Enabling DEP & ASLR

Index > Windows > Enabling DEP & ASLR

Author

Thread

yuhg

Joined: 14 Apr 2014
Posts: 3
Location: Somewhere

yuhg

What can I add to my program so that I can utilize DEP and ASLR?

14 Apr 2014, 06:18

revolution
When all else fails, read the source

Joined: 24 Aug 2004
Posts: 18003
Location: In your JS exploiting you and your system

revolution

Add a relocation (fixups) section.

Code:

section '.reloc' fixups data readable discardable

Don't mark your data sections as executable.

Don't mark your code sections as readable or writeable.

14 Apr 2014, 06:22

yuhg

Joined: 14 Apr 2014
Posts: 3
Location: Somewhere

yuhg

revolution wrote:

Add a relocation (fixups) section.
Code:
section '.reloc' fixups data readable discardable    
Don't mark your data sections as executable.

Don't mark your code sections as readable or writeable.

I followed the instructions in your post and DEP/ASLR are still not being enabled.

14 Apr 2014, 06:51

yuhg

Joined: 14 Apr 2014
Posts: 3
Location: Somewhere

yuhg

Even when I have FileHeader.OptionalHeader.DllCharacteristics set, ASLR is not being enabled.

Is there something I'm missing?

14 Apr 2014, 07:20

nmaps

Joined: 26 Oct 2012
Posts: 8

nmaps

revolution wrote:

Don't mark your code sections as readable or writeable.

!code sections should most definitely be readable in case data is stored there. I've yet to see a .text section that isn't read | execute. You'd have to be assured by the compiler that nothing is stored there (ie import directory).

16 Apr 2014, 03:17

revolution
When all else fails, read the source

Joined: 24 Aug 2004
Posts: 18003
Location: In your JS exploiting you and your system

revolution

nmaps wrote:

!code sections should most definitely be readable in case data is stored there. I've yet to see a .text section that isn't read | execute. You'd have to be assured by the compiler that nothing is stored there (ie import directory).

There is no reason to store data in the code section actually. We use an assembler and can make our code section contain only code, and put all initialised data into a different section(s).

16 Apr 2014, 04:28

revolution
When all else fails, read the source

Joined: 24 Aug 2004
Posts: 18003
Location: In your JS exploiting you and your system

revolution

This also might help:

Code:

format pe nx
;...

22 Apr 2014, 04:05

< Last Thread | Next Thread >

Forum Rules:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum