This is a valid ipv4 address
184.172.10.74
This is a valid ipv4 address
1–10 of 101 posts
Re: This is a valid ipv4 address
#2The submission is a little misleading; it's traditional on HN to link to an article discussing the principle, rather than simply a demonstration. However, the OP highlights an interesting point. There are other, analogous, unexpected behaviours like this one, such as numeric constants with leading zeros being interpreted as octal, that arise from the ubiquity of the C standard library. You see them in Java all over the place.
Edited to Add:
Don't think good penetration testers (and malware writers, alas) don't already know about this trick. But, as http://xkcd.com/1053/ pointed out, it's always great to teach new people old things.
Re: This is a valid ipv4 address
#3The submission is a little misleading; it's traditional on HN to link to an article discussing the principle, rather than simply a demonstration. However, the OP highlights an interesting point. There are other, analogous, unexpected behaviours like this one, such as numeric constants with leading zeros being interpreted as octal, that arise from the ubiquity of the C standard library. You see them in Java all over t…
> Don't think good penetration testers (and malware writers, alas) don't already know about this trick.
This was also a popular trick among kids at my high school to work around the web content filter and get on social networks
Re: This is a valid ipv4 address
#4The submission is a little misleading; it's traditional on HN to link to an article discussing the principle, rather than simply a demonstration. However, the OP highlights an interesting point. There are other, analogous, unexpected behaviours like this one, such as numeric constants with leading zeros being interpreted as octal, that arise from the ubiquity of the C standard library. You see them in Java all over t…
Yeah I've made a similar post here before and got a few upvotes. https://news.ycombinator.com/item?id=5763739 It's worth noting that the address isn't converted by the browser, but by the network stack.
Re: This is a valid ipv4 address
#5The decoded URL for this submission is http://184.172.10.74/ — the server for Hacker News.
Here's some other encodings you can use for the same address, they're all valid and recognised by most browsers and other software:
http://7393249866/
The source for this comment is an XSS filtering bypass tool by RSnake — http://ha.ckers.org/xsscalc.html
Re: This is a valid ipv4 address
#6I don't follow.
Re: This is a valid ipv4 address
#7How can I encode any ip address?
Re: This is a valid ipv4 address
#8The submission is a little misleading; it's traditional on HN to link to an article discussing the principle, rather than simply a demonstration. However, the OP highlights an interesting point. There are other, analogous, unexpected behaviours like this one, such as numeric constants with leading zeros being interpreted as octal, that arise from the ubiquity of the C standard library. You see them in Java all over t…
[deleted]
Re: This is a valid ipv4 address
#9How can I encode any ip address?
Google for "ip to long"...
Re: This is a valid ipv4 address
#10The decoded URL for this submission is http://184.172.10.74/ — the server for Hacker News. Here's some other encodings you can use for the same address, they're all valid and recognised by most browsers and other software: http://3098282570/ http://7393249866/ http://0xb8.0xac.0x0a.0x4a/ http://0270.0254.0012.0112/ The source for this comment is an XSS filtering bypass tool by RSnake — http://ha.ckers.org/xsscalc.htm…
I recognize the other formats, but what format is "http://7393249866/"? It opens about:blank in chrome. How is it distinguished from the format above it?