基于C++MFC的网络安全扫描器的设计与实现

梦里梦外; 2024-04-02 04:54 60阅读 0赞

目录  
摘 要 I  
Abstract II  
1 绪 论 5  
1.1 研究的背景及意义 5  
1.2 系统目标 6  
2 网络扫描技术概述 8  
2.1 安全漏洞研究 8  
2.2 网络扫描技术 14  
3 总体设计 17  
3.1 运行环境 17  
3.2 模块结构 17  
4 界面设计 26  
4.1界面关系图或工作流图 26  
4.2界面设计成果 28  
4.2.1主界面 28  
4.2.2子界面 28  
5详细设计 34  
5.1系统主要功能模块介绍 34  
5.2主机扫描模块设计 34  
5.3端口扫描模块设计 36  
5.4NetBIOS 扫描模块设计 37  
5.5 SNMP 扫描模块设计 39  
5.6弱密码扫描模块设计 40  
5.7嗅探器扫描模块设计 40  
5.8DOS 攻击模块设计 41  
5.9注入检测模块设计 42  
5.10报告生成模块设计 44  
6测试 45  
6.1测试方案设计 45  
6.1.1主机扫描功能模块测试 45  
6.1.2端口扫描功能模块测试 46  
6.1.3NetBIOS 扫描功能模块测试 46  
6.1.4SNMP 扫描功能模块测试 46  
6.1.5弱密码扫描功能模块测试 47  
6.1.6嗅探器扫描功能模块测试 48  
6.1.7DOS 攻击功能模块测试 48  
6.1.8注入检测功能模块测试 49  
6.1.9报告生成功能模块测试 51  
6.2 测试结果 51  
7总结与展望 52  
7.1设计工作总结 52  
7.2未来工作展望 52  
谢 辞 53  
1.1.3研究的意义  
就目前主流的网络扫描器，大多数采用的是命令行界面，用户使用的门槛相对较高，可视化的图形界面旨在提供给用户一个友好的使用环境，这种用户-界面的体系结构深受广大喜爱。它不需要用户去熟记过多的参数，只需要填入相应的关键信息，通过鼠标点击选择即可完成，大大降低了操作使用的难度。  
1.2系统目标  
本设计的最终目标是打造一个具有多种扫描功能的网络扫描器。该扫描器具有以下功能：  
(1)可视化的图形界面，旨在为用户提供友好的使用环境。  
(2)实现一些基本的扫描任务，如读取到目的主机的软硬件信息，开放的端口等等。  
(3)帮助用户去自动生成符合用户心理的扫描结果报告，并将扫描结果以文件的形式展现出了。  
众所周知，CTabCtrl 是MFC 的选项卡控件，目的是为了集成多个功能模块， 每个功能模块都有单独的子界面，而在不同的子界面下可以插入多个控件进行操作。  
管理员的目标是设计一个网络扫描器，而管理员需要设计出九个功能模块去帮助管理员完成辅助扫描的需要。本文转载自http://www.biyezuopin.vip/onews.asp?id=14728而介于 GUI 界面的需要，管理员可以利用 MFC 的选项卡控件去完成这一操作，管理员需要在主对话框中使用插入条目  
InsertItem 函数去创建这些选项卡控件，使管理员能够更加方便的切换各个功能模块，然后就可以对每一个功能模块进行编辑，而对不同的功能选项卡管理员要进行操作的监听，一旦有相关事件的发生，管理员能够及时作出反馈并给出正确的操作，从而大大降低了用户的使用难度，方便用户进行可视化的合理的扫描操作。

// AllScan.cpp : implementation file
    //
    
    #include "stdafx.h"
    #include "Scanner.h"
    #include "AllScan.h"
    #include "ScannerDlg.h"
    
    #ifdef _DEBUG
    #define new DEBUG_NEW
    #undef THIS_FILE
    static char THIS_FILE[] = __FILE__;
    #endif
    
    
    /
    // CAllScan dialog
    extern CScannerDlg *pDlg;
    extern CHostScan *pDlgHostScan;
    extern CPortScan *pDlgPortScan;
    extern CWeakKeyScan *pDlgWeakKeyScan;
    extern CNetBIOSScan *pDlgNetBIOSScan;
    extern CSNMPScan *pDlgSNMPScan;
    
    CAllScan::CAllScan(CWnd* pParent /*=NULL*/)
    	: CDialog(CAllScan::IDD, pParent)
    {
        
