锘??xml version="1.0" encoding="utf-8" standalone="yes"?> 銆銆鍏充簬緗戠粶鐩戝惉甯稿父浼氭湁涓浜涙湁鎰忔濈殑闂錛屽錛?鎴戠幇鍦ㄦ湁榪炲湪緗戜笂鐨勮綆楁満浜嗭紝鎴戜篃鏈変簡紿冨惉鐨勮蔣浠朵簡錛岄偅涔堟垜鑳戒笉鑳界獌鍚埌寰蔣(鎴栬呯編鍥藉浗闃查儴錛屾柊嫻綉絳夌瓑)鐨勫瘑鐮侊紵 銆銆鍙堝錛氭垜鏄叕鍙哥殑灞鍩熺綉綆$悊鍛橈紝鎴戠煡閬揾ub寰堜笉瀹夊叏錛屼嬌鐢╤ub榪欑緗戠粶緇撴瀯灝嗗叕鍙哥殑璁$畻璁′簰榪炶搗鏉ワ紝浼氫嬌緗戠粶鐩戝惉鍙樺緱闈炲父瀹規槗錛岄偅涔堟垜浠氨鎹㈡帀hub錛屼嬌鐢ㄤ氦鎹㈡満錛屼笉灝辮兘瑙e喅鍙d護澶辯獌榪欑瀹夊叏闂浜嗕箞錛?/p> 銆銆榪欐槸涓や釜寰堟湁鎰忔濈殑闂錛屾垜浠湪榪欓噷鍏堜笉鍋氬洖絳旓紝鐩鎬俊璇昏呯湅瀹屽叏鏂囧悗浼氭湁鑷繁姝g‘鐨勭瓟妗堛?/p> 銆銆涓浜涘熀鏈蹇碉細 銆銆棣栧厛錛屾垜浠煡閬擄紝涓鍙版帴鍦ㄤ互澶綉鍐呯殑璁$畻鏈轟負浜嗗拰鍏朵粬涓繪満榪涜閫氳錛屽湪紜歡涓婃槸闇瑕佺綉鍗★紝鍦ㄨ蔣浠朵笂鏄渶瑕佺綉鍗¢┍鍔ㄧ▼搴忕殑銆傝屾瘡鍧楃綉鍗″湪鍑哄巶鏃墮兘鏈?/p> 銆銆涓涓敮涓鐨勪笉涓庝笘鐣屼笂浠諱綍涓鍧楃綉鍗¢噸澶嶇殑紜歡鍦板潃錛岀О涓簃ac鍦板潃銆傚悓鏃訛紝褰撶綉緇滀腑涓ゅ彴涓繪満鍦ㄥ疄鐜皌cp/ip閫氳鏃訛紝緗戝崱榪樺繀欏葷粦瀹氫竴涓敮涓鐨刬p鍦板潃銆備笅闈㈢敤涓涓父瑙佺殑unix鍛戒護ifconfig鏉ョ湅涓鐪嬩綔鑰呮湰浜虹殑涓鍙版甯稿伐浣滅殑鏈哄櫒鐨勭綉鍗★細 銆銆[yiming@server/root]# ifconfig -a 銆銆浠庤繖涓懡浠ょ殑杈撳嚭涓垜浠彲浠ョ湅鍒頒笂闈㈣鍒扮殑榪欎簺姒傚康錛屽絎簩琛岀殑192.168.1.35鏄痠p 鍦板潃錛岀涓夎鐨?:0:20:c8:fe:15鏄痬ac鍦板潃銆傝娉ㄦ剰絎竴琛岀殑BROADCAST錛孧ULTICAST錛岃繖鏄粈涔堟剰鎬濓紵涓鑸岃█錛岀綉鍗℃湁鍑犵鎺ユ敹鏁版嵁甯х殑鐘舵侊紝濡倁nicast錛宐roadcast錛宮ulticast錛宲romiscuous絳夛紝unicast鏄寚緗戝崱鍦ㄥ伐浣滄椂鎺ユ敹鐩殑鍦板潃鏄湰鏈虹‖浠跺湴鍧鐨勬暟鎹撫銆侭roadcast鏄寚鎺ユ敹鎵鏈夌被鍨嬩負騫挎挱鎶ユ枃鐨勬暟鎹撫銆侻ulticast鏄寚鎺ユ敹鐗瑰畾鐨勭粍鎾姤鏂囥侾romiscuous鍒欐槸閫氬父璇寸殑娣鋒潅妯″紡錛屾槸鎸囧鎶ユ枃涓殑鐩殑紜歡鍦板潃涓嶅姞浠諱綍媯鏌ワ紝鍏ㄩ儴鎺ユ敹鐨勫伐浣滄ā寮忋傚鐓ц繖鍑犱釜姒傚康錛岀湅鐪嬩笂闈㈢殑鍛戒護杈撳嚭錛屾垜浠彲浠ョ湅鍒幫紝姝e父鐨勭綉鍗″簲璇ュ彧鏄帴鏀跺彂寰鑷韓鐨勬暟鎹姤鏂囷紝騫挎挱鍜岀粍鎾姤鏂囷紝璇峰ぇ瀹惰浣忚繖涓蹇點?