Collaborate Disseminate
i have a program named x. The program x have one modules which is dep disabled and all other modules linked with dep enabled.
What will be the state of the program x , when developing an exploit , do i need to bypass dep or is there any ot… Continue reading Is It possible to bypass DEP if one of the linked dll or the exe itself is DEP disabled?
We all know that DEP and ASLR are memory corruption protection mechanisms,
My Question is where can i find an entire list of all the protection mechanisms ?
And if there’s a way to check the presence of each protection mechanism in a Windo… Continue reading What are the memory corruption protections mechanisms other than DEP and ASLR?
The majority of my cyber security background comes in the form of web application vulnerability testing, and whilst I do have a degree of prior experience in studying and performing application exploitations it has been several years since… Continue reading Are buffer overflow and similar attacks still possible?
Is it safe to use non-ASLR DLL in an enabled ASLR EXE?
Would the DLL be loaded to and will use random addressed, or should all the dependencies enable ASLR?
In addition, what about other security mechanisms such as DEP and SHE?
Continue reading Is it safe to use non-ASLR DLL in an enabled ASLR EXE
More bad news for cybercrooks… we hope. Continue reading Intel announces “exploit busting” features in its next processor chips
I want to enable non-permanent DEP for a 32-bit process (no /nxcompat flag) on Windows 10. No matter which option is set, DEP ist always enabled/disabled permanent according to ProcessExplorer.
I’ve tried bcdedit OptIn/OptOut and DEP sett… Continue reading Enable non-permanent DEP on Windows 10 [migrated]
I have a windows application that runs in 2 processes and communicates over localhost network port.
This application can hold secrets, such as a web cookie.
I’m trying to think through the security vulnerabilities.
My impr… Continue reading Security in memory and between local windows processes over localhost
Several software packages on our SOE Windows machines come with DEP and ASLR memory protections off by default. More troubling is that these applications run as SYSTEM and load their own drivers.
Given that these are expecte… Continue reading Is it safe to deploy software without memory protections such as DEP/ASLR?
Do programs run in Linux in Wine benefit from mitigation techniques DEP and ASLR?
Continue reading Do programs run in Linux in Wine benefit rom DEP and ASLR?
I’ve been playing a game and there is a private server (with around 2k population) that asks us to turn off DEP for their game, I read about what it does but I don’t understand what the consequences can be. Will it be safe for me to turn o… Continue reading How safe is it to disable DEP for a program?