局域网聊天室管理控制台

局域网聊天室客户端#

1
-std=c++11

1
//局域网聊天室控制台 - v1.1
2
#include <iostream>
3
#include <string>
4
#include <vector>
5
#include <chrono>
6
#include <sstream>
7
#include <iomanip>
8
#include <regex>
9
#include <winsock2.h>
10
#include <windows.h>
11
#define BCRYPT_ECDSA_P256_ALGORITHM L"ECDSA_P256"
12
using namespace std;
13

14
// ----------公钥----------
15
const string ADMIN_PUB_KEY = "d27605efb07c8a1e79c41c85e48172b4ece6579ff810eb775606a294763aeb4c9ef8aa24b9c504005c8b959ceaa13b099a100fe4ecf45d15705821b83913f37e";
16
string admin_priv_key = ""; // 用户输入的私钥标量d
17
// ----------公钥----------
18

19

20
// ======= BCrypt (CNG) 动态加载相关的类型定义 =======
21
typedef PVOID BCRYPT_ALG_HANDLE;
22
typedef PVOID BCRYPT_KEY_HANDLE;
23
typedef PVOID BCRYPT_HASH_HANDLE;
24
#ifndef NTSTATUS
25
typedef LONG NTSTATUS;
26
#endif
27

28
typedef int(WSAAPI *P_WS)(WORD, LPWSADATA); typedef int(WSAAPI *P_WC)(void); typedef SOCKET(WSAAPI *P_SK)(int, int, int);
29
typedef int(WSAAPI *P_CS)(SOCKET); typedef int(WSAAPI *P_SD)(SOCKET, const char*, int, int);
30
typedef int(WSAAPI *P_ST)(SOCKET, const char*, int, int, const struct sockaddr*, int);
31
typedef int(WSAAPI *P_RF)(SOCKET, char*, int, int, struct sockaddr*, int*);
32
typedef int(WSAAPI *P_SO)(SOCKET, int, int, const char*, int); typedef u_short(WSAAPI *P_HS)(u_short);
33
typedef unsigned long(WSAAPI *P_IA)(const char*); typedef char*(WSAAPI *P_IN)(struct in_addr);
34

35
typedef NTSTATUS(WINAPI *P_BCryptOpenAlgorithmProvider)(BCRYPT_ALG_HANDLE*, LPCWSTR, LPCWSTR, ULONG);
36
typedef NTSTATUS(WINAPI *P_BCryptCloseAlgorithmProvider)(BCRYPT_ALG_HANDLE, ULONG);
37
typedef NTSTATUS(WINAPI *P_BCryptImportKeyPair)(BCRYPT_ALG_HANDLE, BCRYPT_KEY_HANDLE, LPCWSTR, BCRYPT_KEY_HANDLE*, PUCHAR, ULONG, ULONG);
38
typedef NTSTATUS(WINAPI *P_BCryptCreateHash)(BCRYPT_ALG_HANDLE, BCRYPT_HASH_HANDLE*, PUCHAR, ULONG, PUCHAR, ULONG, ULONG);
39
typedef NTSTATUS(WINAPI *P_BCryptHashData)(BCRYPT_HASH_HANDLE, PUCHAR, ULONG, ULONG);
40
typedef NTSTATUS(WINAPI *P_BCryptFinishHash)(BCRYPT_HASH_HANDLE, PUCHAR, ULONG, ULONG);
41
typedef NTSTATUS(WINAPI *P_BCryptDestroyHash)(BCRYPT_HASH_HANDLE);
42
typedef NTSTATUS(WINAPI *P_BCryptSignHash)(BCRYPT_KEY_HANDLE, VOID*, PUCHAR, ULONG, PUCHAR, ULONG, ULONG*, ULONG);
43
typedef NTSTATUS(WINAPI *P_BCryptDestroyKey)(BCRYPT_KEY_HANDLE);
44

45
struct API_HUB {
46
    HMODULE hS; P_WS ws; P_WC wc; P_SK sk; P_CS cs; P_ST st; P_RF rf; P_SO so; P_HS hs; P_IA ia; P_IN in;
47
    HMODULE hBcrypt;
48
    P_BCryptOpenAlgorithmProvider bOpenAlg; P_BCryptCloseAlgorithmProvider bCloseAlg;
49
    P_BCryptImportKeyPair bImportKey; P_BCryptCreateHash bCreateHash; P_BCryptHashData bHashData;
50
    P_BCryptFinishHash bFinishHash; P_BCryptDestroyHash bDestroyHash;
51
    P_BCryptSignHash bSignHash; P_BCryptDestroyKey bDestroyKey;
52

