Shoot the Messenger Using Window Messages to Exploit Local Win32

Architecture and Background

Brett Moore, Shoot the Messenger Using Window Messages to Exploit Local win32 Applications The windows GDI interface uses messages to pass input and events to windows.

Vulnerability Analysis

As there is currently no way of determining who the sender of the message is, it is possible for a low privileged application to send messages to and interact with a process of higher privilege.

Exploitation and Demonstrations

This presentation will cover in details some of the flaws exposed through these messages, and demonstrate how they can be exploited to conduct privilege escalation and other attacks.

Remediation and Defensive Strategies

Attendees should be familiar with the shatter attack concept and may want to review the following documents before attending: * Shatter Attacks How to break Windows, Chris Paget * Win32 Message Vulnerabilities Redux, Oliver Lavery * Shattering by Example, Brett Moore Brett Moore leads the security research and network intrusion teams at security-assessment.com. He has been credited with the discovery of multiple security vulnerabilities in both private and public software vendors" products including Microsoft web products.