/p> 銆銆瀵圭綉緇滀嬌鐢ㄨ呮潵璇達紝嫻忚緗戦〉錛屾敹鍙戦偖浠剁瓑閮芥槸寰堝鉤甯革紝寰堢畝渚跨殑宸ヤ綔錛屽叾瀹炲湪鍚庡彴榪欎簺宸ヤ綔鏄緷闈爐cp/ip鍗忚鏃忓疄鐜扮殑錛屽ぇ瀹剁煡閬撴湁涓や釜涓昏鐨勭綉緇滀綋緋伙細OSI鍙傝冩ā鍨嬪拰TCP/IP鍙傝冩ā鍨嬶紝OSI妯″瀷鍗充負閫氬父璇寸殑7灞傚崗璁紝瀹冪敱涓嬪悜涓婂垎鍒負鐗╃悊灞傘佹暟鎹摼璺眰銆佺綉緇滃眰銆佷紶杈撳眰銆佷細璇濆眰銆佽〃紺哄眰銆佸簲鐢ㄥ眰錛岃宼cp/ip妯″瀷涓幓鎺変簡浼氳瘽灞傚拰琛ㄧず灞傚悗錛岀敱鍓╀笅鐨?灞傛瀯鎴愪簡浜掕仈緗戠殑鍩虹錛屽湪緗戠粶鐨勫悗鍙伴粯榛樼殑宸ヤ綔鐫銆?/p> 銆銆涓嬮潰鎴戜滑涓嶅Θ浠巘cp/ip妯″瀷鐨勮搴︽潵鐪嬫暟鎹寘鍦ㄥ眬鍩熺綉鍐呭彂閫佺殑榪囩▼錛氬綋鏁版嵁鐢卞簲鐢ㄥ眰鑷笂鑰屼笅鐨勪紶閫掓椂錛屽湪緗戠粶灞傚艦鎴恑p鏁版嵁鎶ワ紝鍐嶅悜涓嬪埌杈炬暟鎹摼璺眰錛岀敱鏁版嵁閾捐礬灞傚皢ip鏁版嵁鎶ュ垎鍓蹭負鏁版嵁甯э紝澧炲姞浠ュお緗戝寘澶達紝鍐嶅悜涓嬩竴灞傚彂閫併傞渶瑕佹敞鎰忕殑鏄紝浠ュお緗戠殑鍖呭ご涓寘鍚潃鏈満鍜岀洰鏍囪澶囩殑mac鍦板潃錛屼篃鍗籌紝閾捐礬灞傜殑鏁版嵁甯у彂閫佹椂錛屾槸渚濋潬48bits鐨勪互澶綉鍦板潃鑰岄潪ip鍦板潃鏉ョ‘璁ょ殑錛屼互澶綉鐨勭綉鍗¤澶囬┍鍔ㄧ▼搴忎笉浼氬叧蹇僫p鏁版嵁鎶ヤ腑鐨勭洰鐨刬p鍦板潃錛屽畠鎵闇瑕佺殑浠呬粎鏄痬ac鍦板潃銆傜洰鏍噄p鐨刴ac鍦板潃鍙堟槸濡備綍鑾峰緱鐨勫憿錛熷彂绔富鏈轟細鍚戜互澶綉涓婄殑姣忎釜涓繪満鍙戦佷竴浠藉寘鍚洰鐨勫湴鐨刬p鍦板潃鐨勪互澶綉鏁版嵁甯?縐頒負arp鏁版嵁鍖?錛屽茍鏈熸湜鐩殑涓繪満鍥炲錛屼粠鑰屽緱鍒扮洰鐨勪富鏈哄搴旂殑mac鍦板潃錛屽茍灝嗚繖涓猰ac鍦板潃瀛樺叆鑷繁鐨勪竴涓猘rp緙撳瓨鍐呫?/p> 銆銆褰撳眬鍩熺綉鍐呯殑涓繪満閮介氳繃HUB絳夋柟寮忚繛鎺ユ椂錛屼竴鑸兘縐頒負鍏變韓寮忕殑榪炴帴錛岃繖縐嶅叡浜紡鐨勮繛鎺ユ湁涓涓緢鏄庢樉鐨勭壒鐐癸細灝辨槸HUB浼氬皢鎺ユ敹鍒扮殑鎵鏈夋暟鎹悜HUB涓婄殑姣忎釜绔彛杞彂錛屼篃灝辨槸璇村綋涓繪満鏍規嵁mac鍦板潃榪涜鏁版嵁鍖呭彂閫佹椂錛屽敖綆″彂閫佺涓繪満鍛婄煡浜嗙洰鏍囦富鏈虹殑鍦板潃錛屼絾榪欏茍涓嶆剰鍛崇潃鍦ㄤ竴涓綉緇滃唴鐨勫叾浠栦富鏈哄惉涓嶅埌鍙戦佺鍜屾帴鏀剁涔嬮棿鐨勯氳錛屽彧鏄湪姝e父鐘跺喌涓嬪叾浠栦富鏈轟細蹇界暐榪欎簺閫氳鎶ユ枃鑰屽凡錛佸鏋滆繖浜涗富鏈轟笉鎰挎剰蹇界暐榪欎簺鎶ユ枃錛岀綉鍗¤璁劇疆涓簆romiscuous鐘舵佺殑璇濓紝閭d箞錛屽浜庤繖鍙頒富鏈虹殑緗戠粶鎺ュ彛鑰岃█錛屼換浣曞湪榪欎釜灞鍩熺綉鍐呬紶杈撶殑淇℃伅閮芥槸鍙互琚惉鍒扮殑銆?/p> 銆銆渚嬪瓙錛?br />銆銆鎴戜滑涓嶅Θ涓句竴涓緥瀛愭潵鐪嬬湅錛氭垜浠幇鍦ㄦ湁A,B涓ゅ彴涓繪満錛岄氳繃hub鐩歌繛鍦ㄤ竴涓互澶綉鍐咃紝鐜板湪A鏈轟笂鐨勪竴涓敤鎴鋒兂瑕佽闂瓸鏈烘彁渚涚殑WWW鏈嶅姟錛岄偅涔堝綋A鏈轟笂鐨勭敤鎴峰湪嫻忚鍣ㄤ腑閿叆B鐨刬p鍦板潃錛屽緱鍒癇鏈烘彁渚涚殑web鏈嶅姟鏃訛紝浠?灞傜粨鏋勭殑瑙掑害涓婃潵鐪嬮兘鍙戠敓浜嗕粈涔堝憿錛?