imcert.cpp

// imcert.cpp : This file contains the 'main' function. Program execution begins and ends there.
//

#include <iostream>
#include <vector>

#include <Windows.h>
#include <wtsapi32.h>
#include <iphlpapi.h>

using namespace std;

int main()
{
    //Find the process based on remote port, local port etc, we use the API GetExtendedTcpTable that the tool netstat used.
    vector<unsigned char> buffer;
    DWORD dwSize = sizeof(MIB_TCPTABLE_OWNER_PID);
    DWORD dwRetValue = 0;

    do {
        buffer.resize(dwSize, 0);
        dwRetValue = GetExtendedTcpTable(buffer.data(), &dwSize, TRUE, AF_INET, TCP_TABLE_OWNER_PID_ALL, 0);
    } while (dwRetValue == ERROR_INSUFFICIENT_BUFFER);
    if (dwRetValue == ERROR_SUCCESS)
    {
        PMIB_TCPTABLE_OWNER_PID ptTable = reinterpret_cast<PMIB_TCPTABLE_OWNER_PID>(buffer.data());
        cout << "Number of Entries: " << ptTable->dwNumEntries << endl << endl;
        /*
        for (DWORD i = 0; i < ptTable->dwNumEntries; i++) {
            DWORD pid = ptTable->table[i].dwOwningPid;
            cout << "PID: " << pid << endl;
 //           cout << "Name: " << processName(ptTable->table[i].dwOwningPid) << endl;
            cout << "State: " << ptTable->table[i].dwState << endl;
            cout << "Local Port: "
                << htons((unsigned short)ptTable->table[i].dwLocalPort)
                << endl;

            cout << "Remote Port: "
                << htons((unsigned short)ptTable->table[i].dwRemotePort)
                << endl;

            cout << endl;
        }
        */

    }


    DWORD dwProcessId, dwSessionId;
    dwProcessId = 28712;    //the one we are interested in, which is found from netstat result.

    if (ProcessIdToSessionId(dwProcessId,  &dwSessionId) == 0) {
        cout << "ProcessIdToSessionId failed with error = "  << GetLastError();
        return 50;
    }

    HANDLE hToken = NULL;

    // get the active console session ID of the logged on user
    //the calling application must be running within the context of the LocalSystem account and have the SE_TCB_NAME privilege.
    if (!WTSQueryUserToken(dwSessionId, &hToken))
    {
        cout << "WTSQueryUserToken failed with error = " << GetLastError();
        return 51;
    }

    HANDLE hDuplicated = NULL;

    BOOL bResult = DuplicateToken(hToken, SecurityImpersonation, &hDuplicated);
    CloseHandle(hToken);

    // duplicate the token
    if (!bResult)
    {
        cout << "DuplicateToken failed with error = " << GetLastError();
        return 52;
    }


    // impersonate the logged on user
    if (!ImpersonateLoggedOnUser(hDuplicated))
    {
        cout << "ImpersonateLoggedOnUser failed with error = " << GetLastError();
        return 53;
    }

    //open user cert store.
    // Open a system store, in this case, the My store.

    HCERTSTORE hSysStore = NULL;
    if (hSysStore = CertOpenStore(
        CERT_STORE_PROV_SYSTEM,          // The store provider type
        0,                               // The encoding type is
                                         // not needed
        NULL,                            // Use the default HCRYPTPROV
        CERT_SYSTEM_STORE_CURRENT_USER,  // Set the store location in a
                                         // registry location
        L"MY"                            // The store name as a Unicode 
                                         // string
    ))
    {
        printf("The current user store was opened successfully.\n");
        PCCERT_CONTEXT  pDesiredCert = NULL;

        if (pDesiredCert = CertFindCertificateInStore(
            hSysStore,
            PKCS_7_ASN_ENCODING | X509_ASN_ENCODING,           // Use X509_ASN_ENCODING.
            0,                          // No dwFlags needed. 
            CERT_FIND_SUBJECT_STR,      // Find a certificate with a
                                        // subject that matches the string
                                        // in the next parameter.
            L"nanoart",           // The Unicode string to be found
                                        // in a certificate's subject.
            NULL))                      // NULL for the first call to the
                                        // function. In all subsequent
                                        // calls, it is the last pointer
                                        // returned by the function.
        {
            printf("The desired certificate was found. \n");
        }
        else
        {
            printf("Could not find the desired certificate.\n");
        }


    }
    else
    {
        printf("An error occurred during creation "
            "of the system store!\n");
        cout << "CertOpenStore failed with error = " << GetLastError();
        return 54;
    }


    if (RevertToSelf())
    {
        //ShowErrorText("Impersonation ended successfully.", 0, true);
    }

    CloseHandle(hDuplicated);

    return 0;

}

// Run program: Ctrl + F5 or Debug > Start Without Debugging menu
// Debug program: F5 or Debug > Start Debugging menu

// Tips for Getting Started: 
//   1. Use the Solution Explorer window to add/manage files
//   2. Use the Team Explorer window to connect to source control
//   3. Use the Output window to see build output and other messages
//   4. Use the Error List window to view errors
//   5. Go to Project > Add New Item to create new code files, or Project > Add Existing Item to add existing code files to the project
//   6. In the future, to open this project again, go to File > Open > Project and select the .sln file