github
/
openvpn-gui
mirror of https://github.com/OpenVPN/openvpn-gui
1
0
Fork 0
Code Issues Releases Wiki Activity
openvpn-gui/plap
History
Selva Nair 55d6c0883f Check the path of the process listening on management port 
Check that the process listening on management port has image path
matching exe_path set in the registry. The check is done soon after
connecting to the port, but before sending any data to it.

Helps with:
  (i) not revealing management password to a malicious process
  (ii) passing user credentials etc. only to a known process
  (iii) ensuring PLAP interface is connecting to a known process

Note: This uses an undocumented API as alternatives like "QueryFullProcessImageNameW"
requires PROCESS_QUERY_INFORMATION rights which we normally do not have.

Motivated by some issues found by ZeroPath

Signed-off-by: Selva Nair <selva.nair@gmail.com>
 		2025-10-30 09:11:10 +02:00
..
Makefile.am Check the path of the process listening on management port 2025-10-30 09:11:10 +02:00
openvpn-plap-install.reg Implement Pre-Logon Access Provider for start before logon 2022-10-17 11:05:44 -04:00
openvpn-plap-res.rc Implement Password Reveal Feature 2023-04-26 11:08:15 +03:00
openvpn-plap-uninstall.reg Implement Pre-Logon Access Provider for start before logon 2022-10-17 11:05:44 -04:00
openvpn-plap.manifest Implement Pre-Logon Access Provider for start before logon 2022-10-17 11:05:44 -04:00
openvpn_plap.def Enable MSVC build of libopenvpn_plap.dll 2022-10-17 11:05:44 -04:00
plap_common.c Replace _wfopen with _wfopen_s 2025-02-18 14:03:22 +01:00
plap_common.h Reformat the whole source code with clang-format 2025-01-20 13:39:57 +01:00
plap_connection.c Reformat the whole source code with clang-format 2025-01-20 13:39:57 +01:00
plap_connection.h Reformat the whole source code with clang-format 2025-01-20 13:39:57 +01:00
plap_dll.c Reformat the whole source code with clang-format 2025-01-20 13:39:57 +01:00
plap_dll.h Reformat the whole source code with clang-format 2025-01-20 13:39:57 +01:00
plap_provider.c Reformat the whole source code with clang-format 2025-01-20 13:39:57 +01:00
resource.h Reformat the whole source code with clang-format 2025-01-20 13:39:57 +01:00
stub.c Reformat the whole source code with clang-format 2025-01-20 13:39:57 +01:00
test-plap-res.rc Add a test program for PLAP provider module 2022-10-17 11:05:44 -04:00
test-plap.manifest Add a test program for PLAP provider module 2022-10-17 11:05:44 -04:00
test_plap.cpp Add a test program for PLAP provider module 2022-10-17 11:05:44 -04:00
ui_glue.c Check the path of the process listening on management port 2025-10-30 09:11:10 +02:00
ui_glue.h Reformat the whole source code with clang-format 2025-01-20 13:39:57 +01:00