Raw TCP/IP library for Windows 2000
This library enumarates the TCP/IP protocol, and allows the user to create custome TCP/IP headers, this allows IP spoofing and other kind of attacks.
This library also now used for a regular network communication (when you don't want to use MFC in your projects, this library is used within a commercial ATL product)
New features we have added to version 3, includes : sniffer, stealth TCP scanner, UDP scanner, major OOD redesign, better error control, better documentation.
The library has a root class : CSpoofBase, which hold every system services for the library starting with socket initialization and error control.
Two other major classes are : CSpoofSocket, which encapsulate socket2 API, modify some header options like: Source IP (good for spoofing), TTL, Service type.
and CAsyncSocket, which enable all system sockets to be used as a! ! sync sockets.
Blocked major classes are CTCPSocket,CUDPSocket and CICMPSocket which inherit from CSpoofSocket, and you can use them to send/receive UDP/TCP/ICMP packets.
There are also : CTCPSocketAsync,CUDPSocketAsync and CICMPSocketAsync which gives you the same socket support but in async mode.
Two helper classes are : CInterfaces (to help list our all available interfaces), and CSniffSocket (Which has sniffer abilities)
Samples that come with the library are: ping, traceroute, simple attacking demonstration, simple TCP server, simple UDP server, ipconfig, stealth TCP scanner (all comes will a full source code).

Comments
Monitoring IP Message
Posted by Legacy on 02/12/2004 12:00amOriginally posted by: mohandoss
How we can monitor our enitre packets moments from one end to another end. (java code is best to me)
ReplyDoubts in IP packets
Posted by Legacy on 10/06/2003 12:00amOriginally posted by: mamtha
I want to access IP packets for my M.tech Project.
What is the simple method using Linux programming?
ReplyThank U
Problems with spoofing
Posted by Legacy on 12/18/2002 12:00amOriginally posted by: r41nm4n
I tryed to use "Attacker" project (included in the demo)that should be able to send raw packets with source ip spoofed, but it doesn't seem to work: that is, it sends packets but always with my real source ip. Then, if I try to check "IP options", system crashes immediately.
My OS is win 2k pro sp3.
Thanks for any advice.
ReplySniff and redirect http traffica to a proxy
Posted by Legacy on 10/01/2002 12:00amOriginally posted by: Alex
I'can read incoming and outgoing packet, but it's possible redirect http traffics to another ip and port??
ReplyBAD POOL CALLER
Posted by Legacy on 05/08/2002 12:00amOriginally posted by: Alan Mackay
I'm trying to spoof a UDP packet (actually a DHCP request message) on my local lan. When I do the send call Windows 2000 dies almost instantly with a blue death screen indicating BAD POOL CALLER. My question is why is this happening and also is it possible to spoof DHCP leases ? I need to spoof DHCP leases as I want to simulate a number of IP devices through one NIC card on a single PC.
Any advice appreciated :)
ReplySpoofing under Win9x/ME
Posted by Legacy on 10/25/2001 12:00amOriginally posted by: Magnus
Microsoft has not released full SOCK_RAW support under Win9x/ME, but they have released full raw sockets in 2000/XP.
ReplyHow to setup socket in Promiscues (True Raw) mode
Posted by Legacy on 09/10/2001 12:00amOriginally posted by: Bankim Patel
I have a problem in sniffer.
It only shows the packets originated or destinated to my
local host's IP address.
Is there a way to setup the socket to capture all packets
flowing on the LAN?
I have changed the code in clientsocket.cpp file to
bypass the check for local IP address, this shows all
broadcast IP packets now. but it is not the full solution
what i want.
Any help is appreciated.
Thanks.
Bankim
ReplyHow i can make same function in windows 98?
Posted by Legacy on 05/17/2001 12:00amOriginally posted by: D,K,Kimm
Greate Work!!
ReplyBut I want to get same function in windows 98!
Above all, sniffer, i want to make sniffer in windows 98!
please help me!
I got some problems in sniffer
Posted by Legacy on 03/26/2001 12:00amOriginally posted by: paul
when I receive data,I can't get the source Ip address,It always display my own Ip
Reply
Great work! But...
Posted by Legacy on 03/20/2001 12:00amOriginally posted by: Polaris
The code 'm_bInitialized = TRUE' in member function 'ShutDownSockets' of class CSpoofBase should be 'm_bInitialized = FALSE',isn't it?
ReplyWould you modify the class CBinary with STL?