受到非法碎片包攻击(国外英文资料).docVIP

受到非法碎片包攻击(国外英文资料) Attacked by illegal fragmentation packets Procedure involved: Win98 NT4/SP5,6 Win2K Description: The Windows system will refuse service if it is attacked by illegal fragmentation packets Detail: This code mainly performs two operations: - illegal fragmentation ICMP ECHOs (pings) - illegal fragmentation, UDP, packets They all send the same continuous fragment stream (the same offset, the same frag, ID, the others are the same). The structure of the fragmented package is like this: - ALL, fragments, are, sent, with, fragment, offset, - 9, bytes, of, IP, data, are, sent (total, packet, length, 29) - IP, packet, ID, is, 0x0455 - TTL is initially 255 - Source, address, is, not, spoofed - Destination, address, is, victim, address - IP, checksum, is, set, to, zero (should, be, illegal), if this value is IP Automatic calculation of stack or NIC will not be 0 - IP, total, length, is, set, to, 68 (IP+8+40) (illegal)! - The, IP, MF, flag, is, set, to, zero, (last, fragment) When the machine is under attack, the CPU occupancy rate is 100%, until the attack stops The following code is only used to test and investigate this vulnerability, and if you use it for unfair reasons, you should be conceited * * File: jolt2.c * Author:, Phonix, phonix@moocow.org * Date: 23-May-00 * * Description:, This, is, the, proof-of-concept, code, for, the * Windows, denial-of-serice, attack, described, by * the, Razor, team (NTBugtraq, 19-May-00) * (MS00-029) This, code, causes, CPU, utilization * to, go, to, 100%. * * Tested, against:, Win98; NT4/SP5,6; Win2K * * Written, for:, My, Linux, box., YMMV., Deal, it., with * * Thanks:, This, is, standard, code., Ripped, from, places., lots, of,... * Insert, your, name, here, if, you, think, you,, wrote, some, of * it., Its, a, trivial, exploit, so, I, wont, take, credit * for, anything, except, putting, this, file, together. * / #include stdio.h #include string.h #include netdb.h #include sys/socket.h #include sys/types.h #include netin