ShieldBreakPatcher.cs

using System;
using System.IO;
using System.Security.AccessControl;
using System.Security.Principal;

namespace Ubitquity.ShieldBreakMitigation
{
    class Program
    {
        static void Main(string[] args)
        {
            Console.WriteLine("==================================================");
            Console.WriteLine(" UBITQUITY / NETTWERKED ShieldBreak Interim Patch ");
            Console.WriteLine("==================================================");

            if (!IsAdministrator())
            {
                Console.WriteLine("[!] ERROR: This patch requires Administrative privileges.");
                Console.WriteLine("    Please right-click and 'Run as Administrator'.");
                Console.ReadLine();
                return;
            }

            string[] targetDirectories = { @"C:\Temp", @"C:\Windows\Temp" };
            
            // Get the SID for the local "Users" group (BUILTIN\Users)
            SecurityIdentifier usersGroup = new SecurityIdentifier(WellKnownSidType.BuiltinUsersSid, null);

            foreach (string dir in targetDirectories)
            {
                if (Directory.Exists(dir))
                {
                    try
                    {
                        DirectoryInfo dInfo = new DirectoryInfo(dir);
                        DirectorySecurity dSecurity = dInfo.GetAccessControl();

                        // Create the Deny rule for creating junctions (CreateDirectories)
                        FileSystemAccessRule denyRule = new FileSystemAccessRule(
                            usersGroup,
                            FileSystemRights.CreateDirectories,
                            InheritanceFlags.ContainerInherit | InheritanceFlags.ObjectInherit,
                            PropagationFlags.None,
                            AccessControlType.Deny);

                        dSecurity.AddAccessRule(denyRule);
                        dInfo.SetAccessControl(dSecurity);

                        Console.WriteLine($"[+] SUCCESS: Secured ACLs on {dir}");
                    }
                    catch (Exception ex)
                    {
                        Console.WriteLine($"[-] ERROR securing {dir}: {ex.Message}");
                    }
                }
                else
                {
                    Console.WriteLine($"[*] SKIPPED: Directory {dir} does not exist.");
                }
            }

            Console.WriteLine("\nMitigation applied successfully. Await official Microsoft update.");
            
            // Check for silent flag (used by automated installers)
            if (args.Length == 0 || args[0] != "/silent")
            {
                Console.WriteLine("Press any key to exit...");
                Console.ReadKey();
            }
        }

        // Helper to check for Administrator privilege
        public static bool IsAdministrator()
        {
            using (WindowsIdentity identity = WindowsIdentity.GetCurrent())
            {
                WindowsPrincipal principal = new WindowsPrincipal(identity);
                return principal.IsInRole(WindowsBuiltInRole.Administrator);
            }
        }
    }
}