mirror of
https://github.com/BeneficialCode/WinArk.git
synced 2026-10-18 21:51:35 +08:00
CORP\zengquan
101 lines
2.9 KiB
C++
101 lines
2.9 KiB
C++
#include "pch.h"
|
|
#include "SecurityHelper.h"
|
|
#include <sddl.h>
|
|
#include <shellapi.h>
|
|
#include "DriverHelper.h"
|
|
|
|
bool SecurityHelper::IsRunningElevated() {
|
|
static bool runningElevated = false;
|
|
static bool runningElevatedCheck = false;
|
|
if (runningElevatedCheck)
|
|
return runningElevated;
|
|
|
|
runningElevatedCheck = true;
|
|
wil::unique_handle hToken;
|
|
if (!::OpenProcessToken(::GetCurrentProcess(), TOKEN_QUERY, hToken.addressof()))
|
|
return false;
|
|
|
|
TOKEN_ELEVATION te;
|
|
DWORD len;
|
|
if (::GetTokenInformation(hToken.get(), TokenElevation, &te, sizeof(te), &len)) {
|
|
runningElevated = te.TokenIsElevated ? true : false;
|
|
}
|
|
return runningElevated;
|
|
}
|
|
|
|
HICON SecurityHelper::GetShieldIcon() {
|
|
SHSTOCKICONINFO ssii = { sizeof(ssii) };
|
|
if(FAILED(::SHGetStockIconInfo(SIID_SHIELD,SHGSI_SMALLICON|SHGSI_ICON,&ssii)))
|
|
return nullptr;
|
|
|
|
return ssii.hIcon;
|
|
}
|
|
|
|
bool SecurityHelper::RunElevated(PCWSTR param, bool ui) {
|
|
WCHAR path[MAX_PATH];
|
|
::GetModuleFileName(nullptr, path, _countof(path));
|
|
SHELLEXECUTEINFO shi = { sizeof(shi) };
|
|
shi.lpFile = path;
|
|
shi.nShow = SW_SHOWDEFAULT;
|
|
shi.lpVerb = L"runas";
|
|
shi.lpParameters = param;
|
|
shi.fMask = (ui ? 0 : (SEE_MASK_FLAG_NO_UI | SEE_MASK_NO_CONSOLE)) | SEE_MASK_NOASYNC | SEE_MASK_NOCLOSEPROCESS;
|
|
auto ok = ::ShellExecuteEx(&shi);
|
|
if (!ok)
|
|
return false;
|
|
|
|
DWORD rc = WAIT_OBJECT_0;
|
|
if (!ui) {
|
|
rc = ::WaitForSingleObject(shi.hProcess, 5000);
|
|
}
|
|
::CloseHandle(shi.hProcess);
|
|
return rc == WAIT_OBJECT_0;
|
|
}
|
|
|
|
bool SecurityHelper::EnablePrivilege(PCWSTR privName, bool enable) {
|
|
HANDLE hToken;
|
|
if (!::OpenProcessToken(::GetCurrentProcess(), TOKEN_ADJUST_PRIVILEGES, &hToken))
|
|
return false;
|
|
|
|
bool result = false;
|
|
TOKEN_PRIVILEGES tp;
|
|
tp.PrivilegeCount = 1;
|
|
tp.Privileges[0].Attributes = enable ? SE_PRIVILEGE_ENABLED : 0;
|
|
if (::LookupPrivilegeValue(nullptr, privName, &tp.Privileges[0].Luid)) {
|
|
if (::AdjustTokenPrivileges(hToken, FALSE, &tp, sizeof(tp), nullptr, nullptr))
|
|
result = ::GetLastError() == ERROR_SUCCESS;
|
|
}
|
|
::CloseHandle(hToken);
|
|
return result;
|
|
}
|
|
|
|
std::wstring SecurityHelper::GetSidFromUser(PCWSTR name) {
|
|
BYTE sid[SECURITY_MAX_SID_SIZE];
|
|
DWORD size = sizeof(sid);
|
|
SID_NAME_USE use;
|
|
WCHAR domain[64];
|
|
DWORD domainSize = _countof(domain);
|
|
if (!::LookupAccountName(nullptr, name, (PSID)sid, &size, domain, &domainSize, &use))
|
|
return L"";
|
|
|
|
PWSTR ssid;
|
|
if (::ConvertSidToStringSid((PSID)sid, &ssid)) {
|
|
std::wstring result(ssid);
|
|
::LocalFree(ssid);
|
|
return result;
|
|
}
|
|
return L"";
|
|
}
|
|
|
|
HANDLE SecurityHelper::DupHandle(HANDLE hSource, DWORD sourcePid, DWORD access) {
|
|
auto h = DriverHelper::DupHandle(hSource, sourcePid, access, access == 0 ? DUPLICATE_SAME_ACCESS : 0);
|
|
if (!h) {
|
|
wil::unique_handle hProcess(::OpenProcess(PROCESS_DUP_HANDLE, FALSE, sourcePid));
|
|
if (!hProcess)
|
|
return nullptr;
|
|
|
|
::DuplicateHandle(hProcess.get(), hSource, ::GetCurrentProcess(), &h, access, FALSE,
|
|
access == 0 ? DUPLICATE_SAME_ACCESS : 0);
|
|
}
|
|
return h;
|
|
} |