search

stefansundin / superf4

:file_folder: Kill programs instantly with Ctrl+Alt+F4. (Windows)
https://stefansundin.github.io/superf4/
GNU General Public License v3.0
671 stars 40 forks source link

Enable ASLR #16

Open Dyras opened 7 years ago

Dyras commented 7 years ago

Greetings! It has come to my attention that SuperF4 does not have ASLR enabled. Is there a reason for this? If possible, could you enable it? It's one of two programs on my computer that isn't using ASLR.

stefansundin commented 7 years ago

Hi Dyras,

I haven't thought about ASLR, looks like support for it exists now in GCC with the flag --high-entropy-va. I'll definitely give it a try when I look into releasing the next version.

Thanks for the suggestion!

rmenessec commented 6 years ago

@stefansundin, would you consider adding a Visual Studio solution? That would make it easier for me—possibly other folks—to recompile the code on my own, and add Control Flow Guard, ASLR, and so forth.

For what it's worth, Visual Studio 2015 and now 2017 both have a "Community Edition" that's free-as-in-beer, and fully functional unless you need the Microsoft proprietary "team" features.

Thanks in advance.

stefansundin commented 5 years ago

I tried to use -Wl,--high-entropy-va and -Wl,--image-base,0x140000000 as reported on some websites to enable ASLR, but Process Explorer kept saying that it was disabled. It's hard to find information on the proper way to use it.

As for Visual Studio, I haven't given it a try yet.

amroamroamro commented 5 years ago

Visual Studio steps: