Shoot the Messenger - Using Window Messages to Exploit Local win32 Applications

Presented at DEF CON 12 (2004), July 31, 2004, noon (50 minutes).

The windows GDI interface uses messages to pass input and events to windows. As there is currently no way of determining who the sender of the message is, it is possible for a low privileged application to send messages to and interact with a process of higher privilege.

Presenters:

• Brett Moore - CTO, security-assessment.com
  Brett Moore leads the security research and network intrusion teams at security-assessment.com. He has been credited with the discovery of multiple security vulnerabilities in both private and public software vendors' products including Microsoft web products.

Links:

• https://infocon.org/cons/DEF CON/DEF CON 12/DEF CON 12 video/DEF CON 12 - Brett Moore - Shoot the Messenger - Video.mp4
• https://www.youtube.com/watch?v=ElIsSuAZL18

Similar Presentations:

• DEF CON 21 (2013) / De-Anonymizing Alt.Anonymous.Messages
• DEF CON 25 (2017) / Demystifying Windows Kernel Exploitation by Abusing GDI Objects.
• DEF CON China 1.0 (2019) / WARNING: Magnitude 10 Earthquake Is Coming in One Minute