slimm609 / checksec.sh

Checksec.sh
https://slimm609.github.io/checksec.sh/
Other
1.99k stars 299 forks source link

Fix stack protection check and full relro check #222

Closed petervas closed 1 year ago

petervas commented 1 year ago

This fixes #221.

In the stack protection check the symbol address check did not work for 32 bit binaries and was removed. The " UND " check is sufficient to detect a valid stack protection.

Full RELRO check reverted to previous check where BIND_NOW flag is set or .got.plt is not present. There are examples (see Issue #221) where .got.plt is present but will be set to read only so full RELRO is active.