search

NetSPI / PESecurity

PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.
https://blog.netspi.com/verifying-aslr-dep-and-safeseh-with-powershell/
MIT License
621 stars 147 forks source link

SafeSEH reporting "False" when it is not #11

Closed ghost closed 4 years ago

ghost commented 7 years ago

I am running PESecurity against an EXE that has /SAFESEH set in its linker options, however when I run PESecurity against the EXE its reporting SafeSEH=False. If I run BinSkim, or BinScope it detects its set correctly?

egru commented 7 years ago

Thanks. I'll take a look at it.

egru commented 4 years ago

pesecurity should have the same checks for safeseh as binskim and other tools