mirror of
https://github.com/mirror/processhacker
synced 2026-06-08 16:03:24 +00:00
wj32
15656c9e3d
* memory list is much, much faster now git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1120 21ef857c-d57f-4fe0-8362-d861dc6d29cd
361 lines
14 KiB
C#
361 lines
14 KiB
C#
/*
|
|
* Process Hacker -
|
|
* token properties viewer
|
|
*
|
|
* Copyright (C) 2008-2009 wj32
|
|
*
|
|
* This file is part of Process Hacker.
|
|
*
|
|
* Process Hacker is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Process Hacker is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with Process Hacker. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
using System;
|
|
using System.Drawing;
|
|
using System.Windows.Forms;
|
|
using ProcessHacker.Native;
|
|
using ProcessHacker.Native.Api;
|
|
using ProcessHacker.Native.Objects;
|
|
using ProcessHacker.Native.Security;
|
|
using ProcessHacker.UI;
|
|
|
|
namespace ProcessHacker.Components
|
|
{
|
|
public partial class TokenProperties : UserControl
|
|
{
|
|
private IWithToken _object;
|
|
private TokenGroupsList _groups;
|
|
|
|
public TokenProperties(IWithToken obj)
|
|
{
|
|
InitializeComponent();
|
|
|
|
_object = obj;
|
|
|
|
listPrivileges.SetDoubleBuffered(true);
|
|
listPrivileges.ListViewItemSorter = new SortedListViewComparer(listPrivileges);
|
|
GenericViewMenu.AddMenuItems(copyMenuItem.MenuItems, listPrivileges, null);
|
|
listPrivileges.ContextMenu = menuPrivileges;
|
|
|
|
_object = obj;
|
|
|
|
try
|
|
{
|
|
using (TokenHandle thandle = _object.GetToken(TokenAccess.Query))
|
|
{
|
|
try
|
|
{
|
|
textUser.Text = thandle.GetUser().GetName(true);
|
|
textUserSID.Text = thandle.GetUser().GetStringSID();
|
|
textOwner.Text = thandle.GetOwner().GetName(true);
|
|
textPrimaryGroup.Text = thandle.GetPrimaryGroup().GetName(true);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
textUser.Text = "(" + ex.Message + ")";
|
|
}
|
|
|
|
try
|
|
{
|
|
textSessionID.Text = thandle.GetSessionId().ToString();
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
textSessionID.Text = "(" + ex.Message + ")";
|
|
}
|
|
|
|
try
|
|
{
|
|
var type = thandle.GetElevationType();
|
|
|
|
if (type == TokenElevationType.Default)
|
|
textElevated.Text = "N/A";
|
|
else if (type == TokenElevationType.Full)
|
|
textElevated.Text = "True";
|
|
else if (type == TokenElevationType.Limited)
|
|
textElevated.Text = "False";
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
textElevated.Text = "(" + ex.Message + ")";
|
|
}
|
|
|
|
try
|
|
{
|
|
TokenWithLinkedToken tokWLT = new TokenWithLinkedToken(thandle);
|
|
|
|
tokWLT.GetToken().Dispose();
|
|
}
|
|
catch
|
|
{
|
|
buttonLinkedToken.Visible = false;
|
|
}
|
|
|
|
try
|
|
{
|
|
bool virtAllowed = thandle.IsVirtualizationAllowed();
|
|
bool virtEnabled = thandle.IsVirtualizationEnabled();
|
|
|
|
if (virtEnabled)
|
|
textVirtualized.Text = "Enabled";
|
|
else if (virtAllowed)
|
|
textVirtualized.Text = "Disabled";
|
|
else
|
|
textVirtualized.Text = "Not Allowed";
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
textVirtualized.Text = "(" + ex.Message + ")";
|
|
}
|
|
|
|
try
|
|
{
|
|
using (TokenHandle tokenSource = _object.GetToken(TokenAccess.QuerySource))
|
|
{
|
|
var source = tokenSource.GetSource();
|
|
|
|
textSourceName.Text = source.SourceName.TrimEnd('\0', '\r', '\n', ' ');
|
|
|
|
long luid = (source.SourceIdentifier.HighPart << 32) | source.SourceIdentifier.LowPart;
