|
|
@@ -1,25 +1,35 @@ |
|
|
|
#!/usr/bin/perl |
|
|
|
|
|
|
|
use strict; |
|
|
|
use IO::Socket::INET; |
|
|
|
use Time::HiRes qw(sleep); |
|
|
|
use warnings; |
|
|
|
|
|
|
|
$| = 1; |
|
|
|
|
|
|
|
my($maccnt, $pps, $src, $dest) = @ARGV; |
|
|
|
|
|
|
|
usage() if !defined $dest; |
|
|
|
|
|
|
|
if ( $maccnt !~ /^\d+$/ || $maccnt < 1 ) { |
|
|
|
print STDERR "MAC count must be a positive integer\n"; |
|
|
|
my($clients, $leasetime, $floodclients, $floodpps, $dest, $destport) = @ARGV; |
|
|
|
|
|
|
|
usage() if !defined $destport; |
|
|
|
|
|
|
|
if ( $clients !~ /^\d+$/ || $clients < 1 ) { |
|
|
|
print STDERR "clients count must be a positive integer\n"; |
|
|
|
exit 1; |
|
|
|
} |
|
|
|
|
|
|
|
if ( $leasetime !~ /^\d+$/ || $leasetime < 3 ) { |
|
|
|
print STDERR "leasetime must be at least 3\n"; |
|
|
|
exit 1; |
|
|
|
} |
|
|
|
|
|
|
|
if ( $pps !~ /^\d+$/ || $pps < 1 ) { |
|
|
|
print STDERR "packets/sec must be a positive integer\n"; |
|
|
|
if ( $floodclients !~ /^\d+$/ || $floodclients < 0 ) { |
|
|
|
print STDERR "floodclients must be a 0 or more\n"; |
|
|
|
exit 1; |
|
|
|
} |
|
|
|
|
|
|
|
if ( $src !~ /^(\d+\.\d+\.\d+\.\d+)$/ ) { |
|
|
|
print STDERR "source IP must be a valid IPv4 address\n"; |
|
|
|
if ( $floodpps !~ /^\d+$/ || $floodpps < 0 ) { |
|
|
|
print STDERR "floodpps must be 0 or more\n"; |
|
|
|
exit 1; |
|
|
|
} |
|
|
|
|
|
|
@@ -28,48 +38,102 @@ if ( $dest !~ /^(\d+\.\d+\.\d+\.\d+)$/ ) { |
|
|
|
exit 1; |
|
|
|
} |
|
|
|
|
|
|
|
main($maccnt, $pps, $src, $dest); |
|
|
|
if ( $destport !~ /^\d+$/ || $destport < 1 || $destport > 65535 ) { |
|
|
|
print STDERR "destport must be between 1 and 65535\n"; |
|
|
|
exit 1; |
|
|
|
} |
|
|
|
|
|
|
|
main($clients, $leasetime, $floodclients, $floodpps, $dest, $destport); |
|
|
|
|
|
|
|
sub usage { |
|
|
|
print STDERR "DHCP Flood using option 82\n"; |
|
|
|
print STDERR "This is only to test dhcp_protect, the DHCP packets aren't really valid\n"; |
|
|
|
print STDERR "DO NOT SEND THIS TO YOUR DHCP SERVER !!!!\n"; |
|
|
|
print STDERR "\n"; |
|
|
|
print STDERR "Usage: $0 <MAC count> <packets/sec> <source IPv4> <destination IPv4>\n"; |
|
|
|
print STDERR "Dependency: nemesis must be installed\n"; |
|
|
|
print STDERR "https://ftp.troglobit.com/nemesis/\n"; |
|
|
|
print STDERR "\n"; |
|
|
|
print STDERR <<EOF; |
|
|
|
|
|
|
|
============================================== |
|
|
|
= DHCP Protect testing client = |
|
|
|
= This is only to test dhcp_protect = |
|
|
|
= DO NOT SEND THIS TO YOUR DHCP SERVER !!!! = |
|
|
|
============================================== |
|
|
|
|
|
|
|
Usage: $0 <clients> <leasetime> <floodclients> <floodpps> <destination> <port> |
|
|
|
|
|
|
|
clients : number of 'normal' dhcp clients to simulator. |
|
|
|
leasetime : the desired leasetime. |
|
|
|
floodclients : number of client flood the server. |
|
|
|
floodpps : packet rate at which the floodclients flood the server (per client). |
|
|
|
destination : target IP address. |
|
|
|
port : targer UDP port. |
|
|
|
EOF |
|
|
|
exit 1; |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
sub main { |
|
|
|
my($maccnt, $pps, $src, $dest)=@_; |
|
|
|
my($clients, $leasetime, $floodclients, $floodpps, $dest, $destport)=@_; |
|
|
|
|
|
|
|
# pseudo packet, the only really relevant thing |
|
|
|
