小弟,刚开始接触这方面,而且编程基础薄弱,网上找到些代码,自己改了下,实现了LSP 的安装和卸载,而且,上网也正常,LSP dll 里面 根据进程名来判断是否使用SOCKS5 代理,浏览器,访问都没问题。但是一旦建立TCP 长连接,连接成功后,立刻断掉。找不到原因,求大神看看
这是自己写的Socks5 代理调用函数
// 连接socks5代理
int socksProxyEx(SOCKET s, const struct sockaddr *name, int namelen)
{
char ip[] = "**.**.**.**";
int host = 40136;
char user[] = "jxqy8671%#**";
char password[] = "43***";
int rc = 0;
if(rc = WSAEventSelect(s, 0, NULL))//这一个可以不用执行
{
PutDbgStr(L"Error %d : WSAEventSelect Failure!", WSAGetLastError());
}
else
{
PutDbgStr(L"Message : WSAEventSelect successfully!");
}
//这里应该先保存下socket的阻塞/非阻塞类型,在最后面跟据这里的值将它还原,但是不知道怎样获取此类型
// 修改socket为阻塞类型
unsigned long nonBlock = 0;
if(rc = ioctlsocket(s, FIONBIO, &nonBlock))// 这个真正修改为阻塞类型
{
PutDbgStr(L"Error %d : Set Blocking Failure!", WSAGetLastError());
}
else
{
PutDbgStr(L"Message : Set Blocking successfully!");
}
//连接代理服务器
sockaddr_in serveraddr;
memset(&serveraddr, 0, sizeof(serveraddr));
serveraddr.sin_family = AF_INET;
serveraddr.sin_addr.S_un.S_addr = inet_addr(ip);
serveraddr.sin_port = htons(host); // 端口号
WSABUF DataBuf;
char buffer[4];
memset(buffer, 0, sizeof(buffer));
DataBuf.len = 4;
DataBuf.buf = buffer;
int err = 0;
if((rc = NextProcTable.lpWSPConnect(s, (struct sockaddr *)&serveraddr, sizeof(struct sockaddr), &DataBuf, NULL, NULL, NULL, &err)) != 0)
{
PutDbgStr(L"Error %d : attempting to connect to SOCKS server!", err);
return rc;
}
else
{
PutDbgStr(L"Message : Connect to SOCKS server successfully!");
}
//发送请求来协商版本和认证方法
//VER NMETHODS METHODS
//1 1 1 to 255
char verstring[257];
verstring[0] = 0x05; //VER (1 Byte)
verstring[1] = 0x01; //NMETHODS (1 Byte)
verstring[2] = 0x00; //METHODS (allow 1 - 255 bytes, current 1 byte)
if((rc = send(s, verstring, 3, 0)) < 0)
{
PutDbgStr(L"Error %d : attempting to send SOCKS method negotiation!", WSAGetLastError());
return rc;
}
else
{
PutDbgStr(L"Message : send SOCKS method negotiation successfully!");
}
//接收代理服务器返回信息
//VER METHOD
//1 1
/*当前定义的方法有:
· X’00’ 不需要认证
· X’01’ GSSAPI
· X’02’ 用户名/密码
· X’03’ -- X’7F’ 由IANA分配
· X’80’ -- X’FE’ 为私人方法所保留的
· X’FF’ 没有可以接受的方法*/
char ver[2];
if(recv(s, ver, 2, 0) < 0)
{
return ECONNABORTED;
}
char xxxx = ver[1];
TCHAR Msg[155];
wsprintf(Msg,L"...................socks5 返回判断标示 %c...................",xxxx);
OutputDebugString(Msg);
// 代理服务器选择方法
// 判断我们的方法是否可行
if(ver[1] == 0xff)
{
PutDbgStr(L"Error : SOCKS server refused authentication methods!");
rc = ECONNREFUSED;
return rc;
}
else if(ver[1] == 0x02)// 方法2 : 用户名/密码
{
//另外处理
char Buffer[50];
*(int*)(Buffer+0)=(int)1;
int ui=strlen(user);
memcpy(Buffer+1,(char*)&ui,1);
memcpy(Buffer+2,user,ui);
int pi=strlen(password);
memcpy(Buffer+2+ui,(char*)&pi,1);
memcpy(Buffer+2+ui+1,password,pi);
if((rc = send(s, Buffer, 3+ui+pi, 0)) < 0)
{
return rc;
}
if((rc = recv(s, Buffer, 2, 0)) < 0)
{
OutputDebugString(L"用户名密码验证IP测试失败1");
return ECONNREFUSED;
}
if(Buffer[1]!= 0x00){
OutputDebugString(L"用户名密码验证IP测试失败2");
return ECONNREFUSED;
}
OutputDebugString(L"用户名密码验证IP测试通过");
} else if(ver[1] == 0x00)// 方法0: 不需要认证
{
struct sockaddr_in sin;
sin = *(const struct sockaddr_in *)name;
char buf[10];
buf[0] = '/x05'; // 版本 SOCKS5
buf[1] = '/x01'; // 连接请求
buf[2] = '/x00'; // 保留字段
buf[3] = '/x01'; // IPV4
memcpy(&buf[4], &sin.sin_addr.S_un.S_addr, 4);
memcpy(&buf[8], &sin.sin_port, 2);
//发送
if((rc = send(s, buf, 10, 0)) < 0)
{
PutDbgStr(L"Error %d : attempting to send SOCKS connect command!", WSAGetLastError());
return rc;
}
else
{
