信息对抗大作业.doc

目录  TOC \o 1-3 \h \z \u  HYPERLINK \l _Toc265651795 1.判断远程主机存活功能和路由信息功能  PAGEREF _Toc265651795 \h 2  HYPERLINK \l _Toc265651796 1.1判断远程主机存活功能  PAGEREF _Toc265651796 \h 2  HYPERLINK \l _Toc265651797 1.2判断远程主机路由信息功能  PAGEREF _Toc265651797 \h 4  HYPERLINK \l _Toc265651798 2．全连接网络扫描  PAGEREF _Toc265651798 \h 5  HYPERLINK \l _Toc265651799 3．半打开SYN端口扫描  PAGEREF _Toc265651799 \h 6  HYPERLINK \l _Toc265651800 4.网络数据侦听  PAGEREF _Toc265651800 \h 7  HYPERLINK \l _Toc265651801 5.木马功能  PAGEREF _Toc265651801 \h 9   1.判断远程主机存活功能和路由信息功能 1.1判断远程主机存活功能 实现步骤：通过创建填写ICMP封装包来实现Ping的功能。构建ICMP通过ICMP包头来实现ICMP的构建，数据部分使用字母“A”来填充。 // 创建原始套节字 SOCKET sRaw = ::socket(AF_INET, SOCK_RAW, IPPROTO_ICMP); // 设置接收超时 SetTimeout(sRaw, 1000, TRUE); CString temp; // 设置目的地址 SOCKADDR_IN dest; dest.sin_family = AF_INET; dest.sin_port = htons(0); char *strTemp=new char[strIP.GetLength()+1]; memset(strTemp,0,sizeof(char) *(strIP.GetLength()+1)); WideCharToMultiByte(CP_ACP,0,strIP.GetBuffer(),-1,strTemp,strIP.GetLength(),NULL,NULL); dest.sin_addr.S_un.S_addr = inet_addr(strTemp); delete[] strTemp; // 创建ICMP封包 char buff[sizeof(ICMP_HDR) + 32]; ICMP_HDR* pIcmp = (ICMP_HDR*)buff; // 填写ICMP封包数据 pIcmp-icmp_type = 8; // 请求一个ICMP回显 pIcmp-icmp_code = 0; pIcmp-icmp_id = (USHORT)::GetCurrentProcessId(); pIcmp-icmp_checksum = 0; pIcmp-icmp_sequence = 0; // 填充数据部分，可以为任意 memset(buff[sizeof(ICMP_HDR)], A, 32); // 开始发送和接收ICMP封包 USHORT nSeq = 0; char recvBuf[1024]; SOCKADDR_IN from; int nLen = sizeof(from); while(TRUE) { static int nCount = 0; int nRet; if(nCount++ == 4) break; pIcmp-icmp_checksum = 0; pIcmp-icmp_timestamp = ::GetTickCount(); pIcmp-icmp_sequence = nSeq++; pIcmp-icmp_checksum = checksum((USHORT*)buff, sizeof(ICMP_HDR) + 32); nRet = ::sendto(sRaw, buff, sizeof(ICMP_HDR) + 32, 0, (SOCKADDR *)dest, sizeof(dest)); if(nRet == SOCKET_ERROR) { temp.Format(_T( sendto() failed: %d \n), ::WSAGetLastError()); MessageB