53
    void init() {
54
        hS = LoadLibraryA("ws2_32.dll");
55
        ws = (P_WS)GetProcAddress(hS, "WSAStartup"); wc = (P_WC)GetProcAddress(hS, "WSACleanup");
56
        sk = (P_SK)GetProcAddress(hS, "socket"); cs = (P_CS)GetProcAddress(hS, "closesocket");
57
        st = (P_ST)GetProcAddress(hS, "sendto"); rf = (P_RF)GetProcAddress(hS, "recvfrom");
58
        so = (P_SO)GetProcAddress(hS, "setsockopt"); hs = (P_HS)GetProcAddress(hS, "htons");
59
        ia = (P_IA)GetProcAddress(hS, "inet_addr"); in = (P_IN)GetProcAddress(hS, "inet_ntoa");
60

61
        hBcrypt = LoadLibraryA("bcrypt.dll");
62
        if (hBcrypt) {
63
            bOpenAlg = (P_BCryptOpenAlgorithmProvider)GetProcAddress(hBcrypt, "BCryptOpenAlgorithmProvider");
64
            bCloseAlg = (P_BCryptCloseAlgorithmProvider)GetProcAddress(hBcrypt, "BCryptCloseAlgorithmProvider");
65
            bImportKey = (P_BCryptImportKeyPair)GetProcAddress(hBcrypt, "BCryptImportKeyPair");
66
            bCreateHash = (P_BCryptCreateHash)GetProcAddress(hBcrypt, "BCryptCreateHash");
67
            bHashData = (P_BCryptHashData)GetProcAddress(hBcrypt, "BCryptHashData");
68
            bFinishHash = (P_BCryptFinishHash)GetProcAddress(hBcrypt, "BCryptFinishHash");
69
            bDestroyHash = (P_BCryptDestroyHash)GetProcAddress(hBcrypt, "BCryptDestroyHash");
70
            bSignHash = (P_BCryptSignHash)GetProcAddress(hBcrypt, "BCryptSignHash");
71
            bDestroyKey = (P_BCryptDestroyKey)GetProcAddress(hBcrypt, "BCryptDestroyKey");
72
        }
73
    }
74
} API;
75

76
SOCKET udp_socket = INVALID_SOCKET;
77
sockaddr_in broadcast_addr;
78

79
long long wall_now_ms() {
80
    return std::chrono::duration_cast<std::chrono::milliseconds>(
81
        std::chrono::system_clock::now().time_since_epoch()
82
    ).count();
83
}
84

85
vector<BYTE> hex2bytes(const string& hex) {
86
    vector<BYTE> bytes;
87
    for (size_t i = 0; i < hex.length(); i += 2) {
88
        bytes.push_back((BYTE)strtol(hex.substr(i, 2).c_str(), NULL, 16));
89
    }
90
    return bytes;
91
}
92

93
string bytes2hex(const vector<BYTE>& bytes) {
94
    stringstream ss;
95
    ss << hex << setfill('0');
96
    for (auto b : bytes) ss << setw(2) << (int)b;
97
    return ss.str();
98
}
99

100
bool is_valid_ip(const string& ip) {
101
    regex ip_regex("^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$");
102
    return regex_match(ip, ip_regex);
103
}
104

105
string trim(const string& s) {
106
    size_t start = s.find_first_not_of(" \t\r\n");
107
    if (start == string::npos) return "";
108
    return s.substr(start, s.find_last_not_of(" \t\r\n") - start + 1);
109
}
110

111
// 基于 ECDSA P-256 对消息进行签名
112
string sign_message(const string& msg) {
113
    if (admin_priv_key.length() != 64) return "";
114

115
    vector<BYTE> pub_bytes = hex2bytes(ADMIN_PUB_KEY);
116
    vector<BYTE> priv_bytes = hex2bytes(admin_priv_key);
117

118
    if (pub_bytes.size() != 64 || priv_bytes.size() != 32) return "";
119

120
    #pragma pack(push, 1)
121
    struct {
122
        ULONG dwMagic; // BCRYPT_ECDSA_PRIVATE_P256_MAGIC (0x32534345)
123
        ULONG cbKey;
124
        BYTE X[32];
125
        BYTE Y[32];
126
        BYTE d[32];
127
    } eccBlob;
128
    #pragma pack(pop)
129

