Should I just delete it? No. I just thought I would do some sort of recycling and find if something useful was there.

And the email was faithful to give the following details. Of course, some of the links I had to ensure that should not be clicked by copy pasted to a Google Toolbar to get the actual victimized website which has been phished.

  1. The site URL was Barclays Bank, based in UK. It seems to be a really an impressive and premiere banking website based in UK. There are useful tips and tricks besides interactive tools like Mortgage Calculator, Map and Area locator etc.
  2. Obscured URLs. The URL was really strange it was like http://0xC18003C6.  For security reasons, I am not giving the phished URL rather tiving the URL of the bank itself in hexa decimal format.
  3. A search in Google revealed a lot of things. Actually, hexadecimal URLs are supported by the web browser for security reasons since some confidential transactions can be safely sent using encoded and encrypted URLs. However, phishers seem to use this maliciously like this.
  4. Technical Knowhow:
    1. We can study the anatomy of the URL like this: http://0xC18003C6
    2. http:// stands for the standard HTTP protocol.
    3. 0x prefix indicates that the string literal, if convertible, is a valid hexadecimal number.
    4. Every two digit then on would the IP address part. In this case, C1 80 03 C6 would resolve to 193 128 3 198. In the decimal notation, we need to use dot between the individual entities.
    5. You can simple use the Windows Calculator in View -> Scientific mode to get conversions from Decimal to Hexadecimal and vice-versa.

Comments

Popular posts from this blog

Google NCR

Google NCRMost of you would be knowing about this trick in navigating to Google generic website. But I just came to know only a few days before and hence thought I would share the information with others too.
Whenever you type http://www.google.com/, Google automatically tries to redirect you to your country-specific website. For me, it always redirects to http://www.google.co.in/ (Google India). But when we specifically want to navigate to Google Generic website for some reason, there are two ways to accomplish the same.Click the 'Go to Google.com' link at the bottom of the webpage that is displayed from http://www.google.co.in/To prevent this redundant click, you can opt to type http://www.google.com/ncr/ which would prevent the redirect from happening. The NCR stands for No Country Redirect. There is a brief discussion about this NCR over this forum.You may also like to check out Google help documentation regarding the country redirections from here.

Elegant 'MailTo' Replacement

Elegant 'MailTo' Replacement

MailTo tags have become a bane to all websites since spammers run spam robots which crawl the web to capture the email addresses, add to their catalogs and send spams to them. I just thought of sharing with others a simple JavaScript function which would trigger open the default email client instead of having mailto: embedded in the HTML Page.

Just have the following function included in your webpage

<script language='Javascript'>
function WriteMailTo(user,domain)
{
location.replace ('mailto:'+user+'@'+domain);
}
</script>

And whereever you want to invoke the mailto, just called WriteMailTo('user','example.com') and the user's default email client should be launching (if configured) without any hassles.

Contacts import utility from Web2Project to Addressbook

I have been using Web2Project for planning my personal and professional tasks for a few years now. Now I have bifurcated the tools into the following:

Project PierAddress Book The only issue I had was to import my addressbook from Web2Project to AB. PP is a different animal. It does not serve as a comprehensive candidate for addressbook and hence I needed this bifurcation. 
I wrote up a following simple script to import the contacts to AB. The pre-requisite for this script is to hop on to PhpMyAdmin, export the contacts as a PHP array and then  modify the path in our import script to whatever you downloaded from PhpMyAdmin.
Our import script would explode the entries as SQL scripts into the browser window. Copy them and execute into PhpMyAdmin AB database to have the contacts imported.

Script URL: https://gist.github.com/lavanyadeepak/5177500#file-import-php