反彈端口木馬的設計與實現

論文字數:11417,頁數:24

摘  要
木馬是用于遠程控制的黑客工具，被黑客用來遠程操作他人計算機、監視別人和盜竊別人帳號、密碼和數據等，以達到破壞他人計算機、偷竊別人隱私和得到經濟利益的目的。作為網絡安全管理人員，認真地研究木馬攻擊技術，理清木馬攻擊手段與過程，提早思考應對策略是防御木馬攻擊的有效途徑。因此，在木馬已對網絡與信息安全構成極大危險的時代研究木馬技術、編寫木馬程序，對于防護網絡安全、促進電子商務的發展具有重要的現實意義。
文中在深入研究國內外木馬技術與發展方向的基礎上，介紹了木馬的發展與現狀以及木馬組成與特性；對反彈端口木馬的連接方法進行了具體詳盡的分析。充分利用傳統防火墻疏于對向外連接的過濾這一特點，使用Visual C++ 6.0進行Socket網絡編程開發而成。實現了木馬繞過防火墻建立連接；實現木馬的隱藏、自動運行等基本特性，讓服務端光驅彈出、機箱播放音樂等功能。文中細致地描繪了木馬的功能執行過程。最后提供了全面的測試結果。

關鍵詞：木馬；反彈端口；服務端；客戶端；套接字

Design and Implementation of Rebound Ports Trojan horse
Abstract
The Trojan horse is a kind of hacker’s tool which is used for remote control and operating others’ computers, monitoring and stealing others’ account numbers, passwords and data and so on, in order to destroy others’ computers or get their privacy and economic interests. As the Internet security manager, we should pay attention to preventing the Trojan horse when we detect and delete the Trojan horse. We must study the technology of the Trojan horse attack, clear the means and process of the Trojan horse to find an efficient path to prevent the Trojan horse attack ahead of time. So at the time that the Trojan horse is dangerous to the network and security of information, we should study the technology of the Trojan horse and code the Trojan horse programs, which is significant to protect the Internet security and promote the development of the e-business.
  The thesis is writen on the bases of deeply studying the Trojan horse technique and development orientation at home and overseas, then, introduces the development and current situation of Trojan horse and its component as well as characteristics. This thesis analyzes the method of how to connect with Rebound Ports Trojan horse in detail. Making full use of which the firewall neglect to filter the Rebound Ports Trojan horse, it is developed by Visual C++6.0. The design has realized the function which the service could connect the client actively, also implemented the basic characteristics of concealment, automatic running, rebounding the CD-ROM of services, chassis playing music and so on. At last the paper describes the progress of executing Trojan horse and affords all-around test result.

Key words: Trojan horse; Rebound port; service port; client port; socket

目  錄

1 引言 1
1.1 課題背景 1
1.2 國內外研究現狀 1
1.3 課題研究的意義 2
1.4 課題的研究方法 2
2 相關理論基礎 2
2.1 木馬概述 2
2.1.1 木馬的組成 3
2.1.2 木馬的特征 3
2.1.3 反彈端口木馬介紹 4
2.2 C/S模式 4
2.3 套接字（Socket） 5
2.4 Visual C++ 6.0 5
3 需求分析 5
3.1 系統規格說明 5
3.1.1 木馬的概貌 5
3.1.2 功能要求 6
3.1.3 性能要求 6
3.1.4運行要求 6
3.2 數據要求 6
3.3 用戶系統描述 7
4 木馬的設計與實現 7
4.1 木馬結構設計 7
4.1.1 木馬的主體設計 8
4.1.2 木馬的自動啟動實現 8
4.1.3 木馬的窗口隱藏實現 9
4.2 木馬連接過程 9
4.2.1 連接過程理論研究 9
4.2.2 木馬連接過程實現 11
4.3 木馬的遠程控制功能設計 13
4.3.1 木馬的功能實現 13
4.3.2 木馬的功能執行過程 14
5 測試 15
5.1 測試環境 15
5.2 測試過程與結果 15
結    論 17
參考文獻 17
致    謝 18
聲    明 19