数据包伪造替换、会话劫持、https劫持之探索和测试

typedef struct
{
    unsigned char SrcIP[IPV6_IP_SIZE];
    unsigned char DstIP[IPV6_IP_SIZE];
    unsigned short Protocol;
    unsigned short PackLen;
}IPV6FAKEHEADER, *LPIPV6FAKEHEADER;

WORD Checksum::checksum(WORD *buffer,int size)
{
    unsigned long cksum = 0;
    while(1<size)
    {
        cksum += *buffer++;
        size -= sizeof(USHORT);
    }
    if(0<size)
        cksum += *(UCHAR*)buffer;
    cksum = (cksum>>16) + (cksum&0xffff);
    cksum += (cksum>>16);
    return(unsigned short)(~cksum);
}


USHORT Checksum::subPackChecksum(char * lpCheckSumData,WORD wCheckSumSize,DWORD dwSrcIP,DWORD dwDstIP,unsigned int wProtocol)
{
    char szCheckSumBuf[MAX_SINGLE_PACKET_SIZE];
    LPCHECKSUMFAKEHEADER lpFakeHdr = (LPCHECKSUMFAKEHEADER)szCheckSumBuf;
    lpFakeHdr->dwSrcIP = dwSrcIP;
    lpFakeHdr->dwDstIP = dwDstIP;
    lpFakeHdr->Protocol = ntohs(wProtocol);
    lpFakeHdr->usLen = ntohs(wCheckSumSize);

    memcpy(szCheckSumBuf + sizeof(CHECKSUMFAKEHEADER),(char*)lpCheckSumData,wCheckSumSize);

    *(DWORD*)(szCheckSumBuf + sizeof(CHECKSUMFAKEHEADER) + wCheckSumSize) = 0;

    unsigned short nCheckSum = checksum((WORD*)szCheckSumBuf,wCheckSumSize + sizeof(CHECKSUMFAKEHEADER));
    return nCheckSum;
}

typedef struct {
    char version : 4;
    char type : 4;
    unsigned char code;
    unsigned short sessionid;
    unsigned short len;
    unsigned short protocol;
}PPPOEHEADER, *LPPPPOEHEADER;


typedef struct
{

    unsigned char idhigh : 4;
    unsigned char canonical : 1;
    unsigned char priority : 3;
    unsigned char id : 8;

    unsigned short type;
}HEADER8021Q, *LPHEADER8021Q;

typedef struct  
{
    unsigned short TransactionID;        //交易ID，发出和接收必须相同
    unsigned short Flags;                //标志字段，发出和接收都应该修改该字段
    unsigned short Questions;            //问题格式
    unsigned short AnswerRRS;            //回答资源记录个数
    unsigned short AuthorityRRS;        //认证资源记录个数
    unsigned short AdditionalRRS;        //附加资源记录个数
}DNSHEADER,*LPDNSHEADER;

//中间的要解析的名称以一个非可打印字符开头，以0结尾，后面紧跟着解析的类型要求，和CLASS要求
typedef struct  
{
    unsigned short    Name;                //名称，低字节为从开头的偏移地址，只想要解析的内容
    unsigned short    Type;                //类型，0005为解析字符串，0001为解析IP地址
    unsigned short     Class;                //输入
    unsigned short    HighTTL;            //生存周期
    unsigned short    LowTTL;
    unsigned short    AddrLen;            //解析的长度
    unsigned int    Address;            //解析的内容
}DNSANSWER,*LPDNSANSWER;


typedef struct
{
    unsigned short    Name;                //名称，低字节为从开头的偏移地址，只想要解析的内容
    unsigned short    Type;                //类型，0005为解析字符串，0001为解析IP地址
    unsigned short     Class;                //输入
    unsigned short    HighTTL;            //生存周期
    unsigned short    LowTTL;
    unsigned short    AddrLen;            //解析的长度
    unsigned char    Address[16];            //解析的内容
}DNSANSWERIPV6, *LPDNSANSWERIPV6;


typedef struct {
    unsigned short dnstype;
    unsigned short dnsclass;
}DNSTYPECLASS,*LPDNSTYPECLASS;

typedef struct {
    unsigned short    Name;
    unsigned short    Type;
    unsigned short     Class;
    unsigned int    TTL;
    unsigned short    AddrLen;
}DNSANSWERHEADER, *LPDNSANSWERHEADER;