首页 诗词 字典 板报 句子 名言 友答 励志 学校 网站地图
当前位置: 首页 > 教程频道 > 开发语言 > C++ >

怎么伪造数据包

2012-04-03 
如何伪造数据包?Assembly codeGET /Item/vote.asp?m111&id342 HTTP/1.1Host: tp.tongxinjiaoyu.comConne

如何伪造数据包?

Assembly code
GET /Item/vote.asp?m=111&id=342 HTTP/1.1Host: tp.tongxinjiaoyu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.46 Safari/535.11Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Referer: http://tp.tongxinjiaoyu.com/html/bbtp/bbtp_1220_342.htmlAccept-Encoding: gzip,deflate,sdchAccept-Language: zh-CN,zh;q=0.8Accept-Charset: GBK,utf-8;q=0.7,*;q=0.3Cookie: ASPSESSIONIDCASADTTC=AAJDAIJDMOGDLAAMDMMFJKPCHTTP/1.1 200 OKDate: Thu, 08 Mar 2012 15:32:33 GMTServer: Microsoft-IIS/6.0X-Powered-By: ASP.NETContent-Length: 154Content-Type: text/htmlCache-control: private<script language=JavaScript>alert('........342..............');location.replace('http://tp.tongxinjiaoyu.com/html/bbtp/bbtp_1220_342.html')</script>GET /favicon.ico HTTP/1.1Host: tp.tongxinjiaoyu.comConnection: keep-aliveAccept: */*User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.46 Safari/535.11Accept-Encoding: gzip,deflate,sdchAccept-Language: zh-CN,zh;q=0.8Accept-Charset: GBK,utf-8;q=0.7,*;q=0.3Cookie: ASPSESSIONIDCASADTTC=AAJDAIJDMOGDLAAMDMMFJKPCHTTP/1.1 404 Not FoundContent-Length: 1308Content-Type: text/htmlServer: Microsoft-IIS/6.0X-Powered-By: ASP.NETDate: Thu, 08 Mar 2012 15:32:34 GMT<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>............</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=GB2312"><STYLE type="text/css">  BODY { font: 9pt/12pt .... }  H1 { font: 12pt/15pt .... }  H2 { font: 9pt/12pt .... }  A:link { color: red }  A:visited { color: maroon }</STYLE></HEAD><BODY><TABLE width=500 border=0 cellspacing=10><TR><TD><h1>............</h1>................................................<hr><p>................</p><ul><li>........................................................</li><li>................................................................................</li><li>....<a href="javascript:history.back(1)">....</a>....................</li></ul><h2>HTTP .... 404 - ..................<br>Internet ........ (IIS)</h2><hr><p>..............................</p><ul><li>.... <a href="http://go.microsoft.com/fwlink/?linkid=8180">Microsoft ............</a>..........&ldquo;HTTP&rdquo;..&ldquo;404&rdquo;........</li><li>....&ldquo;IIS ....&rdquo;...... IIS ...... (inetmgr) ........................&ldquo;........&rdquo;..&ldquo;............&rdquo;..&ldquo;..................&rdquo;........</li></ul></TD></TR></TABLE></BODY></HTML>GET /Item/GetVote.asp?m=111&ID=342 HTTP/1.1Host: tp.tongxinjiaoyu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.46 Safari/535.11Accept: */*Referer: http://tp.tongxinjiaoyu.com/html/bbtp/bbtp_1220_342.htmlAccept-Encoding: gzip,deflate,sdchAccept-Language: zh-CN,zh;q=0.8Accept-Charset: GBK,utf-8;q=0.7,*;q=0.3Cookie: ASPSESSIONIDCASADTTC=AAJDAIJDMOGDLAAMDMMFJKPCHTTP/1.1 200 OKDate: Thu, 08 Mar 2012 15:32:36 GMTServer: Microsoft-IIS/6.0X-Powered-By: ASP.NETContent-Length: 20Content-Type: text/htmlCache-control: privatedocument.write('1');GET /plus/ajax.asp?action=SQL&labelid=SQLksu%u540D%u6B21ksl342ksr342p20123036732259%7D&labtype=0&channelid=0&classid=20123036732259}&infoid=342 HTTP/1.1Host: tp.tongxinjiaoyu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.46 Safari/535.11Accept: */*Referer: http://tp.tongxinjiaoyu.com/html/bbtp/bbtp_1220_342.htmlAccept-Encoding: gzip,deflate,sdchAccept-Language: zh-CN,zh;q=0.8Accept-Charset: GBK,utf-8;q=0.7,*;q=0.3Cookie: ASPSESSIONIDCASADTTC=AAJDAIJDMOGDLAAMDMMFJKPCHTTP/1.1 200 OKDate: Thu, 08 Mar 2012 15:32:36 GMTServer: Microsoft-IIS/6.0X-Powered-By: ASP.NETpragma: no-cacheContent-Length: 3Content-Type: text/html; Charset=gb2312Expires: Wed, 07 Mar 2012 15:32:36 GMTCache-control: no-cache156 


上面是我在一个投票系统中抓的包,通过抓包我发现投票时用get方法,传递的是“m=111&id=342”的这样参数,并没有传递IP地址,而实际上这个投票系统做了一个IP的限制,即如果某个IP下投票之后不能再投票了。所以,我猜肯定是在服务器端利用request对象查询到了投票者的IP(这个方法是有的吧)。我现在想,如果想刷票的话只要突破这个IP限制就可以了,可以通过发送假的数据包啊,于是我想我现在构造了一个IP报文(里面IP报文头部填写一个假的IP地址),然后通过socket发送到对方80端口。后来又想了一下,服务器80端口接收到的socket会去提取封装的这个假IP地址还是。。。?想到这块想不明白了,故在此问一下大家,这个究竟是怎么玩的?

[解决办法]
我觉得你在发送的这个投票数据包 包头做改动应该可行。
[解决办法]
tcp协议不能伪造源地址的,过不了握手这关
[解决办法]
tcp协议不能伪造源地址的,过不了握手这关
[解决办法]
它是根据你建立时的socket通信对方的IP地址来判断的。
你伪造IP地址,如楼上所说,是无法建立TCP连接的

热点排行