# is that option 82 is present and at the right place |
|
|
|
my $hdr = ""; |
|
|
|
|
|
|
|
$hdr .= "010106010c02385600010000000000000000000000000000c16e5f43409c28db"; |
|
|
|
$hdr .= "d56c000000000000000000000000000000000000000000000000000000000000"; |
|
|
|
$hdr .= "0000000000000000000000000000000000000000000000000000000000000000"; |
|
|
|
$hdr .= "0000000000000000000000000000000000000000000000000000000000000000"; |
|
|
|
$hdr .= "0000000000000000000000000000000000000000000000000000000000000000"; |
|
|
|
$hdr .= "0000000000000000000000000000000000000000000000000000000000000000"; |
|
|
|
$hdr .= "0000000000000000000000000000000000000000000000000000000000000000"; |
|
|
|
$hdr .= "000000000000000000000000638253633501013707017903060f77fc390205dc"; |
|
|
|
$hdr .= "3d0701409c28dbd56c33040076a7000c097370616c6569666f6e000000000000"; |
|
|
|
$hdr .= "0000000000000000000000520e0104000000000206XXXXXXXXXXXXff00000000"; |
|
|
|
$hdr .= pack("H2","01"); # Opcode, bootrequest |
|
|
|
$hdr .= pack("H2","01"); # Hardware type, ethernet |
|
|
|
$hdr .= pack("H2","06"); # HW addr len, MAC = 6 |
|
|
|
$hdr .= pack("H2","01"); # hops, 1 relay |
|
|
|
$hdr .= pack("H8","00000000"); # transaction ID |
|
|
|
$hdr .= pack("H4","0000"); # secs |
|
|
|
$hdr .= pack("H4","0000"); # flags |
|
|
|
$hdr .= pack("H8","00000000"); # ciaddr |
|
|
|
$hdr .= pack("H8","00000000"); # yiaddr |
|
|
|
$hdr .= pack("H8","00000000"); # siaddr |
|
|
|
$hdr .= pack("H8","00000000"); # giaddr |
|
|
|
$hdr .= pack("H32","0"x32); # cihwaddr |
|
|
|
$hdr .= pack("H128","0"x128); # hostname |
|
|
|
$hdr .= pack("H256","0"x256); # boot filename |
|
|
|
$hdr .= pack("H8","63825363"); # magic cookie |
|
|
|
|
|
|
|
$hdr .= pack("C", 82); # opt 82 |
|
|
|
$hdr .= pack("C", 21); # opt 82 len |
|
|
|
$hdr .= pack("C", 1); # subopt 1 (circuitid) |
|
|
|
$hdr .= pack("C", 11); # subopt 1 len |
|
|
|
$hdr .= "Hello World"; |
|
|
|
$hdr .= pack("C", 2); # subopt 2 (remoteid) |
|
|
|
$hdr .= pack("C", 6); # subopt 2 len (mac) |
|
|
|
|
|
|
|
|
|
|
|
if ( $floodclients > 0 ) { |
|
|
|
my $pid = fork(); |
|
|
|
# flood client |
|
|
|
if ( !$pid ) { |
|
|
|
|
|
|
|
my $int = 1/$floodpps/$floodclients; |
|
|
|
my $sock = IO::Socket::INET->new( |
|
|
|
Proto => 'udp', |
|
|
|
PeerAddr => "$dest:$destport", |
|
|
|
); |
|
|
|
|
|
|
|
while(1) { |
|
|
|
for(my $i=0; $i<$floodclients; $i++) { |
|
|
|
my $pkt = $hdr; |
|
|
|
$pkt .= pack("H12", sprintf("66666666%04x", $i)); |
|
|
|
$sock->send($pkt); |
|
|
|
sleep($int); |
|
|
|
} |
|
|
|
} |
|
|
|
exit; |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
my $int = 1/$pps; |
|
|
|
my $int = $leasetime/3/$clients; |
|
|
|
my $sock = IO::Socket::INET->new( |
|
|
|
Proto => 'udp', |
|
|
|
PeerAddr => "$dest:$destport", |
|
|
|
); |
|
|
|
|
|
|
|
while(1) { |
|
|
|
for(my $i=0; $i<$maccnt; $i++) { |
|
|
|
my $mac = sprintf("000000%06x", $i); |
|
|
|
for(my $i=0; $i<$clients; $i++) { |
|
|
|
my $pkt = $hdr; |
|
|
|
$pkt =~ s/XXXXXXXXXXXX/$mac/; |
|
|
|
|
|
|
|
open(N,"| nemesis udp -S $src -D $dest -x 67 -y 666 -i $int -P -") || die "install nemesis!"; |
|
|
|
print N pack("H*",$pkt); |
|
|
|
print N ""; |
|
|
|
close(N); |
|
|
|
$pkt .= pack("H12", sprintf("00112233%04x",$i)); |
|
|
|
$sock->send($pkt); |
|
|
|
sleep($int); |
|
|
|
} |
|
|
|
} |
|
|
|
} |