2008年7月22日星期二

[Tips]通过emule做DDOS是否可行?

by 云舒

2008-07-23

http://www.ph4nt0m.org

今天抽空看了下emule协议几个可能会出问题的地方,初步感觉是可能真的有问题。下了代码回来看了,不过代码太大,目前还没找到地方,没法对想法进行印证。我简单的说下,看哪位代码牛人能够在项目中找到对应的代码。

首先是在客户端连接到服务器之后,搜索文件时,服务器返回结果的报文。报文中返回的结果是一个集合,每个集合表示一条记录。但是每条记录中,并不包含拥有 该文件的客户端的IP地址,而是返回的拥有该文件的客户端的ClientID和端口。这里我猜测ClientID的计算是可逆的,搜索发起者可以根据这个 ClientID计算出IP地址,然后连接,请求下载文件。具体报文结构如下:


名称 大小(字节) 默认值 注释
协议类型 1 0xE3
大小 4
不包含报文和大小域的报文大小
类型 1 0x16 操作码 OP SEARCHRESULT 的值
结果数 4 N/A 此报文中包含的结果数目
结果列表 可变 N/A 一个结果的列表








搜索结果列表项格式:


名称 大小(字节) 默认值 注释
文件HASH 16 N/A 用于识别文件的 Hash 值
客户端 ID 4 N/A eMule服务器分配给客户端的ID
客户端端口 2 N/A 客户端的监听的TCP端口
标志数 4 N/A 其后的属性标志个数
标志列表 可变 N/A 标志列表







其次的第二个地方是下载文件的地方,客户端要求下载一个文件时,服务器会返回一个源查找结果报文。该报文也是只包含源的ClientID和端口,客户端应该是按照ClientID计算出IP地址,再去连接下载文件的。具体报文如下:


名称 大小(字节) 默认值 注释
协议类型 1 0xE3
大小 4 N/A 不包含报文头和大小域的报文大小
类型 1 0x42 操作码 OP FOUNDSOURCES 的值
文件HASH 16 N/A 相关文件的 Hash 值
源数量 1 N/A 拥有该文件的机器的数量
源列表 可变 N/A 源列表内容,每一条是一个可用源








每一条源的报文格式如下:


名称 大小(字节) 默认值 注释
客户端 ID 4 N/A 共享该文件的客户端的 ID
客户端端口 2 N/A 共享该文件的客户端端口





可以看到,搜索某个文件时,服务器返回的搜索列表中按照ClientID来区分不同的其它客户端。在开始下载一个文件时,服务器返 回的可用源列表中,每个源也是以一个ClientID来表示的。也就是说,没一个ClientID就可以确定一个源,区分开彼此。而emule可以根据这 个ClientID找到对应的客户端,去连接指定端口,请求文件。那么,现在的问题是这个ClientID是哪里来的?

原来这个ClientID在正常情况下,是我们连接到emule服务器时,服务器分配给我们的。但是注意到,在连接之后,我们可以像服务器提供我们所拥有的文件列表,报文格式如下:


名称 大小(字节) 默认值 注释
协议类型 1 0xE3
大小 4
不包含报文和大小域的报文大小
类型 1 0x15 操作码 OP SEARCHRESULT 的值
文件数 4 N/A 共享列表中的文件数,这个数不超过 200
文件列表 可变 N/A 可选的文件列表,单个项的描述见下









单个文件条目描述我就不细写了,比较有用的字段是文件Hash码,ClientID,以及端口。这样看来,我们在连接到服务器之 后,告诉它baidu的IP地址,TCP80端口,有赤壁下载,或者有XXX片下载,别人下载的时候,emule客户端会不会从服务器返回的可用源列表 中,找到这条记录,并且去连接?

关键问题到了ClientID的计算,协议中这样描述的:假设 IP 地址为 X.Y.Z.W,则客户端 ID 按公式 X+28*Y+216*Z+24*W (Big Endian[6])计算。如果想法是正确的,那么我们可以先计算出百度的IP地址的ClientID,端口设置为80,然后通知服务器,这个 ClientID有高树的片子可以看……

是不是可行?我不知道,等我找到对应的代码,可能要到过年了。


23 条评论:

Donald Trump 说...

Pure Keto Cleanse We need to listen to our bodies and stop eating when we are full. We must eat smaller portions of our food

Donald Trump 说...

black label x But finding the time to incorporate cardiovascular exercise and resistance training is important, if you want to maintain a healthy weight loss, and preserve the muscle tone and aesthetic look of your body.

William Wiktor 说...

Fiber Optic Christmas Tree The summer is now a long distant memory and with the winter chill already in the air, that unmistakable familiar feeling will soon be upon

Donald Trump 说...

Superior Flux Male Enhancement All over the internet, websites are displaying male enhancement videos from known and unknown sources all targeting males who want to enhance the potential of their most delicate possession.

Donald Trump 说...

Vibrant Enhanced Keto Countless others beside myself, have used, and are now using, weight loss hypnosis to achieve fast weight loss, healthy weight loss, and to lose weight easily and permanently. You can too!

Donald Trump 说...

Biovirexagen reason is that taking male enhancement pills alone cannot guarantee the best results. You need to do certain exercises for the pills to take effect.

Donald Trump 说...

Ketophin BHB Thus, what do we need to find in a weight loss program? Here are the effective factors and strategies to consider:

Donald Trump 说...

Ketogeniks Keto surgical means work but have high-level surgical risks for these unhealthy patients. Through my experience with my own patients and those of my colleagues, I've seen our patients die after these

William Wiktor 说...

Best Women Crossfit Shoes Cauliflower - Body detoxification, antioxidant and anti-inflammatory. Best Sautéing either by itself or with Turmeric for a nice curry flavor.