/p> 銆銆1錛氶鍏堬紝褰揂涓婄殑鐢ㄦ埛鍦ㄦ祻瑙堝櫒涓敭鍏鏈虹殑鍦板潃錛屽彂鍑烘祻瑙堣姹傚悗錛孉鏈虹殑搴旂敤灞傚緱鍒拌姹傦紝瑕佹眰璁塊棶IP鍦板潃涓築鐨勪富鏈猴紝 銆銆2錛氬簲鐢ㄥ眰浜庢槸灝嗚姹傚彂閫佸埌7灞傜粨鏋勪腑鐨勪笅涓灞備紶杈撳眰錛岀敱浼犺緭灞傚疄鐜板埄鐢╰cp瀵筰p寤虹珛榪炴帴銆?/p> 銆銆3錛氫紶杈撳眰灝嗘暟鎹姤浜ゅ埌涓嬩竴灞傜綉緇滃眰錛岀敱緗戠粶灞傛潵閫夎礬 銆銆4錛氱敱浜嶢錛孊涓ゆ満鍦ㄤ竴涓叡浜綉緇滀腑錛孖P璺敱閫夋嫨寰堢畝鍗曪細IP鏁版嵁鎶ョ洿鎺ョ敱婧愪富鏈哄彂閫佸埌鐩殑涓繪満銆?/p> 銆銆5錛氱敱浜嶢錛孊涓ゆ満鍦ㄤ竴涓叡浜綉緇滀腑錛屾墍浠鏈哄繀欏誨皢32bit鐨処P鍦板潃杞崲涓?8bit鐨勪互澶綉鍦板潃錛岃娉ㄦ剰榪欎竴宸ヤ綔鏄敱arp鏉ュ畬鎴愮殑銆?/p> 銆銆6錛氶摼璺眰鐨刟rp閫氳繃宸ヤ綔鍦ㄧ墿鐞嗗眰鐨刪ub鍚戜互澶綉涓婄殑姣忎釜涓繪満鍙戦佷竴浠藉寘鍚洰鐨勫湴鐨刬p鍦板潃鐨勪互澶綉鏁版嵁甯э紝鍦ㄨ繖浠借姹傛姤鏂囦腑鐢蟲槑錛氳皝鏄疊鏈篒P鍦板潃鐨勬嫢鏈夎咃紝璇峰皢浣犵殑紜歡鍦板潃鍛婅瘔鎴戙?/p> 銆銆7錛氬湪鍚屼竴涓互澶綉涓殑姣忓彴鏈哄櫒閮戒細"鎺ユ敹"(璇鋒敞鎰忚繖涓鐐癸紒)鍒拌繖涓姤鏂囷紝浣嗘甯哥姸鎬佷笅闄や簡B鏈哄鍏朵粬涓繪満搴旇浼氬拷鐣ヨ繖涓姤鏂囷紝鑰孊鏈虹綉鍗¢┍鍔ㄧ▼搴忚瘑鍒嚭鏄湪瀵繪壘鑷繁鐨刬p鍦板潃錛屼簬鏄洖閫佷竴涓猘rp搴旂瓟錛屽憡鐭ヨ嚜宸辯殑ip鍦板潃鍜宮ac鍦板潃銆?/p> 銆銆8錛欰鏈虹殑緗戝崱椹卞姩紼嬪簭鎺ユ敹鍒頒簡B鏈虹殑鏁版嵁甯э紝鐭ラ亾浜咮鏈虹殑mac鍦板潃錛屼簬鏄互鍚庣殑鏁版嵁鍒╃敤榪欎釜宸茬煡鐨凪AC鍦板潃浣滀負鐩殑鍦板潃榪涜鍙戦併傚悓鍦ㄤ竴涓眬鍩熺綉鍐呯殑涓繪満铏界劧涔熻兘"鐪?鍒拌繖涓暟鎹撫錛屼絾鏄兘淇濇寔闈欓粯錛屼笉浼氭帴鏀惰繖涓笉灞炰簬瀹冪殑鏁版嵁甯с?/p> 銆銆涓婇潰鏄竴縐嶆甯哥殑鎯呭喌錛屽鏋滅綉鍗¤璁劇疆涓轟負娣鋒潅妯″紡(promiscuous)錛岄偅涔堢8姝ュ氨浼氬彂鐢熷彉鍖栵紝榪欏彴涓繪満灝嗕細榛樹笉浣滃0鐨勫惉鍒頒互澶綉鍐呬紶杈撶殑鎵鏈変俊鎭紝涔熷氨鏄錛氱獌鍚篃灝卞洜姝ゅ疄鐜頒簡錛佽繖浼氱粰灞鍩熺綉瀹夊叏甯︽潵鏋佸ぇ鐨勫畨鍏ㄩ棶棰橈紝涓鍙扮郴緇熶竴鏃﹁鍏ヤ鏡騫惰繘鍏ョ綉緇滅洃鍚姸鎬侊紝閭d箞鏃犺鏄湰鏈鴻繕鏄眬鍩熺綉鍐呯殑鍚勭浼犺緭鏁版嵁閮戒細闈復琚獌鍚殑宸ㄥぇ鍙兘鎬с傚疄鐜扮綉緇滅洃鍚殑宸ュ叿錛?/p> 銆銆涓婇潰鎴戜滑鐪嬪埌錛屼竴鍒囩殑鍏抽敭灝卞湪浜庣綉鍗¤璁劇疆涓烘販鏉傛ā寮忕殑鐘舵侊紝榪欑宸ヤ綔澶嶆潅鍚楋紵涓嶅垢鐨勬槸錛岃繖縐嶅伐浣滃茍涓嶅鏉傦紝鐩墠鏈夊お澶氱殑宸ュ叿鍙互鍋氬埌榪欎竴鐐廣?/p> 銆銆鑷綉緇滅洃鍚繖涓鎶鏈癁鐢熶互鏉ワ紝浜х敓浜嗗ぇ閲忕殑鍙伐浣滃湪鍚勭騫沖彴涓婄浉鍏寵蔣紜歡宸ュ叿錛屽叾涓湁鍟嗙敤鐨勶紝涔熸湁free鐨勩傚湪google涓婄敤sniffer tools浣滀負鍏抽敭瀛楋紝鍙互鎵懼埌闈炲父澶氥?