c++ 扫描端口 实例源码下载

【核心代码】

//----- (004041D8) --------------------------------------------------------
BOOL myRecv(SOCKET s, char *buf, int len)
{
int ret; // eax@10
BOOL result; // eax@12
struct timeval timeout; // [sp 4h] [bp-110h]@3
fd_set readfds; // [sp 10h] [bp-104h]@3

result = FALSE;
timeout.tv_sec = 3;
timeout.tv_usec = 0;

if (_isHttp)
{
ret = send(s, _httpRequest, sizeof(_httpRequest), 0);
}

FD_ZERO(&readfds);
FD_SET(s, &readfds);
ret = select(0, &readfds, 0, 0, &timeout);
if ( ret && ret != -1 )
{
if ( FD_ISSET(s, &readfds) )
{
result = recv(s, buf, len, 0) > 0;
}
}

return result;
}

const char * getBanner(char *response)
{
signed int result; // eax@4
signed int v4; // edi@6
signed int v5; // edi@9
size_t v7; // [sp 0h] [bp-4h]@1

if ( response )
{
int	len = 0;
if (_isHttp)
{
const char * tag = "Server: ";
char * serverBanner = strstr(response, tag);
if (!serverBanner)
{
serverBanner = response;
}
else
{
serverBanner = lstrlen(tag);
} 
len = lstrlen(serverBanner);
for (int i = 0; i < len; i )
{
if (serverBanner[i] == '\r' || serverBanner[i] == '\n')
{
serverBanner[i] = '\0';
break;
}
}
return serverBanner;
}
else
{
len = lstrlen(response);
for (int i = 0; i < lstrlen(response); i )
{
if (response[i] == '\r' || response[i] == '\n')
{
response[i] = '\0';
break;
}
}
}

result = 1;
}
else
{
result = 0;
}
  return response;
}
//----- (004037A8) --------------------------------------------------------
DWORD WINAPI tcpScanThread(LPVOID lparam)
{
  int ret; // eax@5
  char banner[0x400]; // [sp 0h] [bp-330h]@2
  u_long hostlong; // [sp 208h] [bp-128h]@3
  int v9; // [sp 200h] [bp-130h]@3
  char response[200]; // [sp 114h] [bp-21Ch]@3
  SOCKET s; // [sp 228h] [bp-108h]@3
  struct timeval timeout; // [sp 20Ch] [bp-124h]@3
  u_long argp; // [sp 204h] [bp-12Ch]@3
  char targetHost[0x200]; // [sp 1E0h] [bp-150h]@3
  struct sockaddr_in sa; // [sp 214h] [bp-11Ch]@4
  fd_set writefds; // [sp 22Ch] [bp-104h]@8
  int recvLen = 0;
  hostlong = *(DWORD *)lparam;
  v9 = *((DWORD *)lparam 1);
  free(lparam);

  memset(response, 0, sizeof(response));
  s = -1;
  timeout.tv_sec = _tcpTimeout;
  timeout.tv_usec = 0;
  argp = 1;
  memset(targetHost, 0, sizeof(targetHost));
  s = socket(AF_INET, SOCK_STREAM, IPPROTO_IP);
  if ( s != -1 )
  {
memset(&sa, 0, sizeof(sa)); 
sa.sin_family = AF_INET; 
sa.sin_addr.s_addr = htonl(hostlong); 
sa.sin_port = htons(v9); 
    argp = 1;
    if ( ioctlsocket(s, FIONBIO, &argp) != -1 )
    {
      ret = connect(s, (const struct sockaddr *)&sa, sizeof(sa));
      if ( ret != -1 )
 {
        goto __recv;
 }
      if ( WSAGetLastError() == WSAEWOULDBLOCK)
      {
FD_ZERO(&writefds);
FD_SET(s, &writefds);
        ret = select(0, 0, &writefds, 0, &timeout);

        if ( FD_ISSET(s, &writefds) )
        {
__recv:
          wsprintf(
            targetHost,
            "%d.%d.%d.%d",
            hostlong >> 24,
            (hostlong >> 16) & 0xFF,
            (unsigned __int16)((WORD)hostlong >> 8),
            (unsigned __int8)hostlong);
          EnterCriticalSection(&_cs);
          _totalPortsOpen;
          LeaveCriticalSection(&_cs);
 const char *	responseBanner = NULL;
          if ( _isBanner )
          {
 // 切回同步模式
argp = 0;
ioctlsocket(s, FIONBIO, &argp);
recvLen = myRecv(s, response, sizeof(response));
EnterCriticalSection(&_cs);
if ( recvLen )
{
 responseBanner = getBanner(response);
 if ( lstrlen(responseBanner) <= 6 )
printf("%-16s %-5d -> \"%s\"           \n", targetHost, v9, responseBanner);
 else
printf("%-16s %-5d -> \"%s\"\n", targetHost, v9, responseBanner);
}
else
{
 printf("%-16s %-5d -> NULL             \n", targetHost, v9);
}
LeaveCriticalSection(&_cs);
          }
          else
          {
            EnterCriticalSection(&_cs);
            printf("%-16s %-5d Open             \n", targetHost, v9);
            LeaveCriticalSection(&_cs);
          }
          if ( _isLog )
          {
            memset(banner, 0, sizeof(banner));
            if ( _isBanner )
            {
              if ( recvLen )
                wsprintf(banner, "%-16s %-5d -> \"%s\"\r\n", targetHost, v9, responseBanner);
              else
                wsprintf(banner, "%-16s %-5d -> NULL\r\n", targetHost, v9);
            }
            else
            {
              wsprintf(banner, "%-16s %-5d Open             \r\n", targetHost, v9);
            }
            EnterCriticalSection(&_cs);
            logWriteBuffer(_logFile, banner);
            LeaveCriticalSection(&_cs);
          }
        }
      }
    }
  }
  EnterCriticalSection(&_cs);
  _ipScanned;
  if ( _threadsUsed )
    --_threadsUsed;
  ReleaseSemaphore(_semaphore, 1, 0);
  LeaveCriticalSection(&_cs);
  closesocket(s);
  return 0;
}