    	//{
        {AFX_DATA_INIT(CAllScan)
    	m_iRadioReportType = -1;
    	m_bCheckDDOSScan = FALSE;
    	m_bCheckHostScan = FALSE;
    	m_bCheckNetBIOSScan = FALSE;
    	m_bCheckPortScan = FALSE;
    	m_bCheckSnifferScan = FALSE;
    	m_bCheckSNMPScan = FALSE;
    	m_bCheckWeakKeyScan = FALSE;
    	m_bCheckSQLScan = FALSE;
    	//}}AFX_DATA_INIT
    }
    
    
    void CAllScan::DoDataExchange(CDataExchange* pDX)
    {
        
    	CDialog::DoDataExchange(pDX);
    	//{
        {AFX_DATA_MAP(CAllScan)
    	DDX_Control(pDX, IDC_IPADDRESSTarget, m_ctlTargetIP);
    	DDX_Radio(pDX, IDC_RADIOHtml, m_iRadioReportType);
    	DDX_Check(pDX, IDC_CHECKDDOSScan, m_bCheckDDOSScan);
    	DDX_Check(pDX, IDC_CHECKHostScan, m_bCheckHostScan);
    	DDX_Check(pDX, IDC_CHECKNetBIOSScan, m_bCheckNetBIOSScan);
    	DDX_Check(pDX, IDC_CHECKPortScan, m_bCheckPortScan);
    	DDX_Check(pDX, IDC_CHECKSnifferScan, m_bCheckSnifferScan);
    	DDX_Check(pDX, IDC_CHECKSNMPScan, m_bCheckSNMPScan);
    	DDX_Check(pDX, IDC_CHECKWeakKeyScan, m_bCheckWeakKeyScan);
    	DDX_Check(pDX, IDC_CHECKSQLScan, m_bCheckSQLScan);
    	//}}AFX_DATA_MAP
    }
    
    
    BEGIN_MESSAGE_MAP(CAllScan, CDialog)
    	//{
        {AFX_MSG_MAP(CAllScan)
    	ON_BN_CLICKED(IDC_BUTTONStart, OnBUTTONStart)
    	ON_BN_CLICKED(IDC_RADIOHtml, OnRADIOHtml)
    	ON_BN_CLICKED(IDC_RADIOTxt, OnRADIOTxt)
    	ON_BN_CLICKED(IDC_RADIOXml, OnRADIOXml)
    	//}}AFX_MSG_MAP
    END_MESSAGE_MAP()
    
    /
    // CAllScan message handlers
    
    void CAllScan::OnBUTTONStart() 
    {
        
    	// TODO: Add your control notification handler code here
    	/*CFile rebortFile("rebort.html",CFile::modeCreate|CFile::modeWrite);
    	CString strRebort;
    	strRebort="";
    	strRebort+="<!DOCTYPE html>\n<html>\n<body>\n";
    	strRebort+="helloWord!";
    	strRebort+="</body>\n</html>";
    	rebortFile.Write(strRebort,strlen(strRebort));
    	rebortFile.Close();*/
    
    	//GetParent()->
    	//PostMessage(WM_COMMAND,MAKEWPARAM(IDC_BUTTONStartScan,BN_CLICKED),NULL);
    	//AfxGetMainWnd()->m_strTest="gg";
    
    	//(((int)pDlg->m_TabMain)).SetCurSel(2);
    	//pDlg->m_TabMain.SetCurSel(4);
    	/*((CScannerDlg *)pDlg)->m_TabMain.SetCurSel(2);
    	NMHDR nmhdr;
    	nmhdr.code=TCN_SELCHANGE;
    	nmhdr.hwndFrom=((CScannerDlg *)pDlg)->m_TabMain.GetSafeHwnd();
    	nmhdr.idFrom=IDC_TABMAIN;
    	//this->PostMessage(WM_COMMAND,MAKEWPARAM(IDC_TABMAIN,TCN_SELCHANGE),NULL);
    	::SendMessage(((CScannerDlg *)pDlg)->m_TabMain.GetSafeHwnd(),WM_NOTIFY,MAKELONG(TCN_SELCHANGE,0),(LPARAM)(&nmhdr));*/
    	//pDlgHostScan->SendMessage(WM_COMMAND,IDC_BUTTONStartScan,0);
    	UpdateData(true);
    	int i,iListItemCount=0,number=1;
    	UCHAR a,b,c,d;
    	HTREEITEM root,child,childTemp;
    	CString strIP,strTemp;
    	m_ctlTargetIP.GetAddress(a,b,c,d);
    	strIP.Format("%d.%d.%d.%d",a,b,c,d);
    	strReportContent="<!DPCTYPE html>\n<html>\n<head>\n";
    	strReportContent+="<script type=\"text/javascript\">\n";
        strReportContent+="function initNodes(){\n";
        strReportContent+="var uls = document.getElementsByTagName(\"ul\");\n";
        strReportContent+="var i;\n";
        strReportContent+="for(i = 0; i < uls.length; i++);\n";
        strReportContent+="if(uls[i].id != \"root\");\n";
        strReportContent+="uls[i].style.display = \"none\";\n";
        strReportContent+="}\n";
    