/p> 銆銆浣滆呭湪榪欓噷鍒椾婦涓浜涗綔鑰呭枩嬈㈢殑杞歡錛屼緵鏈夊叴瓚g殑璇昏呭弬鑰冧嬌鐢ㄣ?/p> 銆銆Windows騫沖彴涓嬬殑錛?/p> 銆銆Windump 銆銆Iris 銆銆unix騫沖彴涓嬬殑錛?/p> 銆銆tcpdump 銆銆ngrep 銆銆snort 銆銆Dsniff 銆銆Ettercap 銆銆Sniffit 銆銆鍦ㄧ郴緇熺鐞嗗憳鐪嬫潵錛岀綉緇滅洃鍚殑涓昏鐢ㄩ旀槸榪涜鏁版嵁鍖呭垎鏋愶紝閫氳繃緗戠粶鐩戝惉杞歡錛岀鐞嗗憳鍙互瑙傛祴鍒嗘瀽瀹炴椂緇忕敱鐨勬暟鎹寘錛屼粠鑰屽揩閫熺殑榪涜緗戠粶鏁呴殰瀹氫綅銆?/p> 銆銆鎴戜滑鍙互涓句釜渚嬪瓙錛?server鏄偖浠舵湇鍔″櫒錛屼笅闈㈠甫浜嗗緢澶氱殑client鐢ㄦ埛錛岄偖浠舵湇鍔″櫒鏀跺彂閭歡宸ヤ綔姝e父錛屼絾涓嬮潰鐨刢lient鐢ㄦ埛鎬繪槸鎶辨ㄥ彂閭歡鏃惰繛鎺ュ埌閭歡鏈嶅姟鍣ㄥ悗瑕佺瓑寰呭緢涔呯殑鏃墮棿鎵嶈兘寮濮嬪彂閫佸伐浣滐紝闂鍑哄湪鍝噷鍛紵 銆銆鍦╯erver涓婁嬌鐢╰cpdump瀵規潵鑷叾涓殑涓涓猚lient鐨勬暟鎹寘榪涜鎹曡幏鍒嗘瀽錛岀湅鐪嬬粨鏋滃浣曪紵 銆銆server#tcpdump host client 銆銆19:04:30.048862 server.33152 > client.113: S 99370916:99370916(0) win 8760 (DF) 銆銆server# tcpdump host client 銆銆鐢辮繖涓瘯楠岋紝鎴戜滑鍙互鐪嬪埌錛岀綉緇滅洃鍚墜孌碉紝瀵圭綉緇滅殑緋葷粺綆$悊鍛樻槸闈炲父鏈変環鍊肩殑銆?/p> 銆銆鐒惰岋紝瀵瑰叆渚佃呭憿錛熶笌綆$悊鍛樻劅鍏磋叮鐨勬槸瀵規暟鎹寘榪涜鍒嗘瀽涓嶅悓錛屽叆渚佃咃紝鎰熷叴瓚g殑鏄暟鎹寘鐨勫唴瀹癸紝灝ゅ叾鏄處鍙鳳紝鍙d護絳夋晱鎰熷唴瀹廣?/p> 銆銆鎴戜滑妯′豢鍏ヤ鏡鑰呭湪涓繪満涓婅窇涓涓笂闈㈡彁鍒扮殑sniffit杞歡錛岀洃鍚湰鏈哄彂鍑哄幓鐨勬墍鏈塼elnet鏁版嵁錛屽涓嬶細 銆銆server#./sniffit -A . -p 23 -s server 銆銆server@yiming#telnet client 銆銆login: yiming 銆銆姝ゆ椂鐪嬬湅sniffit鐨勮褰曟枃浠惰褰曚簡浠涔堬紝 銆銆server# more server.32780-client.23 銆銆鎴戜滑鐪嬪埌浜嗚處鍙穣iming錛屽瘑鐮丳ower^man!錛岃繕鏈夌櫥褰曞悗鎿嶄綔鐨勫懡浠ゃ傝娉ㄦ剰涓鐐癸紝yiming榪欎釜鐢ㄦ埛灝界璁劇疆浜嗛潪甯稿鏉傜殑瀵嗙爜錛屼絾瀵圭綉緇滅洃鍚岃█錛屾槸娌℃湁涓濇鎰忎箟鐨勩?