├── SharpNoteRestore
├── App.config
├── Properties
│ └── AssemblyInfo.cs
├── SharpNoteRestore.csproj
└── Program.cs
├── README.md
├── SharpNoteRestore.sln
├── .gitattributes
└── .gitignore
/SharpNoteRestore/App.config:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # SharpNoteRestore
2 |
3 | # Further works
4 | * Can benefit an archiving function to store all of the files in a zip
5 | * Zips can be encrypted with user supplied or randomly generated passwords
6 | * Zips can be stored in a static location or user-suplied location
7 | * Anything else ??
8 |
--------------------------------------------------------------------------------
/SharpNoteRestore.sln:
--------------------------------------------------------------------------------
1 |
2 | Microsoft Visual Studio Solution File, Format Version 12.00
3 | # Visual Studio Version 17
4 | VisualStudioVersion = 17.7.34202.233
5 | MinimumVisualStudioVersion = 10.0.40219.1
6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "SharpNoteRestore", "SharpNoteRestore\SharpNoteRestore.csproj", "{6D0DD3AF-CA6B-426D-AF41-A7D4E712D7DD}"
7 | EndProject
8 | Global
9 | GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | Debug|Any CPU = Debug|Any CPU
11 | Release|Any CPU = Release|Any CPU
12 | EndGlobalSection
13 | GlobalSection(ProjectConfigurationPlatforms) = postSolution
14 | {6D0DD3AF-CA6B-426D-AF41-A7D4E712D7DD}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
15 | {6D0DD3AF-CA6B-426D-AF41-A7D4E712D7DD}.Debug|Any CPU.Build.0 = Debug|Any CPU
16 | {6D0DD3AF-CA6B-426D-AF41-A7D4E712D7DD}.Release|Any CPU.ActiveCfg = Release|Any CPU
17 | {6D0DD3AF-CA6B-426D-AF41-A7D4E712D7DD}.Release|Any CPU.Build.0 = Release|Any CPU
18 | EndGlobalSection
19 | GlobalSection(SolutionProperties) = preSolution
20 | HideSolutionNode = FALSE
21 | EndGlobalSection
22 | GlobalSection(ExtensibilityGlobals) = postSolution
23 | SolutionGuid = {1C4EEF44-E7C3-4E93-B306-F3D9F6BFC3DD}
24 | EndGlobalSection
25 | EndGlobal
26 |
--------------------------------------------------------------------------------
/SharpNoteRestore/Properties/AssemblyInfo.cs:
--------------------------------------------------------------------------------
1 | using System.Reflection;
2 | using System.Runtime.CompilerServices;
3 | using System.Runtime.InteropServices;
4 |
5 | // General Information about an assembly is controlled through the following
6 | // set of attributes. Change these attribute values to modify the information
7 | // associated with an assembly.
8 | [assembly: AssemblyTitle("SharpNoteRestore")]
9 | [assembly: AssemblyDescription("")]
10 | [assembly: AssemblyConfiguration("")]
11 | [assembly: AssemblyCompany("")]
12 | [assembly: AssemblyProduct("SharpNoteRestore")]
13 | [assembly: AssemblyCopyright("Copyright © 2024")]
14 | [assembly: AssemblyTrademark("")]
15 | [assembly: AssemblyCulture("")]
16 |
17 | // Setting ComVisible to false makes the types in this assembly not visible
18 | // to COM components. If you need to access a type in this assembly from
19 | // COM, set the ComVisible attribute to true on that type.