130
    eccBlob.dwMagic = 0x32534345; // "ESC2"
131
    eccBlob.cbKey = 32;
132
    memcpy(eccBlob.X, pub_bytes.data(), 32);
133
    memcpy(eccBlob.Y, pub_bytes.data() + 32, 32);
134
    memcpy(eccBlob.d, priv_bytes.data(), 32);
135

136
    BCRYPT_ALG_HANDLE hSignAlg = NULL, hHashAlg = NULL;
137
    BCRYPT_KEY_HANDLE hKey = NULL;
138
    BCRYPT_HASH_HANDLE hHash = NULL;
139
    string signature_hex = "";
140
    NTSTATUS status;
141

142
    do {
143
        // 使用更具体的算法名称
144
        status = API.bOpenAlg(&hSignAlg, BCRYPT_ECDSA_P256_ALGORITHM, NULL, 0);
145
        if (status != 0) break;
146

147
        status = API.bImportKey(hSignAlg, NULL, L"ECCPRIVATEBLOB", &hKey, (PUCHAR)&eccBlob, sizeof(eccBlob), 0);
148
        if (status != 0) {
149
            cout << "\n[错误] 私钥导入失败（这里报错通常是因为公钥和输入的私钥不匹配）, Status: 0x" << hex << status << dec << endl;
150
            break;
151
        }
152

153
        status = API.bOpenAlg(&hHashAlg, L"SHA256", NULL, 0);
154
        if (status != 0) break;
155

156
        status = API.bCreateHash(hHashAlg, &hHash, NULL, 0, NULL, 0, 0);
157
        if (status != 0) break;
158

159
        status = API.bHashData(hHash, (PUCHAR)msg.data(), (ULONG)msg.size(), 0);
160
        if (status != 0) break;
161

162
        BYTE hashResult[32];
163
        status = API.bFinishHash(hHash, hashResult, sizeof(hashResult), 0);
164
        if (status != 0) break;
165

166
        ULONG cbSig = 0;
167
        status = API.bSignHash(hKey, NULL, hashResult, sizeof(hashResult), NULL, 0, &cbSig, 0);
168
        if (status != 0) break;
169

170
        vector<BYTE> sig(cbSig);
171
        status = API.bSignHash(hKey, NULL, hashResult, sizeof(hashResult), sig.data(), cbSig, &cbSig, 0);
172
        if (status == 0) {
173
            signature_hex = bytes2hex(sig);
174
        }
175
    } while (false);
176

177
    if (hHash) API.bDestroyHash(hHash);
178
    if (hKey) API.bDestroyKey(hKey);
179
    if (hHashAlg) API.bCloseAlg(hHashAlg, 0);
180
    if (hSignAlg) API.bCloseAlg(hSignAlg, 0);
181

182
    return signature_hex;
183
}
184

185
void send_admin_command(const string& body) {
186
    long long ts = wall_now_ms();
187
    string data_to_verify = to_string(ts) + "\n" + body;
188
    string sig = sign_message(data_to_verify);
189

190
    if (sig.empty()) {
191
        cout << "[错误] 签名失败，私钥可能无效或系统不支持。" << endl;
192
        return;
193
    }
194

195
    string packet = "LANCHAT1\nTYPE=ADMIN_CMD\nTS=" + to_string(ts) + "\nSIG=" + sig + "\n\n" + body;
196
    API.st(udp_socket, packet.c_str(), (int)packet.size(), 0, (struct sockaddr*)&broadcast_addr, sizeof(broadcast_addr));
197
}
198

199
void handle_list_command() {
200
    send_admin_command("list");
201

202
    cout << "=> 已发送探测广播，正在监听响应 (2秒)..." << endl;
203

204
    // 设置非阻塞接收超时 2秒
205
    int timeout = 2000;
206
    API.so(udp_socket, SOL_SOCKET, SO_RCVTIMEO, (char*)&timeout, sizeof(timeout));
207

208
    long long start = wall_now_ms();
209
    int count = 0;
210

211
    while (wall_now_ms() - start < 2000) {
212
        char buf[2048];
213
        sockaddr_in from;
214
        int flen = sizeof(from);
215
        int r_len = API.rf(udp_socket, buf, sizeof(buf), 0, (sockaddr*)&from, &flen);
216

