ntlogon.cpp

远程控制软件UltraVNC

#include <windows.h>
#include <stdio.h>
#include <stdlib.h>

typedef BOOL (*CheckUserGroupPasswordFn)( char * userin,char *password,char *machine,char *group,int lodom);
CheckUserGroupPasswordFn CheckUserGroupPassword = 0;
bool CheckAD()
{
	HMODULE hModule = LoadLibrary("Activeds.dll");
	if (hModule)
	{
		FreeLibrary(hModule);
		return true;
	}
	return false;
}

bool CheckNetapi95()
{
	HMODULE hModule = LoadLibrary("netapi32.dll");
	if (hModule)
	{
		FreeLibrary(hModule);
		return true;
	}
	return false;
}

bool CheckDsGetDcNameW()
{
	HMODULE hModule = LoadLibrary("netapi32.dll");
	if (hModule)
	{
		FARPROC test=NULL;
		test=GetProcAddress( hModule, "DsGetDcNameW" );
		FreeLibrary(hModule);
		if (test) return true;
	}
	return false;
}

bool CheckNetApiNT()
{
	HMODULE hModule = LoadLibrary("radmin32.dll");
	if (hModule)
	{
		FreeLibrary(hModule);
		return true;
	}
	return false;
}

int main(int argc, char* argv[])
{
	char pszBuffer[256];
	char pszBuffer2[256];
	char pszBuffer3[256];
	char pszBuffer4[256];
	int locdom;
	if (argc<5) 
	{
		printf("Enter user name : ");
		gets(pszBuffer);
		printf("\nEnter password : ");
		gets(pszBuffer2);
		printf("\n");
		printf("Enter group : ");
		gets(pszBuffer3);
		printf("\n");
		printf("loc=1 dom=3 local+domain=3 : ");
		gets(pszBuffer4);
		printf("\n");
	if (0==strcmp("", pszBuffer)) 
	{
		return 0;
	}
	if (0==strcmp("", pszBuffer2)) 
	{
		return 0;
	}
	if (0==strcmp("", pszBuffer3)) 
	{
		return 0;
	}
	if (0==strcmp("", pszBuffer4)) 
	{
		return 0;
	}
	}
	else
	{
		strcpy(pszBuffer,argv[1]);
		strcpy(pszBuffer2,argv[2]);
		strcpy(pszBuffer3,argv[3]);
		strcpy(pszBuffer4,argv[4]);
	}
	locdom=atoi(pszBuffer4);
	if (!CheckNetapi95() && !CheckNetApiNT())
	{
		printf("Netapi not found,radmin32.dll is missing \n");
	}

	///////////////////////////////////////
	////// BASIC LOCAL GROUPS
	BOOL returnvalue;
	{
	returnvalue=false;
	printf("\nTrying authlogonuser.dll \n");
		printf("This only works on XP> \n");
		printf("test is runnning as application and not a service \n");
		printf("------------------------ \n");
		printf("------------------------ \n");
		HMODULE hModule = LoadLibrary("authlogonuser.dll");
		if (hModule)
			{
				CheckUserGroupPassword = (CheckUserGroupPasswordFn) GetProcAddress( hModule, "CUGP" );
				HRESULT hr = CoInitialize(NULL);
				returnvalue=CheckUserGroupPassword(pszBuffer,pszBuffer2,"test",pszBuffer3,locdom);
				CoUninitialize();
				FreeLibrary(hModule);
			}
		else printf("authlogonuser.dll not found");
	if (returnvalue==1) printf("based on auth.dll user has access ");
	else printf("based on authlogonuser.dll user has NO access ");
	}
	if (returnvalue==1) printf("\n-------------------------\n");
	if (returnvalue==1) printf("For testing we cont, but access was already granted\n");
	if (returnvalue==1) printf("-------------------------\n");