20 | [assembly: ComVisible(false)]
21 |
22 | // The following GUID is for the ID of the typelib if this project is exposed to COM
23 | [assembly: Guid("6d0dd3af-ca6b-426d-af41-a7d4e712d7dd")]
24 |
25 | // Version information for an assembly consists of the following four values:
26 | //
27 | // Major Version
28 | // Minor Version
29 | // Build Number
30 | // Revision
31 | //
32 | // You can specify all the values or you can default the Build and Revision Numbers
33 | // by using the '*' as shown below:
34 | // [assembly: AssemblyVersion("1.0.*")]
35 | [assembly: AssemblyVersion("1.0.0.0")]
36 | [assembly: AssemblyFileVersion("1.0.0.0")]
37 |
--------------------------------------------------------------------------------
/SharpNoteRestore/SharpNoteRestore.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 | Debug
6 | AnyCPU
7 | {6D0DD3AF-CA6B-426D-AF41-A7D4E712D7DD}
8 | Exe
9 | SharpNoteRestore
10 | SharpNoteRestore
11 | v4.8
12 | 512
13 | true
14 | true
15 |
16 |
17 | AnyCPU
18 | true
19 | full
20 | false
21 | bin\Debug\
22 | DEBUG;TRACE
23 | prompt
24 | 4
25 |
26 |
27 | AnyCPU
28 | pdbonly
29 | true
30 | bin\Release\
31 | TRACE
32 | prompt
33 | 4
34 |
35 |
36 |
37 |
38 |
39 |
40 |
41 |
42 |
43 |
44 |
45 |
46 |
47 |
48 |
49 |
50 |
51 |
52 |
53 |
--------------------------------------------------------------------------------
/.gitattributes:
--------------------------------------------------------------------------------
1 | ###############################################################################
2 | # Set default behavior to automatically normalize line endings.
3 | ###############################################################################
4 | * text=auto
5 |
6 | ###############################################################################
7 | # Set default behavior for command prompt diff.
8 | #
9 | # This is need for earlier builds of msysgit that does not have it on by
10 | # default for csharp files.
11 | # Note: This is only used by command line
12 | ###############################################################################
13 | #*.cs diff=csharp
14 |
15 | ###############################################################################
16 | # Set the merge driver for project and solution files
17 | #
18 | # Merging from the command prompt will add diff markers to the files if there
19 | # are conflicts (Merging from VS is not affected by the settings below, in VS
20 | # the diff markers are never inserted). Diff markers may cause the following
21 | # file extensions to fail to load in VS. An alternative would be to treat
22 | # these files as binary and thus will always conflict and require user
23 | # intervention with every merge. To do so, just uncomment the entries below
24 | ###############################################################################
25 | #*.sln merge=binary
26 | #*.csproj merge=binary
27 | #*.vbproj merge=binary
28 | #*.vcxproj merge=binary
29 | #*.vcproj merge=binary
30 | #*.dbproj merge=binary
31 | #*.fsproj merge=binary
32 | #*.lsproj merge=binary
33 | #*.wixproj merge=binary
34 | #*.modelproj merge=binary
35 | #*.sqlproj merge=binary
36 | #*.wwaproj merge=binary
37 |
38 | ###############################################################################
39 | # behavior for image files
40 | #
41 | # image files are treated as binary by default.
42 | ###############################################################################
43 | #*.jpg binary
44 | #*.png binary
45 | #*.gif binary
46 |
47 | ###############################################################################
48 | # diff behavior for common document formats
49 | #
50 | # Convert binary document formats to text before diffing them. This feature
51 | # is only available from the command line. Turn it on by uncommenting the
52 | # entries below.
53 | ###############################################################################
54 | #*.doc diff=astextplain
55 | #*.DOC diff=astextplain
56 | #*.docx diff=astextplain
57 | #*.DOCX diff=astextplain
58 | #*.dot diff=astextplain
59 | #*.DOT diff=astextplain
60 | #*.pdf diff=astextplain
61 | #*.PDF diff=astextplain
62 | #*.rtf diff=astextplain
63 | #*.RTF diff=astextplain
64 |
--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | ## Ignore Visual Studio temporary files, build results, and
2 | ## files generated by popular Visual Studio add-ons.
