Listplanting – yet another code injection trick
By by adam
Published: 2019-04-25 · Archived: 2026-04-05 17:08:02 UTC
Okay, this is the last one in this short series, just to add the list-view control.
Same as tree-view, it accepts two interesting messages LVM_INSERTGROUPSORTED and
LVM_SORTGROUPS that can help us to set up a callback pointing to LVGroupCompare function.
And same as tree-view, it’s fairly popular. Testing my quick&dirty POC I crashed a number of programs including
Total Commander, and Windows Explorer.
Modexp shared a nice POC here.
Csaba shared a nice POC here.
Source: https://www.hexacorn.com/blog/2019/04/25/listplanting-yet-another-code-injection-trick/
https://www.hexacorn.com/blog/2019/04/25/listplanting-yet-another-code-injection-trick/
Page 1 of 1