decode_nntp.c

一个网络工具包,可以嗅探email和http等数据包中的密码等信息.注意要先把libnet-1.0.2a.tar.gz和 libnids-1.16.tar.gz装上,不然会因为缺少库函数而无法编译和安

/*
  decode_nntp.c

  Network News Transport Protocol.
  
  Copyright (c) 2000 Felix von Leitner <[e-mail]>
  Copyright (c) 2000 Dug Song <[e-mail]>
 
  $Id: decode_nntp.c,v 1.4 2000/11/06 14:08:41 dugsong Exp $
*/

#include "config.h"

#include <sys/types.h>
#include <stdio.h>
#include <string.h>
#include "base64.h"
#include "decode.h"

int
decode_nntp(u_char *buf, int len, u_char *obuf, int olen)
{
	char *p;
	int i, simple, dpa;
	
	obuf[0] = '\0';
	simple = dpa = 0;
	
	for (p = strtok(buf, "\r\n"); p != NULL; p = strtok(NULL, "\r\n")) {
		if (simple == 1) {
			strlcat(obuf, p, olen);
			strlcat(obuf, "\n", olen);
			simple = 0;
		}			
		else if (strncasecmp(p, "AUTHINFO ", 9) == 0) {
			strlcat(obuf, p, olen);
			
			if (strncasecmp(p + 9, "SIMPLE", 6) == 0) {
				simple = 1;
			}
			else if (strncasecmp(p + 9, "GENERIC ", 8) == 0) {
				if (strncasecmp(p + 17, "DPA", 3) == 0) {
					dpa = 1;
				}
				else if (dpa == 1) {
					p += 17;
					i = base64_pton(p, p, strlen(p));
					p[i] = '\0';
					i = strlen(obuf);
					snprintf(obuf + i, olen - i,
						 " [%s]", p);
				}
			}
			strlcat(obuf, "\n", olen);
		}
	}
	return (strlen(obuf));
}