Пользователи, пароли, защита информации

Code:

function GetUserFromWindows: string;

var

UserName : string;

UserNameLen : Dword;

begin

UserNameLen := 255;

SetLength(userName, UserNameLen);

if GetUserName(PChar(UserName), UserNameLen) then

   Result := Copy(UserName,1,UserNameLen - 1)

else

   Result := '';

end;

Code:

procedure TForm1.Button1Click(Sender: TObject);

const

TokenSize = 800; //  (SizeOf(Pointer)=4 *200)

var

hToken: THandle;

pTokenInfo: PTOKENPRIVILEGES;

ReturnLen: Cardinal;

i: Integer;

PrivName: PChar;

DisplayName: PChar;

NameSize: Cardinal;

DisplSize: Cardinal;

LangId: Cardinal;

begin

GetMem(pTokenInfo, TokenSize);

if not OpenProcessToken(GetCurrentProcess(), TOKEN_ADJUST_PRIVILEGES or TOKEN_QUERY,

   hToken) then ShowMessage('OpenProcessToken error');

if not GetTokenInformation(hToken, TokenPrivileges, pTokenInfo, TokenSize, ReturnLen) then

   ShowMessage('GetTokenInformation error');

GetMem(PrivName, 255);

GetMem(DisplayName, 255);

for i := 0 to pTokenInfo.PrivilegeCount - 1 do

begin

   DisplSize := 255;

   NameSize  := 255;

   LookupPrivilegeName(nil, pTokenInfo.Privileges[i].Luid, PrivName, Namesize);

   LookupPrivilegeDisplayName(nil, PrivName, DisplayName, DisplSize, LangId);

   ListBox1.Items.Add(PrivName +^I + DisplayName);

end;

FreeMem(PrivName);

FreeMem(DisplayName);

FreeMem(pTokenInfo);

end;

Code:

program getpass;

........

type

...

ListBox: TListBox;

procedure getpasswords;

.......

end;

const Count: Integer = 0;

function WNetEnumCachedPasswords(lp: lpStr; w: Word; b: Byte; PC: PChar; dw: DWord): Word; stdcall;

implementation

{$R *.DFM}

function WNetEnumCachedPasswords(lp: lpStr; w: Word; b: Byte; PC: PChar; dw: DWord): Word; external mpr name 'WNetEnumCachedPasswords';

type

PWinPassword = ^TWinPassword;

TWinPassword = record

  EntrySize: Word;

  ResourceSize: Word;

  PasswordSize: Word;

  EntryIndex: Byte;

  EntryType: Byte;

  PasswordC: Char;

end;

var

WinPassword: TWinPassword;

function AddPassword(WinPassword: PWinPassword; dw: DWord): LongBool; stdcall;

var

Password: String;

PC: Array[0..$FF] of Char;

begin

inc(Count);

Move(WinPassword.PasswordC, PC, WinPassword.ResourceSize);

PC[WinPassword.ResourceSize] := #0;

CharToOem(PC, PC);

Password := StrPas(PC);

Move(WinPassword.PasswordC, PC, WinPassword.PasswordSize + WinPassword.ResourceSize);

Move(PC[WinPassword.ResourceSize], PC, WinPassword.PasswordSize);

PC[WinPassword.PasswordSize] := #0;

CharToOem(PC, PC);

Password := Password + ': ' + StrPas(PC);

Form1.ListBox.Items.Add(Password);

Result := True;

end;

procedure tform1.getpasswords;

var error: string;

begin

if WNetEnumCachedPasswords(nil, 0, $FF, @AddPassword, 0) <> 0 then

   begin

     error := 'Can not load passwords: User is not loged on.';

   end

else if Count = 0 then

   error := 'No passwords found...'

end;

Code:

type

PTOKEN_GROUPS = TOKEN_GROUPS^;

function RunningAsAdministrator(): Boolean;

var

SystemSidAuthority: SID_IDENTIFIER_AUTHORITY = SECURITY_NT_AUTHORITY;

psidAdmin: PSID;

ptg: PTOKEN_GROUPS = nil;

htkThread: Integer; { HANDLE }

cbTokenGroups: Longint; { DWORD }

iGroup: Longint; { DWORD }

bAdmin: Boolean;

begin

Result := false;

if not OpenThreadToken(GetCurrentThread(), // get security token

   TOKEN_QUERY, FALSE, htkThread) then

   if GetLastError() = ERROR_NO_TOKEN then

   begin

     if not OpenProcessToken(GetCurrentProcess(),

       TOKEN_QUERY, htkThread) then

       Exit;

   end

   else

     Exit;

if GetTokenInformation(htkThread, // get #of groups

   TokenGroups, nil, 0, cbTokenGroups) then

   Exit;

if GetLastError() <> ERROR_INSUFFICIENT_BUFFER then

   Exit;

ptg := PTOKEN_GROUPS(getmem(cbTokenGroups));

if not Assigned(ptg) then

   Exit;

if not GetTokenInformation(htkThread, // get groups

   TokenGroups, ptg, cbTokenGroups, cbTokenGroups) then

   Exit;

if not AllocateAndInitializeSid(SystemSidAuthority,

   2, SECURITY_BUILTIN_DOMAIN_RID, DOMAIN_ALIAS_RID_ADMINS,

   0, 0, 0, 0, 0, 0, psidAdmin) then

   Exit;

iGroup := 0;

while iGroup < ptg^.GroupCount do // check administrator group

begin

   if EqualSid(ptg^.Groups[iGroup].Sid, psidAdmin) then

   begin

     Result := TRUE;

     break;

   end;

   Inc(iGroup);

end;

FreeSid(psidAdmin);

end;

Code:

procedure TForm1.Timer1Timer(Sender: TObject);

{©Drkb v.3}

var

Wnd : HWND;

lpClassName: array [0..$FF] of Char;

begin

Wnd := WindowFromPoint(Mouse.CursorPos);

GetClassName (Wnd, lpClassName, $FF);

if ((strpas(lpClassName) = 'TEdit') or (strpas(lpClassName) = 'EDIT')) then

PostMessage (Wnd, EM_SETPASSWORDCHAR, 0, 0);

end;

Code:

function OnSystemAccount(): Boolean;

const

cnMaxNameLen = 254;

var

sName: string;

dwNameLen: DWORD;

begin

dwNameLen := cnMaxNameLen - 1;

SetLength(sName, cnMaxNameLen);

GetUserName(PChar(sName), dwNameLen);

SetLength(sName, dwNameLen);

if UpperCase(Trim(sName)) = 'SYSTEM' then Result := True

else

   Result := False;

end;