|
|
|
|
textSourceLUID.Text = "0x" + luid.ToString("x");
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
textSourceName.Text = "(" + ex.Message + ")";
|
|
}
|
|
|
|
try
|
|
{
|
|
TokenHandle.TokenGroupsData groups = thandle.GetGroups();
|
|
_groups = new TokenGroupsList(groups);
|
|
|
|
_groups.Dock = DockStyle.Fill;
|
|
tabGroups.Controls.Add(_groups);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
tabGroups.Text = "(" + ex.Message + ")";
|
|
}
|
|
|
|
try
|
|
{
|
|
var privileges = thandle.GetPrivileges();
|
|
|
|
for (int i = 0; i < privileges.PrivilegeCount; i++)
|
|
{
|
|
string name = Windows.GetPrivilegeName(privileges.Privileges[i].Luid);
|
|
ListViewItem item = listPrivileges.Items.Add(name.ToLower(), name, 0);
|
|
|
|
item.BackColor = GetAttributeColor(privileges.Privileges[i].Attributes);
|
|
item.SubItems.Add(new ListViewItem.ListViewSubItem(item,
|
|
GetAttributeString(privileges.Privileges[i].Attributes)));
|
|
item.SubItems.Add(new ListViewItem.ListViewSubItem(item, Windows.GetPrivilegeDisplayName(name)));
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
tabPrivileges.Text = "(" + ex.Message + ")";
|
|
}
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
tabControl.Visible = false;
|
|
|
|
Label errorMessage = new Label();
|
|
|
|
errorMessage.Text = ex.Message;
|
|
|
|
this.Padding = new Padding(15, 10, 0, 0);
|
|
this.Controls.Add(errorMessage);
|
|
}
|
|
|
|
if (!OSVersion.HasUac)
|
|
{
|
|
labelElevated.Enabled = false;
|
|
textElevated.Enabled = false;
|
|
textElevated.Text = "";
|
|
labelVirtualization.Enabled = false;
|
|
textVirtualized.Enabled = false;
|
|
textVirtualized.Text = "";
|
|
}
|
|
|
|
if (tabControl.TabPages[Properties.Settings.Default.TokenWindowTab] != null)
|
|
tabControl.SelectedTab = tabControl.TabPages[Properties.Settings.Default.TokenWindowTab];
|
|
|
|
ColumnSettings.LoadSettings(Properties.Settings.Default.PrivilegeListColumns, listPrivileges);
|
|
listPrivileges.KeyDown +=
|
|
(sender, e) =>
|
|
{
|
|
if (e.Control && e.KeyCode == Keys.A) Misc.SelectAll(listPrivileges.Items);
|
|
if (e.Control && e.KeyCode == Keys.C) GenericViewMenu.ListViewCopy(listPrivileges, -1);
|
|
};
|
|
}
|
|
|
|
public IWithToken Object
|
|
{
|
|
get { return _object; }
|
|
}
|
|
|
|
public void SaveSettings()
|
|
{
|
|
if (_groups != null)
|
|
_groups.SaveSettings();
|
|
|
|
Properties.Settings.Default.TokenWindowTab = tabControl.SelectedTab.Name;
|
|
Properties.Settings.Default.PrivilegeListColumns = ColumnSettings.SaveSettings(listPrivileges);
|
|
}
|
|
|
|
private string GetAttributeString(SePrivilegeAttributes Attributes)
|
|
{
|
|
if ((Attributes & SePrivilegeAttributes.EnabledByDefault) != 0)
|
|
return "Default Enabled";
|
|
else if ((Attributes & SePrivilegeAttributes.Enabled) != 0)
|
|
return "Enabled";
|
|
else if (Attributes == SePrivilegeAttributes.Disabled)
|
|
return "Disabled";
|
|
else
|
|
return "Unknown";
|
|
}
|
|
|
|
private Color GetAttributeColor(SePrivilegeAttributes Attributes)
|
|
{
|
|
if ((Attributes & SePrivilegeAttributes.EnabledByDefault) != 0)
|
|
return Color.FromArgb(0xc0f0c0);
|
|
else if ((Attributes & SePrivilegeAttributes.Enabled) != 0)
|
|
return Color.FromArgb(0xe0f0e0);
|
|
else if (Attributes == SePrivilegeAttributes.Disabled)
|
|
return Color.FromArgb(0xf0e0e0);
|
|
else
|
|
return Color.White;
|
|
}
|
|
|
|