3 | ##
4 | ## Get latest from https://github.com/github/gitignore/blob/master/VisualStudio.gitignore
5 |
6 | # User-specific files
7 | *.rsuser
8 | *.suo
9 | *.user
10 | *.userosscache
11 | *.sln.docstates
12 |
13 | # User-specific files (MonoDevelop/Xamarin Studio)
14 | *.userprefs
15 |
16 | # Mono auto generated files
17 | mono_crash.*
18 |
19 | # Build results
20 | [Dd]ebug/
21 | [Dd]ebugPublic/
22 | [Rr]elease/
23 | [Rr]eleases/
24 | x64/
25 | x86/
26 | [Ww][Ii][Nn]32/
27 | [Aa][Rr][Mm]/
28 | [Aa][Rr][Mm]64/
29 | bld/
30 | [Bb]in/
31 | [Oo]bj/
32 | [Oo]ut/
33 | [Ll]og/
34 | [Ll]ogs/
35 |
36 | # Visual Studio 2015/2017 cache/options directory
37 | .vs/
38 | # Uncomment if you have tasks that create the project's static files in wwwroot
39 | #wwwroot/
40 |
41 | # Visual Studio 2017 auto generated files
42 | Generated\ Files/
43 |
44 | # MSTest test Results
45 | [Tt]est[Rr]esult*/
46 | [Bb]uild[Ll]og.*
47 |
48 | # NUnit
49 | *.VisualState.xml
50 | TestResult.xml
51 | nunit-*.xml
52 |
53 | # Build Results of an ATL Project
54 | [Dd]ebugPS/
55 | [Rr]eleasePS/
56 | dlldata.c
57 |
58 | # Benchmark Results
59 | BenchmarkDotNet.Artifacts/
60 |
61 | # .NET Core
62 | project.lock.json
63 | project.fragment.lock.json
64 | artifacts/
65 |
66 | # ASP.NET Scaffolding
67 | ScaffoldingReadMe.txt
68 |
69 | # StyleCop
70 | StyleCopReport.xml
71 |
72 | # Files built by Visual Studio
73 | *_i.c
74 | *_p.c
75 | *_h.h
76 | *.ilk
77 | *.meta
78 | *.obj
79 | *.iobj
80 | *.pch
81 | *.pdb
82 | *.ipdb
83 | *.pgc
84 | *.pgd
85 | *.rsp
86 | *.sbr
87 | *.tlb
88 | *.tli
89 | *.tlh
90 | *.tmp
91 | *.tmp_proj
92 | *_wpftmp.csproj
93 | *.log
94 | *.vspscc
95 | *.vssscc
96 | .builds
97 | *.pidb
98 | *.svclog
99 | *.scc
100 |
101 | # Chutzpah Test files
102 | _Chutzpah*
103 |
104 | # Visual C++ cache files
105 | ipch/
106 | *.aps
107 | *.ncb
108 | *.opendb
109 | *.opensdf
110 | *.sdf
111 | *.cachefile
112 | *.VC.db
113 | *.VC.VC.opendb
114 |
115 | # Visual Studio profiler
116 | *.psess
117 | *.vsp
118 | *.vspx
119 | *.sap
120 |
121 | # Visual Studio Trace Files
122 | *.e2e
123 |
124 | # TFS 2012 Local Workspace
125 | $tf/
126 |
127 | # Guidance Automation Toolkit
128 | *.gpState
129 |
130 | # ReSharper is a .NET coding add-in
131 | _ReSharper*/
132 | *.[Rr]e[Ss]harper
133 | *.DotSettings.user
134 |
135 | # TeamCity is a build add-in
136 | _TeamCity*
137 |
138 | # DotCover is a Code Coverage Tool
139 | *.dotCover
140 |
141 | # AxoCover is a Code Coverage Tool
142 | .axoCover/*
143 | !.axoCover/settings.json
144 |
145 | # Coverlet is a free, cross platform Code Coverage Tool
146 | coverage*.json
147 | coverage*.xml
148 | coverage*.info
149 |
150 | # Visual Studio code coverage results
151 | *.coverage
152 | *.coveragexml
153 |
154 | # NCrunch
155 | _NCrunch_*
156 | .*crunch*.local.xml
157 | nCrunchTemp_*
158 |
159 | # MightyMoose
160 | *.mm.*
161 | AutoTest.Net/
162 |
163 | # Web workbench (sass)
164 | .sass-cache/
165 |
166 | # Installshield output folder
167 | [Ee]xpress/
168 |
169 | # DocProject is a documentation generator add-in
170 | DocProject/buildhelp/
171 | DocProject/Help/*.HxT
172 | DocProject/Help/*.HxC
173 | DocProject/Help/*.hhc
174 | DocProject/Help/*.hhk
175 | DocProject/Help/*.hhp
176 | DocProject/Help/Html2
177 | DocProject/Help/html
178 |
179 | # Click-Once directory
