added client side attack env to virtual lab and server side tcp

client-side-attack/first_phase/phase_one_attack.sh

@@ -1,10 +0,0 @@
-#/bin/bash
-
-./phase_one_attack 52:54:00:12:ae:4c\
-	52:54:00:12:ae:3f\
-	10.7.1.0\
- 	255.255.255.0\
-	192.168.64.1\
-	ens5\
-	35220\
-	443 

client-side-attack/first_phase/send.cpp

@@ -1,35 +1,3 @@
-/*
- * Modified from http://libtins.github.io/examples/syn-scanner/
- *
- * INCLUDED COPYRIGHT
- * Copyright (c) 2016, Matias Fontanini
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions are
- * met:
- *
- * * Redistributions of source code must retain the above copyright
- *   notice, this list of conditions and the following disclaimer.
- * * Redistributions in binary form must reproduce the above
- *   copyright notice, this list of conditions and the following disclaimer
- *   in the documentation and/or other materials provided with the
- *   distribution.
- *
- * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
- * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
- * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
- * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
- * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
- * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
- * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
- * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
- * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
- * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
- * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
- *
- */
-
 #include <iostream>
 #include <iomanip>
 #include <vector>
@@ -116,9 +84,10 @@ void Scanner::launch_sniffer() {
     sniffer.sniff_loop(make_sniffer_handler(this, &Scanner::callback));
 }
 
-/* Our scan handler. This will receive SYN-ACKS and inform us
- * the scanned port's status.
- */
+
+// Handle sniffed packets until we find a response 
+// with a potential private tun IP address
+//
 bool Scanner::callback(PDU& pdu) {
 	// Find the layers we want.
 	const IP &ip = pdu.rfind_pdu<IP>(); // Grab IP layer of sniffed packet
@@ -141,7 +110,7 @@ void Scanner::run() {
     pthread_t thread;
     // Launch our sniff thread.
     pthread_create(&thread, 0, &Scanner::thread_proc, this);
-    // Start sending SYNs to port.
+    // Start sending SYNs to possible private IPs
     send_synacks();
 
     // Wait for our sniffer.