mirror of
https://github.com/BeneficialCode/WinArk.git
synced 2026-10-17 04:40:35 +08:00
CORP\zengquan
82 lines
2.7 KiB
C++
82 lines
2.7 KiB
C++
#include "pch.h"
|
|
#include "LsaSecurity.h"
|
|
|
|
#pragma comment(lib,"Secur32")
|
|
|
|
using namespace WinSys;
|
|
|
|
void LsaStringToWstring(LSA_UNICODE_STRING& lsa, std::wstring& str) {
|
|
str.assign(lsa.Buffer, lsa.Length / sizeof(WCHAR));
|
|
}
|
|
|
|
std::vector<LogonSessionData> LsaSecurity::EnumLogonSessions() {
|
|
std::vector<LogonSessionData> sessions;
|
|
|
|
LUID* luid;
|
|
ULONG count;
|
|
if (!NT_SUCCESS(::LsaEnumerateLogonSessions(&count, &luid)))
|
|
return sessions;
|
|
|
|
sessions.reserve(count);
|
|
for (ULONG i = 0; i < count; i++) {
|
|
SECURITY_LOGON_SESSION_DATA* data;
|
|
if (NT_SUCCESS(::LsaGetLogonSessionData(luid + i, &data))) {
|
|
LogonSessionData sd;
|
|
sd.Index = i + 1;
|
|
sd.LogonId = data->LogonId;
|
|
LsaStringToWstring(data->AuthenticationPackage, sd.AuthenticationPackage);
|
|
LsaStringToWstring(data->DnsDomainName, sd.DnsDomainName);
|
|
LsaStringToWstring(data->HomeDirectory, sd.HomeDirectory);
|
|
LsaStringToWstring(data->HomeDirectoryDrive, sd.HomeDirectoryDrive);
|
|
LsaStringToWstring(data->LogonDomain, sd.LogonDomain);
|
|
LsaStringToWstring(data->LogonScript, sd.LogonScript);
|
|
LsaStringToWstring(data->LogonServer, sd.LogonServer);
|
|
LsaStringToWstring(data->UserName, sd.UserName);
|
|
LsaStringToWstring(data->Upn, sd.Upn);
|
|
LsaStringToWstring(data->ProfilePath, sd.ProfilePath);
|
|
|
|
sd.LogoffTime = data->LogoffTime;
|
|
sd.LogonTime = data->LogonTime;
|
|
sd.LastFailedLogon = data->LastLogonInfo.LastFailedLogon;
|
|
sd.LastSuccessfulLogon = data->LastLogonInfo.LastSuccessfulLogon;
|
|
sd.FailedAttemptCountSinceLastSuccessfulLogon = data->LastLogonInfo.FailedAttemptCountSinceLastSuccessfulLogon;
|
|
sd.KickOffTime = data->KickOffTime;
|
|
sd.UserFlags = data->UserFlags;
|
|
sd.LogonType = (SecurityLogonType)data->LogonType;
|
|
if (data->Sid)
|
|
::CopySid(_countof(sd.Sid), (PSID)sd.Sid, data->Sid);
|
|
else
|
|
::memset(sd.Sid, 0, sizeof(sd.Sid));
|
|
|
|
sd.Session = data->Session;
|
|
sd.PasswordCanChange = data->PasswordCanChange;
|
|
sd.PasswordLastSet = data->PasswordLastSet;
|
|
sd.PasswordMustChange = data->PasswordMustChange;
|
|
|
|
sessions.emplace_back(std::move(sd));
|
|
|
|
::LsaFreeReturnBuffer(data);
|
|
}
|
|
}
|
|
|
|
::LsaFreeReturnBuffer(luid);
|
|
return sessions;
|
|
}
|
|
|
|
std::wstring LsaSecurity::GetUserNameByLogonSession(PLUID sessionId) {
|
|
SECURITY_LOGON_SESSION_DATA* data;
|
|
if (0 == ::LsaGetLogonSessionData(sessionId, &data)) {
|
|
std::wstring username(data->UserName.Buffer, data->UserName.Length / sizeof(WCHAR));
|
|
LsaFreeReturnBuffer(data);
|
|
return username;
|
|
}
|
|
return L"";
|
|
}
|
|
|
|
LSA_HANDLE OpenLsaHandle(DWORD lsaAccess) {
|
|
LSA_HANDLE hPolicy = nullptr;
|
|
LSA_OBJECT_ATTRIBUTES oa = { sizeof(oa) };
|
|
auto status = ::LsaOpenPolicy(nullptr, &oa, lsaAccess, &hPolicy);
|
|
::SetLastError(::RtlNtStatusToDosError(status));
|
|
return hPolicy;
|
|
} |