180 | publish/
181 |
182 | # Publish Web Output
183 | *.[Pp]ublish.xml
184 | *.azurePubxml
185 | # Note: Comment the next line if you want to checkin your web deploy settings,
186 | # but database connection strings (with potential passwords) will be unencrypted
187 | *.pubxml
188 | *.publishproj
189 |
190 | # Microsoft Azure Web App publish settings. Comment the next line if you want to
191 | # checkin your Azure Web App publish settings, but sensitive information contained
192 | # in these scripts will be unencrypted
193 | PublishScripts/
194 |
195 | # NuGet Packages
196 | *.nupkg
197 | # NuGet Symbol Packages
198 | *.snupkg
199 | # The packages folder can be ignored because of Package Restore
200 | **/[Pp]ackages/*
201 | # except build/, which is used as an MSBuild target.
202 | !**/[Pp]ackages/build/
203 | # Uncomment if necessary however generally it will be regenerated when needed
204 | #!**/[Pp]ackages/repositories.config
205 | # NuGet v3's project.json files produces more ignorable files
206 | *.nuget.props
207 | *.nuget.targets
208 |
209 | # Microsoft Azure Build Output
210 | csx/
211 | *.build.csdef
212 |
213 | # Microsoft Azure Emulator
214 | ecf/
215 | rcf/
216 |
217 | # Windows Store app package directories and files
218 | AppPackages/
219 | BundleArtifacts/
220 | Package.StoreAssociation.xml
221 | _pkginfo.txt
222 | *.appx
223 | *.appxbundle
224 | *.appxupload
225 |
226 | # Visual Studio cache files
227 | # files ending in .cache can be ignored
228 | *.[Cc]ache
229 | # but keep track of directories ending in .cache
230 | !?*.[Cc]ache/
231 |
232 | # Others
233 | ClientBin/
234 | ~$*
235 | *~
236 | *.dbmdl
237 | *.dbproj.schemaview
238 | *.jfm
239 | *.pfx
240 | *.publishsettings
241 | orleans.codegen.cs
242 |
243 | # Including strong name files can present a security risk
244 | # (https://github.com/github/gitignore/pull/2483#issue-259490424)
245 | #*.snk
246 |
247 | # Since there are multiple workflows, uncomment next line to ignore bower_components
248 | # (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
249 | #bower_components/
250 |
251 | # RIA/Silverlight projects
252 | Generated_Code/
253 |
254 | # Backup & report files from converting an old project file
255 | # to a newer Visual Studio version. Backup files are not needed,
256 | # because we have git ;-)
257 | _UpgradeReport_Files/
258 | Backup*/
259 | UpgradeLog*.XML
260 | UpgradeLog*.htm
261 | ServiceFabricBackup/
262 | *.rptproj.bak
263 |
264 | # SQL Server files
265 | *.mdf
266 | *.ldf
267 | *.ndf
268 |
269 | # Business Intelligence projects
270 | *.rdl.data
271 | *.bim.layout
272 | *.bim_*.settings
273 | *.rptproj.rsuser
274 | *- [Bb]ackup.rdl
275 | *- [Bb]ackup ([0-9]).rdl
276 | *- [Bb]ackup ([0-9][0-9]).rdl
277 |
278 | # Microsoft Fakes
279 | FakesAssemblies/
280 |
281 | # GhostDoc plugin setting file
282 | *.GhostDoc.xml
283 |
284 | # Node.js Tools for Visual Studio
285 | .ntvs_analysis.dat
286 | node_modules/
287 |
288 | # Visual Studio 6 build log
289 | *.plg
290 |
291 | # Visual Studio 6 workspace options file
292 | *.opt
293 |
294 | # Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
295 | *.vbw
296 |
297 | # Visual Studio LightSwitch build output
298 | **/*.HTMLClient/GeneratedArtifacts
299 | **/*.DesktopClient/GeneratedArtifacts
300 | **/*.DesktopClient/ModelManifest.xml