/p> 銆銆鍏跺疄闄や簡鎴幏telnet瀵嗙爜榪欐牱鐨勫姛鑳藉錛屼笓鐢ㄧ殑緗戠粶鐩戝惉杞歡浠庡瘑鐮佸埌閭歡錛屾祻瑙堢殑緗戦〉絳夊唴瀹癸紝鏃犳墍涓嶅寘錛屼絾鐢變簬鏈枃涓嶆槸浠嬬粛緗戠粶鐩戝惉杞歡鐢ㄩ旂殑錛屽洜姝よ繖閲屼笉璇︾粏鍙欒堪鍚勭鐩戝惉杞歡鐨勪嬌鐢ㄦ柟娉曪紝鏈夊叴瓚g殑璇昏呭彲浠ュ弬鐓у悇涓蔣浠剁殑readme絳夋枃浠訛紝寰堢畝鍗曘?br />銆銆緗戠粶鐩戝惉鐨勯槻鑼冩柟娉曪細 銆銆涓婇潰鎴戜滑浠嬬粛浜嗗彲浠ョ敤鏉ヨ繘琛岀綉緇滅洃鍚殑杞歡錛岄偅涔堝榪欑涓嶅彈嬈㈣繋鐨勮涓猴紝鏈夋病鏈変竴浜涢槻鑼冩墜孌靛憿錛?/p> 銆銆涓婇潰鎴戜滑鐭ラ亾錛宻niffer鏄彂鐢熷湪浠ュお緗戝唴鐨勶紝閭d箞錛屽緢鏄庢樉錛岄鍏堝氨瑕佺‘淇濅互澶綉鐨勬暣浣撳畨鍏ㄦэ紝鍥犱負sniffer琛屼負瑕佹兂鍙戠敓錛屼竴涓渶閲嶈鐨勫墠鎻愭潯浠跺氨鏄互澶綉鍐呴儴鐨勪竴鍙版湁婕忔礊鐨勪富鏈鴻鏀葷牬錛屽彧鏈夊埄鐢ㄨ鏀葷牬鐨勪富鏈猴紝鎵嶈兘榪涜sniffer錛屽幓鏀墮泦浠ュお緗戝唴鏁忔劅鐨勬暟鎹俊鎭?/p> 銆銆鍏舵錛岄噰鐢ㄥ姞瀵嗘墜孌典篃鏄竴涓緢濂界殑鍔炴硶錛屽洜涓哄鏋渟niffer鎶撳彇鍒扮殑鏁版嵁閮芥槸浠ュ瘑鏂囦紶杈撶殑錛岄偅瀵瑰叆渚佃呭嵆浣挎姄鍙栧埌浜嗕紶杈撶殑鏁版嵁淇℃伅錛屾剰涔変篃鏄笉澶х殑-姣斿浣滀負telnet錛宖tp絳夊畨鍏ㄦ浛浠d駭鍝佺洰鍓嶉噰鐢╯sh2榪樻槸瀹夊叏鐨勩傝繖鏄洰鍓嶇浉瀵硅岃█浣跨敤杈冨鐨勬墜孌典箣涓錛屽湪瀹為檯搴旂敤涓線寰鏄寚鏇挎崲鎺変笉瀹夊叏鐨勯噰鐢ㄦ槑鏂囦紶杈撴暟鎹殑鏈嶅姟錛屽鍦╯erver绔敤ssh,openssh絳夋浛鎹nix緋葷粺鑷甫鐨則elnet,ftp,rsh錛屽湪client绔嬌鐢╯ecurecrt,sshtransfer鏇夸唬telnet,ftp絳夈?/p> 銆銆闄や簡鍔犲瘑澶栵紝浣跨敤浜ゆ崲鏈虹洰鍓嶄篃鏄竴涓簲鐢ㄦ瘮杈冨鐨勬柟寮忥紝涓嶅悓浜庡伐浣滃湪絎竴灞傜殑hub,浜ゆ崲鏈烘槸宸ヤ綔鍦ㄤ簩灞傦紝涔熷氨鏄鏁版嵁閾捐礬灞傜殑錛屼互CISCO鐨勪氦鎹㈡満涓轟緥錛屼氦鎹㈡満鍦ㄥ伐浣滄椂緇存姢鐫涓寮燗RP鐨勬暟鎹簱錛屽湪榪欎釜搴撲腑璁板綍鐫浜ゆ崲鏈烘瘡涓鍙g粦瀹氱殑MAC鍦板潃錛屽綋鏈夋暟鎹姤鍙戦佸埌浜ゆ崲鏈轟笂鏃訛紝浜ゆ崲鏈轟細灝嗘暟鎹姤鐨勭洰鐨凪AC鍦板潃涓庤嚜宸辯淮鎶ょ殑鏁版嵁搴撳唴鐨勭鍙e鐓э紝鐒跺悗灝嗘暟鎹姤鍙戦佸埌"鐩稿簲鐨?绔彛涓婏紝娉ㄦ剰錛屼笉鍚屼簬HUB鐨勬姤鏂囧箍鎾柟寮忥紝浜ゆ崲鏈鴻漿鍙戠殑鎶ユ枃鏄竴涓瀵瑰簲鐨勩傚浜屽眰璁懼鑰岃█錛屼粎鏈変袱縐嶆儏鍐典細鍙戦佸箍鎾姤鏂囷紝涓鏄暟鎹姤鐨勭洰鐨凪AC鍦板潃涓嶅湪浜ゆ崲鏈虹淮鎶ょ殑鏁版嵁搴撲腑錛屾鏃舵姤鏂囧悜鎵鏈夌鍙h漿鍙戯紝浜屾槸鎶ユ枃鏈韓灝辨槸騫挎挱鎶ユ枃銆傜敱姝わ紝鎴戜滑鍙互鐪嬪埌錛岃繖鍦ㄥ緢澶х▼搴︿笂瑙e喅浜嗙綉緇滅洃鍚殑鍥版壈銆備絾鏄湁涓鐐硅娉ㄦ剰錛岄殢鐫dsniff錛宔ttercap絳夎蔣浠剁殑鍑虹幇錛屼氦鎹㈡満鐨勫畨鍏ㄦу凡緇忛潰涓寸潃涓ュ郴鐨勮冮獙錛佹垜浠皢鍦ㄥ悗闈㈠榪欑鎶鏈繘琛屼粙緇嶃?