PutDbgStr(L"Message : send SOCKS connect command successfully!");
}
if((rc = recv(s, buf, 10, 0)) < 0) // 用了天翼的网络之后,这里就接收不到返回信息了,不解
{
PutDbgStr(L"Error %d : attempting to receive SOCKS connection reply!", WSAGetLastError());
rc = ECONNREFUSED;
return rc;
}
else
{
PutDbgStr(L"Message : receive SOCKS connection reply successfully!");
}
if(rc < 10)
{
PutDbgStr(L"Message : Short reply from SOCKS server!");
return rc;
}
else
{
PutDbgStr(L"Message : reply from SOCKS larger than 10!");
}
//连接不成功
if(buf[0] != '/x05')
{
PutDbgStr(L"Message : Socks V5 not supported!");
return ECONNABORTED;
}
else
{
PutDbgStr(L"Message : Socks V5 is supported!");
}
if(buf[1] != '/x00')
{
PutDbgStr(L"Message : SOCKS connect failed!");
switch((int)buf[1])
{
case 1:
PutDbgStr(L"General SOCKS server failure!");
return ECONNABORTED;
case 2:
PutDbgStr(L"Connection denied by rule!");
return ECONNABORTED;
case 3:
PutDbgStr(L"Network unreachable!");
return ENETUNREACH;
case 4:
PutDbgStr(L"Host unreachable!");
return EHOSTUNREACH;
case 5:
PutDbgStr(L"Connection refused!");
return ECONNREFUSED;
case 6:
PutDbgStr(L"TTL Expired!");
return ETIMEDOUT;
case 7:
PutDbgStr(L"Command not supported!");
return ECONNABORTED;
case 8:
PutDbgStr(L"Address type not supported!");
return ECONNABORTED;
default:
PutDbgStr(L"Unknown error!");
return ECONNABORTED;
}
}
else
{
PutDbgStr(L"Message : SOCKS connect Success!");
}
}
else
{
PutDbgStr(L"Error : Method not supported!");
}
//修改socket为非阻塞类型
nonBlock = 1;
if(rc = ioctlsocket(s, FIONBIO, &nonBlock))
{
PutDbgStr(L"Error %d : Set Non-Blocking Failure!", WSAGetLastError());
return rc;
}
else
{
PutDbgStr(L"Message : Set Non-Blocking Successful!");
}
PutDbgStr(L"Message : Success!");
return 0;
}
重写了 并导出 WSPStartup 函数
网上说TCP 的话,只需要 处理WSPConnect 就可以实现TCP 的代理
下面是代码
int WSPAPI WSPConnect(
SOCKET s,
const struct sockaddr *name,
int namelen,
LPWSABUF lpCallerData,
LPWSABUF lpCalleeData,
LPQOS lpSQOS,
LPQOS lpGQOS,
LPINT lpErrno)
{
OutputDebugString(L"WSPConnect");
struct sockaddr_in sin;
sin=*(const struct sockaddr_in *)name;
if(strcmp(inet_ntoa(sin.sin_addr), "127.0.0.1") == 0)
{
return NextProcTable.lpWSPConnect(s, name, namelen, lpCallerData, lpCalleeData, lpSQOS, lpGQOS, lpErrno);
}
if (isSocks5())//是否需要代理
{
TCHAR Msg[255];
wsprintf(Msg,L"...................进程 %s 使用代理...................",processname);
OutputDebugString(Msg);
return socksProxyEx(s, name, namelen);
}
else
{
TCHAR Msg[255];
wsprintf(Msg,L"进程 %s 走正常路线",processname);
OutputDebugString(Msg);
return NextProcTable.lpWSPConnect(s, name, namelen, lpCallerData, lpCalleeData, lpSQOS, lpGQOS, lpErrno);
}
}
TCHAR sourceProcess[255] = L"TestIP.exe";//使用代理的进程名
//TCHAR sourceProcess[255] = L"ClinetTest.exe";//使用代理的进程名
TCHAR processname[255];
BOOL APIENTRY DllMain( HMODULE hModule,
DWORD ul_reason_for_call,
LPVOID lpReserved
)
{
if(ul_reason_for_call==DLL_PROCESS_ATTACH)
{
DWORD _processId = GetCurrentProcessId();
TCHAR Msg[1024];
GetModuleFileNameW(NULL,processname,500);
wsprintf(Msg,L"进程ID:%d path %s",_processId,processname);
OutputDebugString(Msg);
}
return TRUE;
}
//是否需要Socks5代理
bool isSocks5()
{
//判断processname 是否包含SourceProcess
wstring _processname = processname;
wstring _sourceProcess = sourceProcess;
size_t found = _processname.find(_sourceProcess);
if (found!= wstring::npos)
{
return true;
}else
{
return false;
}
}
每次建立长连接,连接服务器时,连接上立刻就断开了,很是不解,google 了很久,没找到答案,求大神们解惑啊
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)