301 | **/*.Server/GeneratedArtifacts
302 | **/*.Server/ModelManifest.xml
303 | _Pvt_Extensions
304 |
305 | # Paket dependency manager
306 | .paket/paket.exe
307 | paket-files/
308 |
309 | # FAKE - F# Make
310 | .fake/
311 |
312 | # CodeRush personal settings
313 | .cr/personal
314 |
315 | # Python Tools for Visual Studio (PTVS)
316 | __pycache__/
317 | *.pyc
318 |
319 | # Cake - Uncomment if you are using it
320 | # tools/**
321 | # !tools/packages.config
322 |
323 | # Tabs Studio
324 | *.tss
325 |
326 | # Telerik's JustMock configuration file
327 | *.jmconfig
328 |
329 | # BizTalk build output
330 | *.btp.cs
331 | *.btm.cs
332 | *.odx.cs
333 | *.xsd.cs
334 |
335 | # OpenCover UI analysis results
336 | OpenCover/
337 |
338 | # Azure Stream Analytics local run output
339 | ASALocalRun/
340 |
341 | # MSBuild Binary and Structured Log
342 | *.binlog
343 |
344 | # NVidia Nsight GPU debugger configuration file
345 | *.nvuser
346 |
347 | # MFractors (Xamarin productivity tool) working folder
348 | .mfractor/
349 |
350 | # Local History for Visual Studio
351 | .localhistory/
352 |
353 | # BeatPulse healthcheck temp database
354 | healthchecksdb
355 |
356 | # Backup folder for Package Reference Convert tool in Visual Studio 2017
357 | MigrationBackup/
358 |
359 | # Ionide (cross platform F# VS Code tools) working folder
360 | .ionide/
361 |
362 | # Fody - auto-generated XML schema
363 | FodyWeavers.xsd
--------------------------------------------------------------------------------
/SharpNoteRestore/Program.cs:
--------------------------------------------------------------------------------
1 | using System;
2 | using System.Collections.Generic;
3 | using System.IO;
4 | using System.Runtime.InteropServices;
5 | using System.Security.Principal;
6 | using System.Text;
7 |
8 | namespace SharpNoteRestore
9 | {
10 | internal class Program
11 | {
12 | static void Main(string[] args)
13 | {
14 | /*
15 | if (args == null)
16 | {
17 | throw new ArgumentNullException("args");
18 | }
19 | */
20 |
21 | //string[] arg = new string[] { args[0] };
22 |
23 | // Array where all files will be stored for the Zip
24 | List backup_files = new List();
25 |
26 | string strCurrentUsr = Environment.UserName; // grabs only the username without user location
27 |
28 | StringBuilder strNotepadPathCurrentUsr = new StringBuilder();
29 | strNotepadPathCurrentUsr.AppendFormat("C:\\Users\\{0}\\AppData\\Roaming\\Notepad++\\backup", strCurrentUsr);
30 |
31 | Console.WriteLine("[+] Current User: \n\t- {0}", strCurrentUsr);
32 | Console.WriteLine("[+] Current User's Notepad++ Path: \n\t - {0}", strNotepadPathCurrentUsr.ToString());
33 |
34 | // Get the temporary/backup notepad++ files for the current user
35 | string[] CurrentUserBackupFiles = Notepads.RestoreNotepadPP(strNotepadPathCurrentUsr.ToString());
36 |
37 | Console.WriteLine("- NAME - \t\t\t\t\t\t\t\t\t\t - SIZE -");
38 | foreach (var file in CurrentUserBackupFiles)
39 | {
40 | FileInfo fileInfo = new FileInfo(file);
41 | long szInfo = fileInfo.Length;
42 |
43 | Console.WriteLine($" {file} |\t\t {szInfo}");
44 |
45 |
46 | // Add the files to the backup files array
47 | backup_files.Add(file);
48 | }
49 |
50 | Console.WriteLine("------------------------------------------");
51 |
52 | // Check current process privileges (is it an elevated process ?)
