20CN网络安全小组论坛 - 原创软件 - 本人写的一个简单的探测 <嗅探器>的测试程序

论坛: 原创软件标题: 本人写的一个简单的探测 <嗅探器>的测试程序

作者: z_verygood [z_verygood]

论坛用户

#include "Winsock.h"
#define MAX_RECV_LEN 65535
#define MAX_HOSTNAME_LEN 255
#pragma comment (lib , "ws2_32.lib")

int main()
{

SOCKET RawSock,Sck;

WSADATA wsaData;

int ret=0;

struct sockaddr_in sAddr,addr;

char RecvBuf[MAX_RECV_LEN];

char FAR name[MAX_HOSTNAME_LEN];

struct hostent FAR * pHostent;

char *Buf=(char *)malloc(128);

//设置等待一秒钟超时
int settimeout=1000;

printf("正在查找，请稍等...\n");

WSAStartup(MAKEWORD(2,2),&wsaData);

//生成一个RawSocket
RawSock=socket(AF_INET,SOCK_RAW,IPPROTO_IP);
if(RawSock == INVALID_SOCKET)
{
printf("生成RawSocket错误！\n");
free(Buf);
WSACleanup();
return 0;
}

//生成一个UDP
Sck=socket(AF_INET,SOCK_DGRAM,IPPROTO_UDP);
if(Sck == INVALID_SOCKET)
{
printf("生成UDP错误！\n");
closesocket(RawSock);
free(Buf);
WSACleanup();
return 0;
}

memset(&sAddr,0,sizeof(sAddr));
memset(&addr,0,sizeof(addr));

sAddr.sin_family=AF_INET;
sAddr.sin_port=htons(4000);

addr.sin_family=AF_INET;
addr.sin_port=htons(4001);

//把IP地址指向本机
addr.sin_addr.S_un.S_addr=inet_addr("127.0.0.1");

memset(RecvBuf,0, sizeof(RecvBuf));

//得到本地IP
pHostent=(struct hostent *)malloc(sizeof(struct hostent));
gethostname(name, MAX_HOSTNAME_LEN);
pHostent=gethostbyname(name);
memcpy(&sAddr.sin_addr.S_un.S_addr, pHostent->h_addr_list[0], pHostent->h_length);

//绑定一个本机的接收端口
bind(RawSock, (struct sockaddr *)&sAddr, sizeof(sAddr));

//虚连接到本机的一个未打开的端口
connect(Sck,(struct sockaddr *)&addr,sizeof(addr));

strcpy(Buf,"!@###########!!!");

//设置超时等待
setsockopt(RawSock,SOL_SOCKET,SO_RCVTIMEO,(char *)&settimeout,sizeof(int));

//向虚连接端口发送一个数据包
send(Sck,Buf,strlen(Buf),0);

//使用RawSock尝试接收这个数据包
ret=recv(RawSock,RecvBuf,sizeof(RecvBuf),0);
if(ret==SOCKET_ERROR || ret==0)
printf("没有发现嗅探器!\n");
else
{
//检查
if(strcmp(Buf,"!@###########!!!")==0)
printf("发现嗅探器!!!!!!!!!!!! \n");

}

closesocket(Sck);
closesocket(RawSock);
free(Buf);
WSACleanup();

return 0;

}

地主发表时间: 11/13 13:45