decode_rlogin.c

一个网络工具包,可以嗅探email和http等数据包中的密码等信息.注意要先把libnet-1.0.2a.tar.gz和 libnids-1.16.tar.gz装上,不然会因为缺少库函数而无法编译和安

/*
  decode_rlogin.c

  Berkeley remote login/shell/exec.
  
  Copyright (c) 2000 Dug Song <[e-mail]>
 
  $Id: decode_rlogin.c,v 1.5 2000/11/06 14:08:42 dugsong Exp $
*/

#include "config.h"

#include <sys/types.h>
#include <stdio.h>
#include <string.h>
#include "options.h"
#include "decode.h"

int
decode_rlogin(u_char *buf, int len, u_char *obuf, int olen)
{
	u_char *p, *q;

	/* Skip first NULL, or rexec stderr port */
	for (p = buf; p - buf < len && *p == '\0'; p++)
		;	/* VOID */
	
	strlcpy(obuf, "[", olen);
	strlcat(obuf, p, olen);		/* Local username */
	strlcat(obuf, ":", olen);
	p += strlen(p) + 1;
	
	strlcat(obuf, p, olen);		/* Remote username */
	strlcat(obuf, "]\n", olen);
	p += strlen(p) + 1;
	
	p += strlen(p) + 1;			/* Skip term info */
	
	if ((q = strstr(p, "\xff\xffss")) != NULL)	/* Skip window size */
		p += 12;
	
	for (p = strtok(p, "\r\n"); p != NULL; p = strtok(NULL, "\r\n")) {
		strlcat(obuf, p, olen);
		strlcat(obuf, "\n", olen);
	}
	if (!strip_lines(obuf, Opt_lines))
		return (0);
	
	return (strlen(obuf));
}