	returnvalue=false;
	printf("\nTrying auth.dll \n");
		printf("------------------------ \n");
		printf("------------------------ \n");
		HMODULE hModule = LoadLibrary("auth.dll");
		if (hModule)
			{
				CheckUserGroupPassword = (CheckUserGroupPasswordFn) GetProcAddress( hModule, "CUGP" );
				HRESULT hr = CoInitialize(NULL);
				returnvalue=CheckUserGroupPassword(pszBuffer,pszBuffer2,"test",pszBuffer3,locdom);
				CoUninitialize();
				FreeLibrary(hModule);
			}
		else printf("auth.dll not found");
	if (returnvalue==1) printf("based on auth.dll user has access ");
	else printf("based on auth.dll user has NO access ");
	if (returnvalue==1) printf("\n-------------------------\n");
	if (returnvalue==1) printf("For testing we cont, but access was already granted\n");
	if (returnvalue==1) printf("-------------------------\n");
	returnvalue=false;
	if (CheckAD())
	{
		printf("\nTrying authaddll \n");
		printf("------------------------ \n");
		printf("------------------------ \n");
		HMODULE hModule = LoadLibrary("authad.dll");
		if (hModule)
			{
				CheckUserGroupPassword = (CheckUserGroupPasswordFn) GetProcAddress( hModule, "CUGP" );
				HRESULT hr = CoInitialize(NULL);
				returnvalue=CheckUserGroupPassword(pszBuffer,pszBuffer2,"test",pszBuffer3,locdom);
				CoUninitialize();
				FreeLibrary(hModule);
			}
		else printf("authad.dll not found");
		if (returnvalue==1) printf("based on authad.dll user has access ");
		else printf("based on authad.dll user has NO access ");

	}
	if (returnvalue==1) printf("\n-------------------------\n");
	if (returnvalue==1) printf("For testing we cont, but access was already granted\n");
	if (returnvalue==1) printf("-------------------------\n");
	if (locdom==2 || locdom==3)
	{
	returnvalue=false;
	OSVERSIONINFO VerInfo;
	VerInfo.dwOSVersionInfoSize = sizeof (OSVERSIONINFO);
	if (!GetVersionEx (&VerInfo))   // If this fails, something has gone wrong
	{
		  return FALSE;
	}
	if (VerInfo.dwPlatformId == VER_PLATFORM_WIN32_NT && VerInfo.dwMajorVersion == 4)
	{
		if (CheckAD() && CheckDsGetDcNameW())
		{
			printf("\nTrying ldapauthNT4 .dll \n");
		printf("------------------------ \n");
		printf("------------------------ \n");
		HMODULE hModule = LoadLibrary("ldapauthnt4.dll");
		if (hModule)
			{
				CheckUserGroupPassword = (CheckUserGroupPasswordFn) GetProcAddress( hModule, "CUGP" );
				HRESULT hr = CoInitialize(NULL);
				returnvalue=CheckUserGroupPassword(pszBuffer,pszBuffer2,"test",pszBuffer3,locdom);
				CoUninitialize();
				FreeLibrary(hModule);
			}
		else printf("ldapauthnt4.dll not found");
		if (returnvalue==1) printf("based on ldapauthnt4.dll user has access ");
		else printf("based on ldapauthnt4.dll user has NO access ");
		}

	}
	if (returnvalue==1) printf("\n-------------------------\n");
	if (returnvalue==1) printf("For testing we cont, but access was already granted\n");
	if (returnvalue==1) printf("-------------------------\n");
	returnvalue=false;
	if (VerInfo.dwPlatformId == VER_PLATFORM_WIN32_NT && VerInfo.dwMajorVersion >= 5)
	{
		if (CheckAD())
		{
			printf("\nTrying ldapauth .dll \n");
		printf("------------------------ \n");
		printf("------------------------ \n");
		HMODULE hModule = LoadLibrary("ldapauth.dll");
		if (hModule)
			{
				CheckUserGroupPassword = (CheckUserGroupPasswordFn) GetProcAddress( hModule, "CUGP" );
				HRESULT hr = CoInitialize(NULL);
				returnvalue=CheckUserGroupPassword(pszBuffer,pszBuffer2,"test",pszBuffer3,locdom);
				CoUninitialize();
				FreeLibrary(hModule);
			}
		else printf("ldapauth.dll not found");
		if (returnvalue==1) printf("based on ldapauth.dll user has access ");
		else printf("based on ldapauth.dll user has NO access ");
		}
	}
	}
	printf("Enter to quit ");
	gets(pszBuffer);
	return 0;
}