/p> 銆銆姝ゅ錛屽瀹夊叏鎬ц姹傛瘮杈冮珮鐨勫叕鍙稿彲浠ヨ冭檻kerberos錛宬erberos鏄竴縐嶄負緗戠粶閫氫俊鎻愪緵鍙俊絎笁鏂規湇鍔$殑闈㈠悜寮鏀劇郴緇熺殑璁よ瘉鏈哄埗錛屽畠鎻愪緵浜嗕竴縐嶅己鍔犲瘑鏈哄埗浣縞lient绔拰server鍗充嬌鍦ㄩ潪瀹夊叏鐨勭綉緇滆繛鎺ョ幆澧冧腑涔熻兘紜褰兼鐨勮韓浠斤紝鑰屼笖鍦ㄥ弻鏂歸氳繃韜喚璁よ瘉鍚庯紝鍚庣畫鐨勬墍鏈夐氳涔熸槸琚姞瀵嗙殑銆傚湪瀹炵幇涓篃鍗沖緩绔嬪彲淇$殑絎笁鏂規湇鍔″櫒淇濈暀涓庝箣閫氳鐨勭郴緇熺殑瀵嗛挜鏁版嵁搴擄紝浠卥erberos鍜屼笌涔嬮氳鐨勭郴緇熸湰韜嫢鏈夌閽?private key)錛岀劧鍚庨氳繃private key浠ュ強璁よ瘉鏃跺垱寤虹殑session key鏉ュ疄鐜板彲淇$殑緗戠粶閫氳榪炴帴銆?/p> 銆銆媯嫻嬬綉緇滅洃鍚殑鎵嬫 銆銆瀵瑰彂鐢熷湪灞鍩熺綉鐨勫叾浠栦富鏈轟笂鐨勭洃鍚紝涓鐩翠互鏉ワ紝閮界己涔忓緢濂界殑媯嫻嬫柟娉曘傝繖鏄敱浜庝駭鐢熺綉緇滅洃鍚涓虹殑涓繪満鍦ㄥ伐浣滄椂鎬繪槸涓嶅仛澹扮殑鏀墮泦鏁版嵁鍖咃紝鍑犱箮涓嶄細涓誨姩鍙戝嚭浠諱綍淇℃伅銆備絾鐩墠緗戜笂宸茬粡鏈変簡涓浜涜В鍐寵繖涓棶棰樼殑鎬濊礬鍜屼駭鍝侊細 銆銆1錛氬弽搴旀椂闂? 銆銆3錛氬埄鐢╬ing妯″紡榪涜鐩戞祴 銆銆榪欑鏂規硶錛屽湪10pht榪欎釜榛戝緇勭粐鐨刟ntisniff浜у搧涓湁寰堝ソ鐨勪綋鐜般傚彲鍙傝錛?銆銆銆http://www.securitysoftwaretech.com/antisniff/download.html 銆銆4錛氬埄鐢╝rp鏁版嵁鍖呰繘琛岀洃嫻?
]]>
]]>
銆銆hme0: flags=863 mtu 1500
銆銆inet 192.168.1.35 netmask ffffffe0
銆銆ether 8:0:20:c8:fe:15
銆銆Windump鏄渶緇忓吀鐨剈nix騫沖彴涓婄殑tcpdump鐨剋indow縐繪鐗堬紝鍜宼cpdump鍑犱箮瀹屽叏鍏煎錛岄噰鐢ㄥ懡浠よ鏂瑰紡榪愯錛屽鐢ㄦ儻tcpdump鐨勪漢鏉ヨ浼氶潪甯擱『鎵嬨傜洰鍓嶇増鏈槸3.5.2錛屽彲榪愯鍦╓indows 95/98/ME/Windows NT/2000/XP騫沖彴涓?
銆銆Eeye鍏徃鐨勪竴嬈句粯璐硅蔣浠訛紝鏈夎瘯鐢ㄦ湡錛屽畬鍏ㄥ浘褰㈠寲鐣岄潰錛屽彲浠ュ緢鏂逛究鐨勫畾鍒跺悇縐嶆埅鑾鋒帶鍒惰鍙ワ紝瀵規埅鑾鋒暟鎹寘榪涜鍒嗘瀽錛岃繕鍘熺瓑銆傚綆$悊鍛樻潵璁插緢瀹規槗涓婃墜錛屽叆闂ㄧ駭鍜岄珮綰х鐞嗗憳閮藉彲浠ヤ粠榪欎釜宸ュ叿涓婂緱鍒拌嚜宸辨兂瑕佸緱涓滆タ銆傝繍琛屽湪Windows 95/98/ME/Windows NT/2000/XP騫沖彴涓?
銆銆涓嶅璇達紝鏈緇忓吀鐨勫伐鍏鳳紝琚ぇ閲忕殑*nix緋葷粺閲囩敤錛屾棤闇澶氳█銆?
銆銆鍜宼cpdump綾諱技錛屼絾涓巘cpdump鏈澶х殑涓嶅悓涔嬪鍦ㄤ簬錛屽熷姪浜庤繖涓伐鍏鳳紝綆$悊鍛樺彲浠ュ緢鏂逛究鐨勬妸鎴幏鐩爣瀹氬埗鍦ㄧ敤鎴峰悕錛屽彛浠ょ瓑鎰熷叴瓚g殑鍏抽敭瀛椾笂銆?