217
        if (r_len > 0) {
218
            string raw(buf, r_len);
219
            if (raw.find("TYPE=ADMIN_REP") != string::npos && raw.find("ONLINE") != string::npos) {
220
                cout << "  [+] 发现存活节点 IP: " << API.in(from.sin_addr) << endl;
221
                count++;
222
            }
223
        }
224
    }
225
    cout << "=> 扫描完毕，共响应 " << count << " 个存活节点。" << endl;
226
}
227

228
void print_help() {
229
    cout << "================== 支持的命令 ==================\n";
230
    cout << "  list                 - 扫描局域网内所有在线用户\n";
231
    cout << "  remove <ip>          - 强制踢出指定IP的用户\n";
232
    cout << "  blacklist <ip>       - 将指定IP加入黑名单并踢出\n";
233
    cout << "  whitelist <ip>       - 将指定IP移出黑名单\n";
234
    cout << "  help                 - 查看此帮助信息\n";
235
    cout << "  exit                 - 退出程序\n";
236
    cout << "================================================\n";
237
}
238

239
int main() {
240
    system("chcp 936 > nul");
241
    API.init();
242
    WSADATA w;
243
    API.ws(MAKEWORD(2, 2), &w);
244

245
    udp_socket = API.sk(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
246
    int opt = 1;
247
    API.so(udp_socket, SOL_SOCKET, SO_BROADCAST, (char*)&opt, sizeof(opt));
248

249
    memset(&broadcast_addr, 0, sizeof(broadcast_addr));
250
    broadcast_addr.sin_family = AF_INET;
251
    broadcast_addr.sin_port = API.hs(8888);
252
    broadcast_addr.sin_addr.s_addr = API.ia("255.255.255.255");
253

254
    cout << "=================================================\n";
255
    cout << "          局域网聊天室 - 管理控制台 (v1.0)       \n";
256
    cout << "=================================================\n\n";
257

258
    // 验证私钥
259
    while (1) {
260
        cout << "请输入验证令牌: ";
261
        string input_key;
262
        getline(cin, input_key);
263
        input_key = trim(input_key);
264

265
        if (input_key.length() == 64 && input_key.find_first_not_of("0123456789abcdefABCDEF") == string::npos) {
266
            admin_priv_key = input_key;
267
            cout << "[成功] 密钥格式有效！即将进入控制台...\n";
268
            system("pause");
269
            break;
270
        } else {
271
            cout << "[错误] 无效的私钥格式！";
272
            system("cls");
273
        }
274
    }
275
    system("cls");
276
    // 交互式命令主循环
277
    while (1) {
278
        cout << "> ";
279
        string cmd;
280
        getline(cin, cmd);
281
        cmd = trim(cmd);
282
        if (cmd.empty()) continue;
283

284
        if (cmd == "exit") {
285
            break;
286
        } else if (cmd == "help") {
287
            print_help();
288
        } else if (cmd == "list") {
289
            handle_list_command();
290
        } else if (cmd.find("remove ") == 0) {
291
            string ip = trim(cmd.substr(7));
292
            if (is_valid_ip(ip)) {
293
                send_admin_command("remove " + ip);
294
                cout << "=> 已下发踢出指令给 IP: " << ip << endl;
295
            } else {
296
                cout << "[错误] 无效的IP地址格式！" << endl;
297
            }
298
        } else if (cmd.find("blacklist ") == 0) {
299
            string ip = trim(cmd.substr(10));
300
            if (is_valid_ip(ip)) {
301
                send_admin_command("blacklist " + ip);
302
                cout << "=> 已下发拉黑指令给 IP: " << ip << endl;
303
            } else {
304
                cout << "[错误] 无效的IP地址格式！" << endl;
305
            }
306
        } else if (cmd.find("whitelist ") == 0) {
307
            string ip = trim(cmd.substr(10));
308
            if (is_valid_ip(ip)) {
309
                send_admin_command("whitelist " + ip);
310
                cout << "=> 已下发解除黑名单指令给 IP: " << ip << endl;
311
            } else {
312
                cout << "[错误] 无效的IP地址格式！" << endl;
313
            }
314
        } else {
315
            cout << "[错误] 未知命令！输入 'help' 查看支持的指令。" << endl;
316
        }
317
    }API.cs(udp_socket);API.wc();
318
    return 0;
319
}