private void menuPrivileges_Popup(object sender, EventArgs e)
|
|
{
|
|
if (listPrivileges.SelectedItems.Count == 0)
|
|
{
|
|
menuPrivileges.DisableAll();
|
|
}
|
|
else
|
|
{
|
|
menuPrivileges.EnableAll();
|
|
}
|
|
|
|
if (listPrivileges.Items.Count > 0)
|
|
{
|
|
selectAllMenuItem.Enabled = true;
|
|
}
|
|
else
|
|
{
|
|
selectAllMenuItem.Enabled = false;
|
|
}
|
|
}
|
|
|
|
private void enableMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
foreach (ListViewItem item in listPrivileges.SelectedItems)
|
|
{
|
|
try
|
|
{
|
|
using (var thandle = _object.GetToken(TokenAccess.AdjustPrivileges))
|
|
thandle.SetPrivilege(item.Text, SePrivilegeAttributes.Enabled);
|
|
|
|
if (item.SubItems[1].Text != "Default Enabled")
|
|
{
|
|
item.BackColor = GetAttributeColor(SePrivilegeAttributes.Enabled);
|
|
item.SubItems[1].Text = GetAttributeString(SePrivilegeAttributes.Enabled);
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
if (MessageBox.Show("Could not enable " + item.Text + ":\n\n" + ex.Message, "Process Hacker",
|
|
MessageBoxButtons.OKCancel, MessageBoxIcon.Error) == DialogResult.Cancel)
|
|
return;
|
|
}
|
|
}
|
|
}
|
|
|
|
private void disableMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
foreach (ListViewItem item in listPrivileges.SelectedItems)
|
|
{
|
|
if (item.SubItems[1].Text == "Default Enabled")
|
|
{
|
|
if (MessageBox.Show("Could not disable " + item.Text + ":\n\nInvalid operation.", "Process Hacker",
|
|
MessageBoxButtons.OKCancel, MessageBoxIcon.Error) == DialogResult.Cancel)
|
|
return;
|
|
|
|
continue;
|
|
}
|
|
|
|
try
|
|
{
|
|
using (var thandle = _object.GetToken(TokenAccess.AdjustPrivileges))
|
|
thandle.SetPrivilege(item.Text, SePrivilegeAttributes.Disabled);
|
|
|
|
item.BackColor = GetAttributeColor(SePrivilegeAttributes.Disabled);
|
|
item.SubItems[1].Text = GetAttributeString(SePrivilegeAttributes.Disabled);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
if (MessageBox.Show("Could not disable " + item.Text + ":\n\n" + ex.Message, "Process Hacker",
|
|
MessageBoxButtons.OKCancel, MessageBoxIcon.Error) == DialogResult.Cancel)
|
|
return;
|
|
}
|
|
}
|
|
}
|
|
|
|
private void removeMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (MessageBox.Show("Are you sure you want to remove the selected privilege(s)? This action is permanent.",
|
|
"Process Hacker", MessageBoxButtons.YesNo, MessageBoxIcon.Exclamation) == DialogResult.Yes)
|
|
{
|
|
foreach (ListViewItem item in listPrivileges.SelectedItems)
|
|
{
|
|
try
|
|
{
|
|
using (var thandle = _object.GetToken(TokenAccess.AdjustPrivileges))
|
|
thandle.SetPrivilege(item.Text, SePrivilegeAttributes.Removed);
|
|
|
|
item.Remove();
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
if (MessageBox.Show("Could not remove " + item.Text + ":\n\n" + ex.Message, "Process Hacker",
|
|
MessageBoxButtons.OKCancel, MessageBoxIcon.Error) == DialogResult.Cancel)
|
|
return;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
private void selectAllMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
Misc.SelectAll(listPrivileges.Items);
|
|
}
|
|
|
|
private void buttonLinkedToken_Click(object sender, EventArgs e)
|
|
{
|
|
using (var thandle = _object.GetToken(TokenAccess.Query))
|
|
{
|
|
var token = new TokenWithLinkedToken(thandle);
|
|
TokenWindow window = new TokenWindow(token);
|
|
|
|
window.ShowDialog();
|
|
}
|
|
}
|
|
}
|
|
}
|