bugtraq - Re: Process Killing - Playing with PostThreadMessage

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <253201c389c4$f97ba090$c864a8c0@Maxime>
Date: Fri, 3 Oct 2003 11:42:38 -0400
From: "Maxime Ducharme" <maxime@...dore-design.com>
To: "Thor Larholm" <thor@...x.com>
Cc: <bugtraq@...urityfocus.com>,
	<brett.moore@...urity-assessment.com>
Subject: Re: Process Killing - Playing with PostThreadMessage



AFAIK, PostThreadMessage only works on local machine.

pskill will also ask for a password, Brett's code will bypass
security checks (tested on my win2k sp4 systems).

Correct me too if I'm wrong :-)

Ciao

---------------------------------------------------------------
  Maxime Ducharme
  Administrateur reseau, Programmeur
  Pandore-Design [http://www.pandore-design.com]


----- Original Message ----- 
From: "Thor Larholm" <thor@...x.com>
To: "Brett Moore" <brett.moore@...urity-assessment.com>;
<bugtraq@...urityfocus.com>
Sent: Thursday, October 02, 2003 1:38 PM
Subject: Re: Process Killing - Playing with PostThreadMessage


> Feel free to correct me if I am wrong, but isn't this also how the PSKill
> application from SysInternals work?
>
> http://www.sysinternals.com/ntw2k/freeware/pskill.shtml
>
>
>
> Regards
> Thor Larholm
> PivX Solutions, LLC - Senior Security Researcher
>
>
> ----- Original Message ----- 
> From: "Brett Moore" <brett.moore@...urity-assessment.com>
> To: <bugtraq@...urityfocus.com>
> Sent: Wednesday, October 01, 2003 10:28 PM
> Subject: Process Killing - Playing with PostThreadMessage
>
>
> >
=========================================================================
> > = Process Killing - Playing with PostThreadMessage
> > =
> > = brett.moore@...urity-assessment.com
> > = http://www.security-assessment.com
> > =
> > = Originally posted: October 02, 2003
> >
=========================================================================
> <snip http://msgs.securepoint.com/cgi-bin/get/bugtraq0310/23.html>
>