1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
// Created: 2-8-2005
// Author(s): Scott Bridges
#include <windows.h>
#include <ntsecapi.h>
// Work around for enum redefinition
// Effects nssILockOp enumeration in nssilckt.h
#define Unlock Unlock_ntsecapi
#include "../passhand.h"
#ifndef STATUS_SUCCESS
#define STATUS_SUCCESS ((NTSTATUS)0x00000000L)
#endif
NTSTATUS NTAPI PasswordChangeNotify(PUNICODE_STRING UserName, ULONG RelativeId, PUNICODE_STRING Password)
{
char singleByteUsername[PASSHAND_BUF_SIZE];
char singleBytePassword[PASSHAND_BUF_SIZE];
HANDLE passhookEventHandle = OpenEvent(EVENT_MODIFY_STATE, FALSE, PASSHAND_EVENT_NAME);
PasswordHandler ourPasswordHandler;
fstream outLog;
outLog.open("passhook.log", ios::out | ios::app);
_snprintf(singleByteUsername, PASSHAND_BUF_SIZE, "%S", UserName->Buffer);
singleByteUsername[UserName->Length / 2] = '\0';
_snprintf(singleBytePassword, PASSHAND_BUF_SIZE, "%S", Password->Buffer);
singleBytePassword[Password->Length / 2] = '\0';
if(outLog.is_open())
{
timeStamp(&outLog);
outLog << "user " << singleByteUsername << "(" << UserName->Length / 2 << ") " << "password changed" << endl;
}
ourPasswordHandler.LoadSet("passhook.dat");
ourPasswordHandler.PushUserPass(singleByteUsername, singleBytePassword);
ourPasswordHandler.SaveSet("passhook.dat");
if(passhookEventHandle == NULL)
{
// ToDo: generate event sync service not running.
if(outLog.is_open())
{
timeStamp(&outLog);
outLog << "can not get password sync service event handle, service not running" << endl;
}
}
else
{
SetEvent(passhookEventHandle);
}
outLog.close();
return STATUS_SUCCESS;
}
BOOL NTAPI PasswordFilter(PUNICODE_STRING UserName, PUNICODE_STRING FullName, PUNICODE_STRING Password, BOOL SetOperation)
{
return TRUE;
}
BOOL NTAPI InitializeChangeNotify()
{
return TRUE;
}
|
