Listplanting – yet another code injection trick

April 25, 2019 in Code Injection

Okay, this is the last one in this short series, just to add the list-view control.

Same as tree-view, it accepts two interesting messages LVM_INSERTGROUPSORTED and LVM_SORTGROUPS that can help us to set up a callback pointing to LVGroupCompare function.

And same as tree-view, it’s fairly popular. Testing my quick&dirty POC I crashed a number of programs including Total Commander, and Windows Explorer.

Modexp shared a nice POC here.
Csaba shared a nice POC here.

Share this :)

Comments are closed.