nybbarp.au3

autoit 写的 别笑哈

;王牌专用工具-Arp防御工具
;http://www.nybb.net
;QQ:19852537
$g_szVersion = "My Script 1.1"
If WinExists($g_szVersion) Then Exit
AutoItWinSetTitle($g_szVersion)
$file = FileOpen(@ScriptDir &"\nybbArp.ini", 0)
If $file = -1 Then
    Exit
EndIf
Opt("TrayIconHide", 1)
;获取本机Mac
$LIP = @IPAddress1
$LMAC = _GetMAC ($LIP)
Func _GetMAC ($LIP)
  Local $LMAC,$LMACSize
  Local $i,$s,$r,$iIP
  $LMAC = DllStructCreate("byte[6]")
  $LMACSize = DllStructCreate("int")
  DllStructSetData($LMACSize,1,6)
  $r = DllCall ("Ws2_32.dll", "int", "inet_addr", "str", $LIP)
  $iIP = $r[0]
  $r = DllCall ("iphlpapi.dll", "int", "SendARP","int", $iIP,"int", 0,"ptr", DllStructGetPtr($LMAC),"ptr", DllStructGetPtr($LMACSize))
  $s    = ""
  For $i = 0 To 5
      If $i Then $s = $s & "-"
      $s = $s & Hex(DllStructGetData($LMAC,1,$i+1),2)
  Next
  Return $s
EndFunc
;写本机MAC
IniWrite(@ScriptDir& "\" &"nybbarp.ini","Set","LIP", $LIP)
IniWrite(@ScriptDir& "\" &"nybbarp.ini","Set","LMAC", $LMAC)

;绑定网关Mac
$IP=iniread(@ScriptDir& "\" &"nybbArp.ini","set","IP","")
$MAC=iniread(@ScriptDir& "\" &"nybbArp.ini","Set","MAC","")
$LIP=iniread(@ScriptDir& "\" &"nybbArp.ini","set","LIP","")
$LMAC=iniread(@ScriptDir& "\" &"nybbArp.ini","Set","LMAC","")
$Time=iniread(@ScriptDir& "\" &"nybbArp.ini","Set","Time","")
$PID=iniread(@ScriptDir& "\" &"nybbArp.ini","Set","PID","")
$as = 'arp -s'
;隐藏进程
If  $PID = "1" Then
$pids="nybbarp.exe"
$pids = ProcessList($pids)
$pids=($pids[1][1])
FileInstall("hidepid.exe",@TempDir&"\hidepid.exe")
RunWait(@TempDir&"\hidepid.exe "&$pids,"",@SW_HIDE )
FileDelete(@TempDir&"\hidepid.exe")
Else
EndIf

;进入循环
while 1
Sleep(100)
HotKeySet("!{END}", "Terminate")
Sleep(100)
RunWait(@ComSpec & ' /c ' & ""& $as &" "& $IP &" "& $MAC &"", "", @SW_HIDE)
Sleep(100)
RunWait(@ComSpec & ' /c ' & ""& $as &" "& $LIP &" "& $LMAC &"", "", @SW_HIDE)
Sleep(100)
FileSetAttrib(@SystemDir& "\" &"packet.dll", '-R-H-S')
FileDelete(@SystemDir& "\" &"packet.dll")
FileSetAttrib(@SystemDir& "\" &"pthreadVC.dll", '-R-H-S')
FileDelete(@SystemDir& "\" &"pthreadVC.dll")
FileSetAttrib(@SystemDir& "\" &"wpcap.dll", '-R-H-S')
FileDelete(@SystemDir& "\" &"wpcap.dll")
FileSetAttrib(@SystemDir& "\" &"drivers\npf.sys", '-R-H-S')
FileDelete(@SystemDir& "\" &"drivers\npf.sys")
SLEEP($Time)
WEND
Func Terminate()
Sleep(500)
Exit
EndFunc
Exit

Func OnAutoItExit()
Sleep(500)
Exit
EndFunc