04.11.2016 Views

Leaking Windows Kernel Pointers

RuxCon%20-%20Leaking%20Windows%20Kernel%20Pointers

RuxCon%20-%20Leaking%20Windows%20Kernel%20Pointers

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Window Objects and Messages<br />

<strong>Windows</strong><br />

A type of kernel object<br />

Referenced in userland with HWNDs<br />

Essentially just a DWORD<br />

Window Messages<br />

A way of communicating with Window Objects<br />

Allow input/output<br />

Can cross threads and processes<br />

Can also be handled within the kernel<br />

12<br />

Copyright 2016 Trend Micro Inc.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!