        strReportContent+="function clickNode(id){\n";
        strReportContent+="var node = document.getElementById(id);\n";
        strReportContent+="if(node.style.display == \"none\")\n";
        strReportContent+="node.style.display = \"block\";\n";
        strReportContent+="else\n";
        strReportContent+="node.style.display = \"none\";\n";
        strReportContent+="return false;\n";
        strReportContent+="}</script></head>\n";
    	strReportContent+="<body>\n";
    	if(m_bCheckHostScan){
        
    		pDlgHostScan->m_ctlBeginIP.SetWindowText(strIP);
    		pDlgHostScan->m_ctlEndIP.SetWindowText(strIP);
    		UpdateData(false);
    		//pDlgHostScan->SendMessage(WM_COMMAND,IDC_BUTTONStartScan,0);
    		Sleep(3000);
    		UpdateData(true);
    		//int iCount=pDlgHostScan->m_ctlListResult.GetItemCount();
    		//strReportContent+="<h1>"+number;
    		strTemp.Format("<h2>%d",number);
    		strReportContent+=strTemp;
    		strReportContent+=".主机扫描</h2>\n";
    		number++;
    		strReportContent+="<table border='1'cellspacing=\"0\" cellpadding=\"10\">\n";
    		strReportContent+="<tr><th width=100px>IP</th><th width=100px>状态</th><th width=100px>操作系统</th></tr>\n";
    		strReportContent+="<tr><td align=center>"+pDlgHostScan->m_ctlListResult.GetItemText(0,1)+"</td>";
    		strReportContent+="<td align=center>"+pDlgHostScan->m_ctlListResult.GetItemText(0,2)+"</td>";
    		strReportContent+="<td align=center>"+pDlgHostScan->m_ctlListResult.GetItemText(0,3)+"</td></tr>\n";
    		strReportContent+="</table>";
    		strTemp=pDlgHostScan->m_ctlListResult.GetItemText(0,3);
    		//MessageBox(strTemp);
    	}
    	if(m_bCheckPortScan){
        
    		strReportContent+="\n<br/>\n";
    		pDlgPortScan->m_ctlBeginIP.SetWindowText(strIP);
    		pDlgPortScan->m_ctlEndIP.SetWindowText(strIP);
    		pDlgPortScan->m_uBeginPort=0;
    		pDlgPortScan->m_uEndPort=1024;
    		UpdateData(false);
    		//pDlgPortScan->SendMessage(WM_COMMAND,IDC_BUTTONStart,0);
    		strTemp.Format("<h2>%d",number);
    		strReportContent+=strTemp;
    		strReportContent+=".端口扫描</h2>\n";
    		number++;
    		root=pDlgPortScan->m_ctlTreeResult.GetRootItem();
    		strTemp=pDlgPortScan->m_ctlTreeResult.GetItemText(root);
    		strReportContent+="<ul id=\"root\">\n";
    		strReportContent+="<li>"+strTemp+"\n";
    		child=pDlgPortScan->m_ctlTreeResult.GetChildItem(root);
    		if(child==NULL){
        
    			strReportContent+="<p>无开放端口</p>";
    		}else{
        
    			strTemp=pDlgPortScan->m_ctlTreeResult.GetItemText(child);
    			//strReportContent+="<ul id=\"r1n1\">";
    			strReportContent+="<ul id=\"r1n1\">\n<li>"+strTemp+"</li>\n";
    			while((child=pDlgPortScan->m_ctlTreeResult.GetNextSiblingItem(child))!=NULL)
    				strReportContent+="<li>"+pDlgPortScan->m_ctlTreeResult.GetItemText(child)+"</li>";
    			strReportContent+="\n</ul></li>";
    		}
    		strReportContent+="\n</ul>";
    	}
    
    	if(m_bCheckWeakKeyScan){
        
    		strReportContent+="<br/>\n";
    		pDlgWeakKeyScan->m_ctlIP.SetWindowText(strIP);
    		UpdateData(false);
    		pDlgWeakKeyScan->SendMessage(WM_COMMAND,IDC_BUTTONStart,0);
    
