Hexip

From Mibbit Wiki
(Redirected from Hexident)
Jump to: navigation, search


When you use Mibbit to connect to a webirc enabled IRC Network, the Mibbit Server and that IRC Network share a password and set up your ident@host:real_name/GECOS fields to match your true @host or @IP. It is then up to that IRC Network to apply any host cloaking that they may or may not have enabled.

What is shown when connected to an IRC Network that is Enabled

For example, if your host name was adsl-66-124-160-150.dsl.lsan03.pacbell.net and your IP was 66.124.160.150, then when you connected to the Mibbit network, your ident@host:real_name/GECOS fields would be shown as:

YourNick Mibbit@mib-11DE075.dsl.lsan03.pacbell.net http://www.mibbit.com

or

YourNick Mibbit@287AB38E.50E33866.F91BE320.IP http://www.mibbit.com

What is shown when connected to an IRC Network that is not Enabled

When you use Mibbit to connect to an IRC Network that is not webirc enabled. That is, the Mibbit Server and that IRC Network have not set up any trust, the Mibbit Server sends the fields the same, but the IRC Network can't translate that information as you may expect.

For example, if your host name was adsl-66-124-160-150.dsl.lsan03.pacbell.net and your IP was 66.124.160.150, then when you connected to an IRC Network that is not webirc enabled, your ident@host:real_name/GECOS fields would be shown as:

YourNick 427ca096@[DC].mibbit.com adsl-66-124-160-150.dsl.lsan03.pacbell.net

or

YourNick 427ca096@[DC].mibbit.com 66.124.160.150

where [DC] can be one of these DataCenters: ircip1, ircip3 or ircip4 (207.192.75.252, 78.129.202.38, 109.169.29.95)

Trusting the Information

So on first glance, it appears that the real_name/GECOS field is exposing your true host/ip. Yes it is, but.

  • Some IRCDs allow a user to override this.
    • As a user can you trust this information?
      • No, a user could override this.
    • As a Network Admin can you trust this information?
      • Yes, but only upon your initial CLICONN notice.

So, what else does Mibbit do to help? The ident field is the Hex encoded IP. The "427ca096" part of the above example.

  • I know of no IRCd's that allow a user to override this.
    • As a user can you trust this information?
      • Yes.
    • As a Network Admin can you trust this information?
      • Yes.
  • This functionality is part of the webirc protocol.

How to decode the hexip

Using the same example, 427ca096.

  • Get your handy Hex2Decimal calculator out (Windows calc.exe in 'Scientific mode' for example):
The Hex - 427ca096
Seperate every character pair - 427ca096 --> 42.7c.a0.96
Convert each character pair from Hex to Decimal. - 427ca096 --> 42.7c.a0.96 --> 
0x42 Hex is 66 Decimal. 0x7c Hex is 124 Decimal. 0xa0 Hex is 160 Decimal. 0x96 Hex is 150 Decimal.
Put it back together into a readable IP - 427ca096 --> 42.7c.a0.96 --> 66.124.160.150 
  • Use a web based tool such as kloth

References

UnrealIRCD User and Oper commands [1]