53 | bool userPrivs = Privileges.CheckPrivs();
54 | if (userPrivs == true)
55 | {
56 | Console.WriteLine("[+] Running with elevated privileges !\n\t ++ Checking other users for notepad++ backups/temp files");
57 |
58 | // Get a list of all other users with home folders
59 | string[] userFolders = Privileges.GetAllUsersWithFolders();
60 |
61 | Console.WriteLine("[*] Folders of additional users: {0}", userFolders.Length);
62 | Console.WriteLine("------------------------------------------");
63 |
64 | // Loop through each identified user's folder to get their notepad backup files
65 | foreach (var folder in userFolders)
66 | {
67 | StringBuilder strNotepadPaths = new StringBuilder();
68 | strNotepadPaths.AppendFormat("{0}\\AppData\\Roaming\\Notepad++\\backup", folder);
69 |
70 | Console.WriteLine(strNotepadPaths);
71 |
72 | // Get the temporary/backup notepad++ files for the current user
73 | string[] OtherUsersBackupFiles = Notepads.RestoreNotepadPP(strNotepadPaths.ToString());
74 | foreach (var file in OtherUsersBackupFiles)
75 | {
76 | Console.WriteLine(file);
77 | // Add the entries to the array of backup files
78 | backup_files.Add(file);
79 | }
80 | Console.WriteLine("------------------------------------------");
81 | }
82 | }
83 | else
84 | {
85 | Console.WriteLine("[*] Running with normal privileges !\n\t** Will not check any other users due to lack of permissions");
86 | }
87 |
88 | Console.WriteLine("[!] Total number of entries collected: {0}", backup_files.ToArray().Length);
89 |
90 | return;
91 | }
92 | }
93 |
94 | internal class Notepads
95 | {
96 | public static string[] RestoreNotepadPP(string path)
97 | {
98 | if (path == null)
99 | {
100 | throw new ArgumentNullException("[!] Shit happend !\n");
101 | }
102 |
103 | if (Directory.Exists(path) == false)
104 | {
105 | throw new Exception("[-] Folder doesn't exist !");
106 | }
107 |
108 | List AllBackupFiles = new List();
109 |
110 | string[] files = Directory.GetFiles(path);
111 |
112 | if (files.Length != 0)
113 | {
114 | Console.WriteLine("[*] Found files: {0}", files.Length);
115 | Console.WriteLine("------------------------------------------");
116 |
117 | for (int i = 0; i < files.Length; i++)
118 | {
119 | AllBackupFiles.Add(files[i]);
120 | }
121 | } else
122 | {
123 | Console.WriteLine("[-] No files exist in the backup directory !");
124 | //throw new Exception("- No files exist in the backup directory !");
125 | }
126 |
127 | return AllBackupFiles.ToArray();
128 | }
129 | }
130 |
131 | internal class Privileges
132 | {
133 | public static bool CheckPrivs()
134 | {
135 | bool ret = false;
136 |
137 | var identity = WindowsIdentity.GetCurrent();
138 | if (identity == null) throw new InvalidOperationException("[-] Couldn't get the current user identity");
139 | var principal = new WindowsPrincipal(identity);
140 |
141 | // Check if this user has the Administrator role. If they do, return immediately.
142 | // If UAC is on, and the process is not elevated, then this will actually return false.
143 | if (principal.IsInRole(WindowsBuiltInRole.Administrator))
144 | {
145 | ret = true;
146 | return ret;
147 | }
148 |
149 | // If we're not running in Vista onwards, we don't have to worry about checking for UAC.
150 | if (Environment.OSVersion.Platform != PlatformID.Win32NT || Environment.OSVersion.Version.Major < 6)
151 | {
152 | // Operating system does not support UAC; skipping elevation check.
