hacking security forum

Re: [Full-Disclosure] Phishing scam - Obfuscated url help please

From: Matthias Benkmann <msbREMOVE-THIS@winterdrache.de>
Date: Fri Jan 23 2004 - 04:34:34 CST

On Fri, 23 Jan 2004 11:38:22 +1100 "Zach Forsyth"
<Zach.Forsyth@kiandra.com> wrote:

> Hi there,
>
> Just wondering if someone could help me work out where this url actually
> points.

An easy way to de-obfuscate this is to give your browser this URL. Works
at least with Mozilla, but I think other browsers support the javascript:
pseudo-protocol, too.

javascript:alert(decodeURI('<obfuscated-URL-here>'))

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Fri Jan 23 06:04:40 2004

This archive was generated by hypermail 2.1.8 : Fri Jan 23 2004 - 07:01:02 CST

Custom Search