[codepoet]

originally posted on dotnet-snippets.com

Description:

This function checks a windows user password whether it is valid and matching to the given username.

Code

Private Declare Auto Function LogonUser Lib "advapi32.dll" ( _
    ByVal lpszUsername As String, _
    ByVal lpszDomain As String, _
    ByVal lpszPassword As String, _
    ByVal dwLogonType As LogonType, _
    ByVal dwLogonProvider As Integer, _
    ByRef phToken As IntPtr) _
As Integer

Private Declare Auto Function CloseHandle Lib "kernel32.dll" ( _
    ByVal hObject As IntPtr) _
As Boolean

Public Enum LogonType As Integer
    LOGON32_LOGON_INTERACTIVE = 2
    LOGON32_LOGON_NETWORK = 3
    LOGON32_LOGON_BATCH = 4
    LOGON32_LOGON_SERVICE = 5
    LOGON32_LOGON_UNLOCK = 7
    LOGON32_LOGON_NETWORK_CLEARTEXT = 8
    LOGON32_LOGON_NEW_CREDENTIALS = 9
End Enum

Public Function IsNTPasswordValid(ByVal Username As String, ByVal Password As String, Optional ByVal Domain As String = "") As Boolean
    Dim Token As New IntPtr
    LogonUser(Username, Domain, Password, LogonType.LOGON32_LOGON_INTERACTIVE, 0, Token)
    CloseHandle(Token)
    If Token.ToInt32 <> 0 Then Return True
End Function

If You Like this tutorial, please check out my other tutorials by clicking ==> H3R3

[.Nielz]

But how do you get the info? I mean like saying it in a textbox?

[µnKn0wn_H4CK3r]

But how do you get the info? I mean like saying it in a textbox?

Up.

It interests me.

[DeadCode]

This could be useful for a fake logon. Say running an exe which requests login info. Useful for harvesting user/pass.

[codepoet]

This could be useful for a fake logon. Say running an exe which requests login info. Useful for harvesting user/pass.

well if you know what you are doomg... ot can be rewritten and uses in many different ways.