153 | return ret;
154 | }
155 |
156 | int tokenInfLength = Marshal.SizeOf(typeof(int));
157 | IntPtr tokenInformation = Marshal.AllocHGlobal(tokenInfLength);
158 |
159 | try
160 | {
161 | var token = identity.Token;
162 | var result = GetTokenInformation(token, TokenInformationClass.TokenElevationType, tokenInformation, tokenInfLength, out tokenInfLength);
163 |
164 | if (!result)
165 | {
166 | var exception = Marshal.GetExceptionForHR(Marshal.GetHRForLastWin32Error());
167 | throw new InvalidOperationException("[-] Couldn't get token information", exception);
168 | }
169 |
170 | var elevationType = (TokenElevationType)Marshal.ReadInt32(tokenInformation);
171 |
172 | switch (elevationType)
173 | {
174 | case TokenElevationType.TokenElevationTypeDefault:
175 | // TokenElevationTypeDefault - User is not using a split token, so they cannot elevate.
176 | return ret;
177 | case TokenElevationType.TokenElevationTypeFull:
178 | // TokenElevationTypeFull - User has a split token, and the process is running elevated. Assuming they're an administrator.
179 | ret = true;
180 | return ret;
181 | case TokenElevationType.TokenElevationTypeLimited:
182 | // TokenElevationTypeLimited - User has a split token, but the process is not running elevated. Assuming they're an administrator.
183 | ret = true;
184 | return ret;
185 | default:
186 | // Unknown token elevation type.
187 | return false;
188 | }
189 | }
190 | finally
191 | {
192 | if (tokenInformation != IntPtr.Zero)
193 | {
194 | Marshal.FreeHGlobal(tokenInformation);
195 | }
196 | }
197 | }
198 |
199 | public static string[] GetAllUsersWithFolders()
200 | {
201 | List UsersWithFolders = new List();
202 |
203 | string usersDirPath = "C:\\Users";
204 |
205 | string[] directories = Directory.GetDirectories(usersDirPath);
206 |
207 | foreach (var name in directories)
208 | {
209 | if (
210 | !name.Contains("All Users") &
211 | !name.Contains("Default") &
212 | !name.Contains("Default User") &
213 | !name.Contains("Public") &
214 | !name.Contains(Environment.UserName)
215 | )
216 |
217 | UsersWithFolders.Add(name);
218 | }
219 |
220 | string[] usersDirArray = UsersWithFolders.ToArray();
221 |
222 | return usersDirArray;
223 | }
224 |
225 | [DllImport("advapi32.dll", SetLastError = true)]
226 | static extern bool GetTokenInformation(IntPtr tokenHandle, TokenInformationClass tokenInformationClass, IntPtr tokenInformation, int tokenInformationLength, out int returnLength);
227 |
228 | enum TokenInformationClass
229 | {
230 | TokenUser = 1,
231 | TokenGroups,
232 | TokenPrivileges,
233 | TokenOwner,
234 | TokenPrimaryGroup,
235 | TokenDefaultDacl,
236 | TokenSource,
237 | TokenType,
238 | TokenImpersonationLevel,
239 | TokenStatistics,
240 | TokenRestrictedSids,
241 | TokenSessionId,
242 | TokenGroupsAndPrivileges,
243 | TokenSessionReference,
244 | TokenSandBoxInert,
245 | TokenAuditPolicy,
246 | TokenOrigin,
247 | TokenElevationType,
248 | TokenLinkedToken,
249 | TokenElevation,
250 | TokenHasRestrictions,
251 | TokenAccessInformation,
252 | TokenVirtualizationAllowed,
253 | TokenVirtualizationEnabled,
254 | TokenIntegrityLevel,
255 | TokenUiAccess,
256 | TokenMandatoryPolicy,
257 | TokenLogonSid,
258 | MaxTokenInfoClass
259 | }
260 |
261 | enum TokenElevationType
262 | {
263 | TokenElevationTypeDefault = 1,
264 | TokenElevationTypeFull,
265 | TokenElevationTypeLimited
266 | }
267 | }
268 | }
269 |
--------------------------------------------------------------------------------