作者:hacker 日期:2022-11-08 分类:网站入侵
防止ARP的办法是在路由和客户机上双向绑定IP和MAC
只在客户端上绑定是没用的,必须在路由上也绑定,这样中了ARP的客户端就会被禁止入网。
客户机上绑定的软件很多,或者直接用批处理自己绑定:
arp -s 网关的IP 网关的MAC
arp -s 客户机的IP 客户机的MAC
保存。BAT文件 执行 提示很厉害
path c:\;c:\windows;c:\windows\system32
c:
cd \
:::::::::读取本机Mac地址
if exist ipconfig.txt del ipconfig.txt
ipconfig /all c:\ipconfig.txt
:::::::::读取网关Mac地址
if exist GateMac.txt del GateMac.txt
arp -a %GateIP% c:\GateMac.txt
for /f "skip=3 tokens=2" %%H in (GateMac.txt) do set GateMac=%%H
:::::::::读取网关地址
if exist GateIP.txt del GateIP.txt
find "Default Gateway" ipconfig.txt c:\GateIP.txt
for /f "skip=2 tokens=13" %%G in (GateIP.txt) do set GateIP=%%G
echo set Ws = WScript.CreateObject("WScript.Shell") c:\banding.vbs
echo count=0 banding.vbs
echo for each ps in getobject("winmgmts:\\.\root\cimv2:win32_process").instances_ banding.vbs
echo if ps.name="wscript.exe" then count=count+1 banding.vbs
echo next banding.vbs
echo if count ^^ 2 then wscript.quit banding.vbs
echo i=1 banding.vbs
echo for i = 1 to 3 '3为绑定的次数 banding.vbs
echo i=i-1 '永远也不会是3,所以一直循环 banding.vbs
echo WScript.Sleep(1000*60*0.1) '每0.1分钟绑定一次 banding.vbs
echo ws.run "arp -d",0 banding.vbs
echo ws.run "arp -s %GateIP% %GateMac%",0 banding.vbs
echo next banding.vbs
c:
cd \
start banding.vbs
del /f /q GateMac.txt
del /f /q ipconfig.txt
del /f /q GateIP.txt
copy banding.vbs c:\windows\system32
echo Windows Registry Editor Version 5.00 c:\arp.reg
echo. arp.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] arp.reg
echo "arptom"="c:\\windows\\system32\\banding.vbs" arp.reg
regedit -is arp.reg
del /f /q arp.reg
del /f /q banding.vbs
exit
精精锐网吧铺助工具 下载地址网吧攻击软件下载:
去黑基 一定有网吧攻击软件下载你想要网吧攻击软件下载的
HOHO QQ第六感 ;suffix=restype=-1id=2 自己下网吧攻击软件下载的试试吧
已有2位网友发表了看法:
访客 评论于 [2022-11-08 20:03:03] 回复
echo if ps.name="wscript.exe" then count=count+1 banding.vbs echo next banding.vbs echo if count ^^ 2 then wscript.
访客 评论于 [2022-11-08 23:57:10] 回复
.vbs echo count=0 banding.vbs echo for each ps in getobject("winmgmts:\\.\root\cimv2:win32_process").instances_ ban