GFW 定位原理性脚本

probe_fake_dns_response.py

from scapy.all import *
import time
dst = sys.argv[1]
src = ''
for ttl in range(1, 15):
    send(IP(dst=dst,src=src,id=ttl,ttl=ttl)/UDP()/DNS(rd=1,qd=DNSQR(qname="www.twitter.com")))
    send(IP(dst=dst,src=src,id=ttl,ttl=ttl)/TCP(dport=80,sport=8081)) # 非必要参照物
    time.sleep(2)

probe_packet_drop.py

from scapy.all import *
import time
dst = sys.argv[1]
src = ''
for ttl in range(1, 15):
    send(IP(dst=dst,src=src,id=ttl,ttl=ttl)/TCP(dport=80,sport=8080))
    send(IP(dst=dst,src=src,id=ttl,ttl=ttl)/TCP(dport=80,sport=8081))
    time.sleep(2)

probe_tcp_rst.py

from scapy.all import *
import time
dst = sys.argv[1]
src = ''
for ttl in range(1, 15):
    syn = IP(dst=dst, src=src, id=ttl * 10 + 1, ttl=ttl) / TCP(sport=19840, dport=80, flags='S', seq=0)
    send(syn)
    getStr = 'GET / HTTP/1.1\r\nHost: www.facebook.com\r\n\r\n'
    request = IP(dst=dst, src=src, id=ttl * 10 + 2, ttl=ttl) / TCP(
        sport=19840, dport=80, seq=1, ack=100, flags='A') / getStr
    send(request)
    send(IP(dst=dst,src=src,id=ttl * 10 + 3,ttl=ttl)/TCP(dport=80,sport=8081)) # 非必要参照物
    time.sleep(2)