銆銆鐩墠寰堢孩鐏殑鍏嶈垂鐨刬ds緋葷粺錛岄櫎浜嗙敤浣渋ds浠ュ錛岃鐢ㄦ潵sniffer涔熼潪甯鎬笉閿欙紝鍙互鍊熷姪宸ュ叿鎴栨槸渚濋潬鑷韓鑳藉姏瀹屽叏榪樺師琚埅鑾風殑鏁版嵁銆?
銆銆浣滆呰璁$殑鍑哄彂鐐規槸鐢ㄨ繖涓笢瑗胯繘琛岀綉緇滄笚閫忔祴璇曪紝鍖呮嫭涓濂楀皬宸уソ鐢ㄧ殑灝忓伐鍏鳳紝涓昏鐩爣鏀懼湪鍙d護錛岀敤鎴瘋闂祫婧愮瓑鏁忔劅璧勬枡涓婏紝闈炲父鏈夌壒鑹詫紝宸ュ叿鍖呬腑鐨刟rpspoof錛宮acof絳夊伐鍏峰彲浠ヤ護浜烘弧鎰忕殑鎹曡幏浜ゆ崲鏈虹幆澧冧笅鐨勪富鏈烘晱鎰熸暟鎹?
銆銆鍜宒sniff鍦ㄦ煇浜涙柟闈㈡湁鐩鎬技涔嬪錛屼篃鍙互寰堟柟渚跨殑宸ヤ綔鍦ㄤ氦鎹㈡満鐜涓嬫彁紺猴細鍥藉唴鐢ㄦ埛璁塊棶榪欎釜绔欑偣闇瑕佷嬌鐢ㄤ唬鐞嗘湇鍔″櫒銆?
銆銆琚箍娉涗嬌鐢ㄧ殑緗戠粶鐩戝惉杞歡錛屾埅鑾烽噸鐐瑰湪鐢ㄦ埛鐨勮緭鍑恒?緗戠粶鐩戝惉鐨勫叿浣撳疄鐜幫細
銆銆tcpdump: listening on hme0
銆銆19:04:30.040578 client.1065 > server.smtp: S 1087965815:1087965815(0)
銆銆win 64240 (DF)
銆銆19:04:30.040613 server.smtp > client.1065: S 99285900:99285900(0)
銆銆ack 1087965816 win 10136 (DF)
銆銆19:04:30.040960 client.1065 > server.smtp: .
銆銆ack 1 win 64240 (DF)
銆銆client榪炴帴鏈嶅姟鍣ㄧ殑25绔彛錛屼笁嬈℃彙鎵嬫甯革紝娌℃湁闂錛屾垜浠啀寰涓嬬湅
銆銆19:04:33.411006 server.33152 > client.113: S 99370916:99370916(0) win 8760 (DF)
銆銆19:04:40.161052 server.33152 > client.113: S 99370916:99370916(0) win 8760 (DF)
銆銆19:04:56.061130 server.33152 > client.113: R 99370917:99370917(0) win 8760 (DF)
銆銆19:04:56.070108 server.smtp > client.1065:
銆銆P 1:109(108) ack 1 win 10136 (DF)
銆銆榪欓噷鏈夐棶棰樹簡錛屾垜浠湅鍒皊erver绔瘯鍥捐繛鎺lient鐨?13璁よ瘉绔彛錛岀劧鑰宑lient绔茍涓嶄細鍘誨洖搴斿畠錛宻erver绔粠19鐐?4鍒?0縐掑埌19鐐?4鍒?6縐掑皾璇?嬈★紝璐規椂26縐掑悗錛屾墠鏀懼純璁よ瘉灝濊瘯錛屼富鍔╮eset浜哻lient绔殑113绔彛錛屽紑濮媝ush鍚庨潰鐨勬暟鎹紝鑰屾鏄湪榪欎釜榪囩▼涓墍鑺辮垂鐨勬椂闂達紝浣跨敤鎴峰彂閫侀偖浠舵椂浜х敓浜嗘極闀跨殑絳夊緟銆偮?br />聽聽聽闂鎵懼埌浜嗭紝涓嬮潰鐨勫伐浣滃氨濂藉姙浜嗭紝閫氳繃淇敼鏈嶅姟鍣ㄧ鐨勮蔣浠墮厤緗紝浣垮畠涓嶅啀榪涜113绔彛鐨勮璇侊紝鐪嬬湅榪欎釜闂瑙e喅浜嗕箞錛熶笉鐢ㄩ棶client鐢ㄦ埛錛屽啀鎶撳寘濡備笅錛?/p>
銆銆tcpdump: listening on hme0
銆銆19:06:45.775516 client.1066 > server.smtp:
銆銆S 1119047365:1119047365(0) win 64240 (DF)
銆銆19:06:45.775546 server.smtp > client.1066:
銆銆S 116566929:116566929(0) ack 1119047366 win 10136 (DF)
銆銆19:06:45.775776 client.1066 > server.smtp:
銆銆. ack 1 win 64240 (DF)
銆銆19:06:45.789316 server.smtp > client.1066:
銆銆P 1:109(108) ack 1 win 10136 (DF)
銆銆19:06:45.796767 client.1066 > server.smtp:
銆銆P 1:11(10) ack 109 win 64132 (DF)
銆銆鎴戜滑鐪嬪埌錛宻erver涓嶅啀榪涜113绔彛鐨勮璇佸皾璇曪紝鐩存帴push鏁版嵁錛岄棶棰樺簲璇ヨВ鍐籌紝鍒癱lient璇曢獙錛屾灉鐒跺歡榪熺幇璞℃秷澶憋紒
銆銆鍚屾椂錛屾垜浠ā浠夸竴涓敤鎴穣iming鐧誨綍涓鍙癱lient鏈哄櫒錛?/p>
銆銆Trying 192.168.1.1...
銆銆Connected to 192.168.1.1
銆銆Escape character is '^]'.