    		strTemp.Format("<h2>%d",number);
    		strReportContent+=strTemp;
    		strReportContent+=".弱密码扫描</h2>\n";
    		number++;
    
    		strReportContent+="<span>用户名:</span><span>"+pDlgWeakKeyScan->m_strUsername+"</span><br/>";
    		strReportContent+="<span>密码：</span><span>"+pDlgWeakKeyScan->m_strResult+"</span><br/>";
    	}
    
    	if(m_bCheckNetBIOSScan){
        
    		strReportContent+="\n<br/>\n";
    		pDlgNetBIOSScan->m_ctlIP.SetWindowText(strIP);
    		UpdateData(false);
    		pDlgNetBIOSScan->SendMessage(WM_COMMAND,0);
    
    		strTemp.Format("<h2>%d",number);
    		strReportContent+=strTemp;
    		strReportContent+=".NetBIOS扫描</h2>\n";
    		number++;
    
    		root=pDlgNetBIOSScan->m_ctlTreeResult.GetRootItem();
    		strTemp=pDlgNetBIOSScan->m_ctlTreeResult.GetItemText(root);
    		strReportContent+="<ul id=\"root\">\n";
    		strReportContent+="<li>"+strTemp+"\n";
    
    		child=pDlgNetBIOSScan->m_ctlTreeResult.GetChildItem(root);
    		strTemp=pDlgNetBIOSScan->m_ctlTreeResult.GetItemText(child);
    		strReportContent=="<ul id=\"NetBIOSSub\"><li>"+strTemp+"</li>\n<ul>";
    
    		child=pDlgNetBIOSScan->m_ctlTreeResult.GetNextSiblingItem(child);
    		strTemp=pDlgNetBIOSScan->m_ctlTreeResult.GetItemText(child);
    		strReportContent+="<li>"+strTemp+"</li>\n";//MAC
    
    		childTemp=child=pDlgNetBIOSScan->m_ctlTreeResult.GetNextSiblingItem(child);
    		strTemp=pDlgNetBIOSScan->m_ctlTreeResult.GetItemText(child);
    		strReportContent+="<li>"+strTemp+"</li>\n";//时间
    
    		CString strName[7]={
        "NetBIOSScanSubShareSub","NetBIOSScanSubGroupSup","NetBIOSScanSubOSSup","NetBIOSScanSubServiceSub",
    							"NetBIOSScanSubUserSub","NetBIOSScanSubSessionSub","NetBIOSScanSubConnectSub"};
    		i=0;
    		while((childTemp=child=pDlgNetBIOSScan->m_ctlTreeResult.GetNextSiblingItem(childTemp))!=NULL){
        
    			strTemp=pDlgNetBIOSScan->m_ctlTreeResult.GetItemText(child);
    			strReportContent+="<li><span οnclick=\"return clickNode('"+strName[i]+"')\">"+strTemp+"</span>\n";//共享文件夹
    			child=pDlgNetBIOSScan->m_ctlTreeResult.GetChildItem(child);
    			strTemp=pDlgNetBIOSScan->m_ctlTreeResult.GetItemText(child);
    			strReportContent+="<ul id=\""+strName[i]+"\"><li>"+strTemp+"</li>";
    			i++;
    			while((child=pDlgNetBIOSScan->m_ctlTreeResult.GetChildItem(child))!=NULL){
        
    				strTemp=pDlgNetBIOSScan->m_ctlTreeResult.GetItemText(child);
    				strReportContent+="<li>"+strTemp+"</li>\n";
    			}
    			strReportContent+="</ul></li>\n";
    		}
    
    		strReportContent+="</ul></ul>";
    	}
    
    	if(m_bCheckSNMPScan){
        
    		strReportContent+="\n\n";
    		
    	}
    
    	strReportContent+="</body>\n</html>";
    	CFile rebortFile("rebort.html",CFile::modeCreate|CFile::modeWrite);
    	rebortFile.Write(strReportContent,strlen(strReportContent));
    	rebortFile.Close();
    }
    
    BOOL CAllScan::OnInitDialog() 
    {
        
    	CDialog::OnInitDialog();
    	
