3389微探針

/**************************************
/* 作者:半斤八兩
/* 博客:http://cnblogs.com/bjblcracked
/* 日期:2014-05-05  17:44
/**************************************

 

只是感興趣，沒有其他目的。失誤之處敬請諸位大俠賜教!


今天看到這個貼子作者尋問3389掃描的問題.
http://bbs.pediy.com/showthread.php?t=187377
想起來以前剛接觸的電腦不久的時候,也是經常掃3389,
不過那時候還沒有啥工具,我是寫了個bat腳本,直接調用mstsc來掃描的. 
那個速度,慢的,是可想而知的...

正好今天就試着寫了一個.(重溫一下以前的"歡樂"時光) 

 

 

CRITICAL_SECTION g_tagSection = {0};

DWORD g_dwIp = 0;
SOCKADDR_IN sPortAddr = {0};

// 是否查看超時IP
DWORD g_dwViewAllIP = 0;

// 開放3389端口的IP個數
DWORD g_dwOpenPortIPNumber = 0;

void InitSocket()
{
    WORD wVersionRequested;
    WSADATA wsaData;
    int err;
    
    wVersionRequested = MAKEWORD( 2, 2 );
    
    err = WSAStartup( wVersionRequested, &wsaData );
    if ( err != 0 ) {
        return;
    }
    
    if ( LOBYTE( wsaData.wVersion ) != 2 ||
        HIBYTE( wsaData.wVersion ) != 2 ) {
        WSACleanup();
        return;
    }
}




DWORD IsTest(SOCKET sPort, SOCKADDR_IN sPortAddr)
{
    int flag = 1;
    struct timeval timeout;
    fd_set r;
    int ret;
    int error;
    int len = sizeof(int);
    int err = 0;


    err = connect(sPort, (SOCKADDR*)&sPortAddr, sizeof(sPortAddr));
    
    if (SOCKET_ERROR == err)
    {
        FD_ZERO(&r);
        FD_SET(sPort, &r);
        
        timeout.tv_sec = 1;
        timeout.tv_usec = 0;
        
        ret = select(0, 0, &r, 0, &timeout);
        
        if (ret > 0)
        {
            getsockopt(sPort, SOL_SOCKET, SO_ERROR, (PCHAR)&error, &len);
            
            if(error == 0) 
            {
                
                printf("IP: [%s]\tOpen Port 3389\r\n", inet_ntoa(sPortAddr.sin_addr));
                g_dwOpenPortIPNumber++;
                
                ret = TRUE;
            }
            else
            {
                puts("time close port 3389");
                ret = FALSE;
            }
        }
        else 
        {
            ret = FALSE;
        }
    }    
    else
    {
        puts("close port 3389");
        ret = TRUE;
    }
    
    
    if (!ret) 
    {
        if(g_dwViewAllIP)
            printf("IP: [%s]\t\t連接超時!!!\r\n", inet_ntoa(sPortAddr.sin_addr));
    }

    return TRUE;
}


void IsChildProc(VOID*)
{
    EnterCriticalSection(&g_tagSection);

    SOCKET sPort = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP);
    
    DWORD arp = 1;
    if (ioctlsocket(sPort, FIONBIO, &arp) != 0)
    {  
        closesocket(sPort);  
        return;  
    }


    if(g_dwIp >= 0xff000000)
    {
        Sleep(2000);
        puts("---------------------------------------------------------------");
        printf("\r\n\r\n\t\t\t總共掃到 [%d] 個主機開放端口!   :)\r\n\r\n\r\n", g_dwOpenPortIPNumber);
        system("pause");
        exit(0);
        return;
    }
    
    g_dwIp += 0x01000000;
    in_addr inaddr;
    inaddr. s_addr = g_dwIp;
    sPortAddr.sin_addr = inaddr;

    LeaveCriticalSection(&g_tagSection);

    IsTest(sPort, sPortAddr);

    closesocket(sPort);
}

void IsFoundOpenPortProc(VOID*)
{
    while(TRUE)
    {
        HANDLE Thread = (HANDLE)_beginthread(IsChildProc, 0, NULL);

        Sleep(100);
    }
}

int main(int argc, char* argv[])
{
    system("color 0a & title 3389微探針 By 半斤八兩 & cls");

    InitSocket();

    puts("-------------------------------------------------");
    puts("-                3389 微探針                    -");
    puts("-                                               -");
    puts("-      快速掃描3389端口     -_=||               -");
    puts("-                                               -");
    puts("-             By 半斤八兩                       -");
    puts("-                                               -");
    puts("-                   2014.05.05                  -");
    puts("-------------------------------------------------");

    puts("請輸入1個IP, 格式如下: 192.168.5.0");
    BYTE szIp[MAXBYTE] = {0};
    scanf("%s", szIp);
    puts("您是否想查看所有IP?(包括超時IP), 輸入0只顯示開放3389的IP. 輸入1顯示所有IP");
    scanf("%d", &g_dwViewAllIP);

    SYSTEM_INFO tagSystemInfo = {0};
    GetSystemInfo(&tagSystemInfo);

    InitializeCriticalSection(&g_tagSection);

    g_dwIp = inet_addr((PCHAR)szIp);

//    sPortAddr.sin_addr.S_un.S_addr = inet_addr("115.22.143.1");  // 3389 測試
    sPortAddr.sin_family = AF_INET;
    sPortAddr.sin_port = htons(3389);

    for (int i = 0; i < (int)tagSystemInfo.dwNumberOfProcessors * 20; ++i)
    {
        _beginthread(IsFoundOpenPortProc, 0, NULL);
    }

    Sleep(INFINITE);

    DeleteCriticalSection(&g_tagSection);


    return 0;
}

 

 

Bin和Code下載地址:

<看雪學院>