Adds support for reading 'v2' consent ui headers

2024-08-28 01:29:34 +10:00
parent fe2a6cabb4
commit fcdd67bb0f
36 changed files with 447 additions and 22 deletions
@@ -0,0 +1,97 @@
+using System;
+using Lithnet.CredentialProvider.Interop;
+using NUnit.Framework;
+
+namespace Lithnet.CredentialProvider.UnitTests
+{
+    public class V2HeaderTests
+    {
+
+        [SetUp]
+        public void Setup()
+        {
+            ConsentUIData.HeaderSize = ConsentUIData.v2HeaderSize;
+        }
+
+        [Test]
+        public void TestExe()
+        {
+            SafeHGlobalHandle p = Helpers.ReadFile($"Samples\\V2\\dump-consent-exe-x64.dat");
+
+            ConsentUIDataExe d = new ConsentUIDataExe(p.ToIntPtr(), p.Size);
+
+            Assert.AreEqual(ConsentUIType.Exe, d.Type);
+            Assert.AreEqual(ConsentUIFlags.InWindowsDirectory | ConsentUIFlags.SecureDesktop | ConsentUIFlags.Unknown3, d.Flags);
+            Assert.AreEqual(3, d.SessionId);
+            Assert.AreEqual((IntPtr)0x0, d.HWnd); // this seems odd
+            Assert.AreEqual((ConsentUIElevationType)6, d.ElevationType);
+            Assert.AreEqual(ConsentUIPromptType.Credentials, d.PromptType);
+            Assert.AreEqual("C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", d.ExecutablePath);
+            Assert.AreEqual("C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", d.Unknown1);
+            Assert.AreEqual("\"C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe\" ", d.CommandLine);
+            Assert.AreEqual("", d.Unknown2);
+        }
+
+        [Test]
+        public void TestMsi()
+        {
+            SafeHGlobalHandle p = Helpers.ReadFile($"Samples\\V2\\dump-consent-msi-x64.dat");
+
+            var d = new ConsentUIDataMsi(p.ToIntPtr(), p.Size);
+
+            Assert.AreEqual(ConsentUIType.Msi, d.Type);
+            Assert.AreEqual(ConsentUIFlags.InWindowsDirectory | ConsentUIFlags.SecureDesktop | ConsentUIFlags.AutoElevationOther, d.Flags);
+            Assert.AreEqual(2, d.SessionId);
+            Assert.AreEqual((IntPtr)0x00000000001e033a, d.HWnd);
+            Assert.AreEqual((ConsentUIElevationType)5, d.ElevationType);
+            Assert.AreEqual(ConsentUIPromptType.Credentials, d.PromptType);
+            Assert.AreEqual("7-Zip 24.08 (x64 edition)", d.ProductName);
+            Assert.AreEqual(ConsentUIMsiAction.Install, d.Action);
+            Assert.AreEqual("C:\\WINDOWS\\Installer\\58ca98.msi", d.ExecutionPath);
+            Assert.AreEqual("1033", d.Locale);
+            Assert.AreEqual("C:\\Users\\testuser\\Downloads\\7z2408-x64.msi", d.OriginalMsi);
+            Assert.AreEqual("7-Zip 24.08 (x64 edition)", d.ProductName);
+            Assert.AreEqual("Igor Pavlov", d.Publisher);
+            Assert.AreEqual("24.08.00.0", d.Version);
+        }
+
+        [Test]
+        public void TestMsix()
+        {
+            SafeHGlobalHandle p = Helpers.ReadFile($"Samples\\V2\\dump-consent-msix-x64.dat");
+
+            var d = new ConsentUIDataMsix(p.ToIntPtr(), p.Size);
+
+            Assert.AreEqual(ConsentUIType.Msix, d.Type);
+            Assert.AreEqual(ConsentUIFlags.SecureDesktop | ConsentUIFlags.Unknown3, d.Flags);
+            Assert.AreEqual(2, d.SessionId);
+            Assert.AreEqual((IntPtr)0x0, d.HWnd);
+            Assert.AreEqual((ConsentUIElevationType)8, d.ElevationType);
+            Assert.AreEqual(ConsentUIPromptType.Credentials, d.PromptType);
+            Assert.AreEqual("\"C:\\Program Files\\WindowsApps\\Microsoft.MSIXPackagingTool_1.2024.405.0_x64__8wekyb3d8bbwe\\MsixPackageTool.exe\" ", d.CommandLine);
+            Assert.AreEqual("C:\\Program Files\\WindowsApps\\Microsoft.MSIXPackagingTool_1.2024.405.0_x64__8wekyb3d8bbwe\\MsixPackageTool.exe", d.ExecutablePath);
+            Assert.AreEqual("Microsoft.MSIXPackagingTool_8wekyb3d8bbwe!Msix.App", d.OtherName);
+            Assert.AreEqual("Microsoft.MSIXPackagingTool_8wekyb3d8bbwe", d.PackageName);
+        }
+
+        [Test]
+        public void TestCom()
+        {
+            SafeHGlobalHandle p = Helpers.ReadFile($"Samples\\V2\\dump-consent-com-x64.dat");
+
+            var d = new ConsentUIDataCom(p.ToIntPtr(), p.Size);
+
+            Assert.AreEqual(ConsentUIType.Com, d.Type);
+            Assert.AreEqual(ConsentUIFlags.SecureDesktop | ConsentUIFlags.AutoElevationOther | ConsentUIFlags.InWindowsDirectory, d.Flags);
+            Assert.AreEqual(2, d.SessionId);
+            Assert.AreEqual((IntPtr)0x00000000000d021e, d.HWnd);
+            Assert.AreEqual((ConsentUIElevationType)4, d.ElevationType);
+            Assert.AreEqual(ConsentUIPromptType.Credentials, d.PromptType);
+            Assert.AreEqual(new Guid("{3ad05575-8857-4850-9277-11b85bdb8e09}"), d.ClsId);
+            Assert.AreEqual("C:\\WINDOWS\\system32\\windows.storage.dll", d.ComComponentPath);
+            Assert.AreEqual("", d.ImageResourcePath);
+            Assert.AreEqual("File Operation", d.OperationType);
+            Assert.AreEqual("C:\\WINDOWS\\Explorer.EXE", d.ProcessPath);
+        }
+    }
+}