True Keto Boost 说...

. If you do not want to eat healthily or do any exercise, be mindful of the potential consequences.If you're a parent or carer, follow this True Keto Boost
approach for your child or the person you're caring for, also as for yourself.

https://bit.ly/2uxEPyQt
https://listofdiet.com/True-Keto-Boost/

Keto Vita X Burn 说...

But first we'd like to draw up a menu of True Keto Boost everything we "should" be doing and check it daily and weekly to form sure do it right.

https://bit.ly/2uxEPyQt
https://listofdiet.com/True-Keto-Boost/

Botanica Pure Keto 说...

The good news: the simplest prevention is regular exercise. Studies have demonstrated that continued training acts during a preventative fashion to scale back muscle soreness. Regular endurance training, specifically, has been shown Botanica Pure Keto to be a way of preventing the onset of DOMS.
https://listofdiet.com/botanica-pure-keto/

https://bit.ly/39v51Zw

Botanica Pure Keto 说...

It is estimated that between 1% and 6% of the adult population has AD/HD. (Wender) Forty percent of youngsters who have AD/HD have a minimum Botanica pure keto of one parent who also meets the standards for diagnosis. (Zeigler) AD/HD affects up to 7.5% of school-aged children, or between one to 3 students in every classroom. (Barbaresi, et al)

https://listofdiet.com/botanica-pure-keto/

https://bit.ly/39v51Zw

Vibrant Source Keto 说...

After 9 months of clinical test , the researchers at the Asterias confirmed that fifty of the patients (3 out of 10 patients) showed two motor levels of improvement. Vibrant Source Keto and every one the 6 patients involved within the trail, showed a minimum of one motor level of improvement.
After 9 months of clinical test , the researchers at the Asterias confirmed that fifty of the patients (3 out of 10 patients) showed two motor levels of improvement. and every one the 6 patients involved within the trail, showed a minimum of one motor level of improvement.

匿名 说...

For many individuals, this goes unnoticed. In any case, in specific cases, when you wheeze, it can slow the pulse or lower the circulatory strain to such a degree, that Vibrant Source Keto it makes an individual drop. In the therapeutic writing, this is known as sniffling syncope. A few people may likewise have a misrepresented response to

https://listofdiet.com/vibrant-source-keto/
https://bit.ly/39KbRL3

Zen Green CBD 说...

which have it pose a special problem. those that watch and study birds, migratory and people species, which are around since before the last glacial period change Zen Green CBD know the regions where birds are. Where they feed,
https://listofdiet.com/Zen-Green-CBD/

https://bit.ly/2SVR28t

Zen Green CBD 说...

raditionally, bentonite earth has been being used to help inside purging. Beside this, it is Zen Green CBD on the rundown of mainstream fixings that are utilized in detoxification programs
https://listofdiet.com/Zen-Green-CBD/

https://bit.ly/2SVR28t

https://www.facebook.com/zengreencbd/

Zen Green CBD 说...

Throughout my life i have been faced with mental Zen Green CBD disease at many various levels, involving my parents and other relations .While never discussed, their quiet desperation kept inside was sometimes apparent, albeit outwardly, they were ready to lead honorable, hard-working lives.


https://listofdiet.com/Zen-Green-CBD/

https://bit.ly/2SVR28t

https://www.facebook.com/zengreencbd/

Lists Of Keto Foods 说...

These measures will have any Dermal Pearle Cream
kind of effect. While they will quit maturing, Alcohol With No Carbs
they won't turn around the hands of time to fix harm that has just been finished.
How Might You Undo Damage That Has Already Keto Diet And Blood Pressure
Been Done?
The best method to fix harm is to utilize all-regular healthy skin items for men. There are a few distinct sorts of normal healthy skin for men. Every item ought to contain every common fixing that are demonstrated to saturate and revive your skin. Dynamic fixings in the items you pick ought to be uniquely defined for your skin to advance collagen development.


https://listofdiet.com/dermal-pearle-cream/
https://listsofketofoods.com/dermal-pearle-cream/
https://sites.google.com/site/dermalpearlecreamreviews/
https://www.facebook.com/Dermal.Pearle.Cream.Reviews/
https://www.facebook.com/events/2623440881271170/

Iq option Master 说...

Specialized Analysis can be utilized to help see these patterns and benefit from them. Market straightforwardness is another preferred iqoption position in Forex exchanging. You can oversee chance and execute arranges in no time. It is profoundly effective and permits you to stay away from unforeseen amazements. With a PC you can exchange the Forex showcase anyplace, particularly with locales that give inside and out inclusion of the Forex advertise.

Unknown 说...

This procedure seems, by all accounts, to be straightforward. In any case, it is exorbitant, very tedious and perhaps don't give the ideal degree of solace as the client is in every case unavoidably attracted to (and one-sided towards) a particular item, essentially because of the guarantees made and attempt to seal the deal of the makers. Forex Scams
The most judicious (yet conceivably not the best) approach to guarantee that you pick the Top Forex Robots is to really purchase these items, ensure you see how to introduce them and advance their settings for your picked exchanging stage (for instance Metatrader) and to do broad back and forward testing on different settings for the different cash sets.

24hournews 说...

https://www.youtube.com/watch?v=C4aHaEkGaz8

Fat n Fix 说...

The first step is becoming more aware of our current behaviors and habits, without judgement. Notice where there is room for improvement. What are we eating and drinking on a regular basis? How much exercise are we getting? How well are we managing stress? Are we smoking or drinking excessively? Getting enough sleep? The goal is not to feel bad about where we're at, but to understand our starting point.