銆銆Password:
銆銆Sun Microsystems Inc. SunOS 5.7 Generic October 1998
銆銆$ ls
銆銆bak lost+found project wangguan
銆銆libcap nms snmp wglist
銆銆$ pwd
銆銆/yiming
銆銆$
銆銆鎴戜滑鐪嬪埌榪欎釜鐢ㄦ埛telnet鍒癱lient鏈哄櫒錛岃緭鍏ヨ處鍙峰彛浠わ紝鎵ц浜唋s錛宲wd鍛戒護錛?/p>
銆銆........... ..!.."..'.......h.7....#..$....VT100....'.........yiming..Power^man!..ls ..pwd..
銆銆鍚戞鐤戞湁緗戠粶鐩戝惉琛屼負鐨勭綉緇滃彂閫佸ぇ閲忓瀮鍦炬暟鎹寘錛屾牴鎹悇涓富鏈哄洖搴旂殑鎯呭喌榪涜鍒ゆ柇錛屾甯哥殑緋葷粺鍥炲簲鐨勬椂闂村簲璇ユ病鏈夊お鏄庢樉鐨勫彉鍖栵紝鑰屽浜庢販鏉傛ā寮忕殑緋葷粺鐢變簬瀵瑰ぇ閲忕殑鍨冨溇淇℃伅鐓у崟鍏ㄦ敹錛屾墍浠ュ緢鏈夊彲鑳藉洖搴旀椂闂翠細鍙戠敓杈冨ぇ鐨勫彉鍖栥?
銆銆2錛氳嫻媎ns
銆銆璁稿鐨勭綉緇滅洃鍚蔣浠墮兘浼氬皾璇曡繘琛屽湴鍧鍙嶅悜瑙f瀽錛屽湪鎬鐤戞湁緗戠粶鐩戝惉鍙戠敓鏃跺彲浠ュ湪dns緋葷粺涓婅嫻嬫湁娌℃湁鏄庢樉澧炲鐨勮В鏋愯姹傘?
銆銆涓婇潰鎴戜滑璇磋繃錛氬綋涓鍙頒富鏈鴻繘鍏ユ販鏉傛ā寮忔椂錛屼互澶綉鐨勭綉鍗′細灝嗘墍鏈変笉灞炰簬浠栫殑鏁版嵁鐓у崟鍏ㄦ敹銆傛寜鐓ц繖涓濊礬錛屾垜浠氨鍙互榪欐牱鏉ユ搷浣滐細鍋囪鎴戜滑鎬鐤戠殑涓繪満鐨勭‖浠跺湴鍧鏄?0:30:6E:00:9B:B9,瀹冪殑ip鍦板潃鏄?92.168.1.1,閭d箞鎴戜滑鐜板湪浼犲嚭榪欐牱鐨勪竴縐峣cmp鏁版嵁鍖咃細紜歡鍦板潃鏄笉涓庡眬鍩熺綉鍐呬換浣曚竴鍙頒富鏈虹浉鍚岀殑00:30:6E:00:9B:9B,鐩殑鍦板潃鏄?92.168.1.1涓嶅彉錛屾垜浠彲浠ヨ鎯充竴涓嬭繖縐嶆暟鎹寘鍦ㄥ眬鍩熺綉鍐呬紶杈撲細鍙戠敓浠涔堢幇璞★細浠諱綍姝e父鐨勪富鏈轟細媯鏌ヨ繖涓暟鎹寘錛屾瘮杈冩暟鎹寘鐨勭‖浠跺湴鍧錛屽拰鑷繁鐨勪笉鍚岋紝浜庢槸涓嶄細鐞嗕細榪欎釜鏁版嵁鍖咃紝鑰屽浜庣綉緇滅洃鍚ā寮忕殑涓繪満鍛紵鐢變簬瀹冪殑緗戝崱鐜板湪鏄湪娣鋒潅妯″紡鐨勶紝鎵浠ュ畠涓嶄細鍘誨姣旇繖涓暟鎹寘鐨勭‖浠跺湴鍧錛岃屾槸灝嗚繖涓暟鎹寘鐩存帴浼犲埌涓婂眰錛屼笂灞傛鏌ユ暟鎹寘鐨刬p鍦板潃錛岀鍚堣嚜宸辯殑ip錛屼簬鏄細瀵瑰榪欎釜ping鐨勫寘鍋氬嚭鍥炲簲銆傝繖鏍鳳紝涓鍙板浜庣綉緇滅洃鍚ā寮忕殑涓繪満灝辮鍙戠幇浜嗐?
銆銆闄や簡浣跨敤ping榪涜鐩戞祴澶栵紝鐩墠姣旇緝鎴愮啛鐨勬湁鍒╃敤arp鏂瑰紡榪涜鐩戞祴鐨勩傝繖縐嶆ā寮忔槸涓婅堪ping鏂瑰紡鐨勪竴縐嶅彉浣擄紝瀹冧嬌鐢╝rp鏁版嵁鍖呮浛浠d簡涓婅堪鐨刬cmp鏁版嵁鍖呫傚悜灞鍩熺綉鍐呯殑涓繪満鍙戦侀潪騫挎挱鏂瑰紡鐨刟rp鍖咃紝濡傛灉灞鍩熺綉鍐呯殑鏌愪釜涓繪満鍝嶅簲浜嗚繖涓猘rp璇鋒眰錛岄偅 涔堟垜浠氨鍙互鍒ゆ柇瀹冨緢鍙兘灝辨槸澶勪簬緗戠粶鐩戝惉妯″紡浜嗭紝榪欐槸鐩墠鐩稿鑰岃█姣旇緝濂界殑鐩戞祴妯″紡銆?