    	// TODO: Add extra initialization here
    	//GetParent()->GetParent()->
    	m_iRadioReportType=0;
    	UpdateData(false);
    	return TRUE;  // return TRUE unless you set the focus to a control
    	              // EXCEPTION: OCX Property Pages should return FALSE
    }
    
    void CAllScan::OnRADIOHtml() 
    {
        
    	// TODO: Add your control notification handler code here
    	m_iRadioReportType=0;
    }
    
    void CAllScan::OnRADIOTxt() 
    {
        
    	// TODO: Add your control notification handler code here
    	m_iRadioReportType=1;
    }
    
    void CAllScan::OnRADIOXml() 
    {
        
    	// TODO: Add your control notification handler code here
    	m_iRadioReportType=2;
    }

![在这里插入图片描述][d386d8624e7a4879a7b59c9b495d91fe.png_pic_center]  
![在这里插入图片描述][a4dce32a38e841b4ad91341417741ba9.png_pic_center]  
![在这里插入图片描述][843a15770e404e3a85fdbd2caacbd319.png_pic_center]  
![在这里插入图片描述][c431ac7a594e48b09ce17b91baa74c2d.png_pic_center]  
![在这里插入图片描述][503706ae98404888ac7bf7a02bd3a351.png_pic_center]  
![在这里插入图片描述][45157400a1024e5390c37cc430a72c94.png_pic_center]  
![在这里插入图片描述][32b144154e524459bfd011676faabff9.png_pic_center]  
![在这里插入图片描述][1223559dd2174b6781f804be23f1ba4f.png_pic_center]  
![在这里插入图片描述][704aa24c0ad34442a951e83fc3321862.png_pic_center]  
![在这里插入图片描述][e0fbe96fc2224ed1bd31c3a2e02f91e7.png_pic_center]  
![在这里插入图片描述][7da3c4d594bb4d45bb94a8ea41c68f94.png_pic_center]  
![在这里插入图片描述][47ed3e914d5c4ace9e1867896f88c910.png_pic_center]  
![在这里插入图片描述][e1e7fd01002140ba9e113b899bc4e06c.png_pic_center]  
![在这里插入图片描述][74f0cfb5c3d14b94a4c4a3efcf51eb5c.png_pic_center]  
![在这里插入图片描述][94796309979549ea965b415fd434756a.png_pic_center]  
![在这里插入图片描述][9496ddd2a9ed432d92a1cac16dea4d16.png_pic_center]  
![在这里插入图片描述][c27bd59763dc4b58bdcbdfce059c2c51.png_pic_center]  
![在这里插入图片描述][b72d265a6fe54dc4840f13df6cab19a4.png_pic_center]

[d386d8624e7a4879a7b59c9b495d91fe.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/cde356d2d9da4c80bc0aa7a6faab5a91.png
[a4dce32a38e841b4ad91341417741ba9.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/933295b9865840b68cdef8b8024cf79b.png
[843a15770e404e3a85fdbd2caacbd319.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/90a7ec8fc30e42a593b8623cfd4e6eac.png
[c431ac7a594e48b09ce17b91baa74c2d.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/34931ea2aec84d6bad2594a0cf6fc7ce.png
[503706ae98404888ac7bf7a02bd3a351.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/48b49425955e47ab9b6edfe42076da62.png
[45157400a1024e5390c37cc430a72c94.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/8adc09d0d4304a31a178e24ee20d8827.png
[32b144154e524459bfd011676faabff9.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/3676b286549543d981e0d715d5433a8d.png
[1223559dd2174b6781f804be23f1ba4f.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/295b6ab2d5e34814b1f5a17c06454c74.png
[704aa24c0ad34442a951e83fc3321862.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/734f6337e71f4f74afbed106709d01f0.png
[e0fbe96fc2224ed1bd31c3a2e02f91e7.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/786ee21df83b41b6aaed1233f2778157.png
[7da3c4d594bb4d45bb94a8ea41c68f94.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/d2a64a0b66804a5d986cabbbde98e00d.png
[47ed3e914d5c4ace9e1867896f88c910.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/22f229fe71304b70bce1431a42047a64.png
[e1e7fd01002140ba9e113b899bc4e06c.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/f8ae71155a434efda1c285cfd4a21b48.png
[74f0cfb5c3d14b94a4c4a3efcf51eb5c.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/3df53a0ad5d74ae5b035e150ed34d68d.png
[94796309979549ea965b415fd434756a.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/4ec0f95bb75a47f5bbfa8fa7088b022a.png
[9496ddd2a9ed432d92a1cac16dea4d16.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/fb84b07597ed4a868b16287cc210ee24.png
[c27bd59763dc4b58bdcbdfce059c2c51.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/8e4b493ee6b447ff9647a0388484fcff.png
[b72d265a6fe54dc4840f13df6cab19a4.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/02/4a25656f98e84cb3887a9e371b1b505d.png