http://www.perlmonks.org?node_id=256863


in reply to unobfuscate IPs

Could you give an example of the text that this decodes and where in an email to look for the text?

Cheers!

--
hiseldl
What time is it? It's Camel Time!

Replies are listed 'Best First'.
Re: Re: unobfuscate IPs
by bobn (Chaplain) on May 09, 2003 at 16:24 UTC
    It only "unobfuscates" things that are numeric, such as the example shown, which is a hexadecimal number, or decimal numbers such as '218020952'. This might appeaear in a URL as: http://218020952/dirty-pictures.html However, a persual of more recent spam shows few using this form any more. More typical examples also include HTML escaping, eg:
    http://%77%77%77%2E%66%70%63%6D%61%67%61%7A%69%6E%65%2E%6E%65%74/
    for this form, use
    perl -MURI::Escape -e ' print uri_unescape("http://%77%77%77%2E%66%70% +63%6D%61%67%61%7A%69%6E%65%2E%6E%65%74/") . "\n"'
    where the preceding was all on one line.

    Bob Niederman, http://bob-n.com