Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Verifying ASLR, DEP, and SafeSEH with PowerShell

netspi.com | blog | #windows | #powershell | #exploit-mitigation | #aslr | #dep | #safeseh | #pe-headers

Summary

A released PowerShell script parses PE headers of DLLs and EXEs to report whether they are compiled with ASLR, DEP, and SafeSEH—a faster native alternative to PEStudio or mona.py for bulk scanning.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
Breaking the Chain
A Project Zero essay arguing exploit mitigations are essential since not all security bugs can be found, recounting contributions to Flash and vendor mitigation work.
blog · projectzero.google
Dude, where’s my heap?
A Google Project Zero post examining heap spraying and heap address randomization, and how browser exploits can still succeed against them.
blog · netspi.com
Getting Started with WMI Weaponization – Part 5
Explains WMI event-driven persistence through filter, consumer, and binding triples, contrasting polled intrinsic events with push-based extrinsic events for launching commands on user logon.
blog · netspi.com
Getting Started with WMI Weaponization – Part 2
Teaches enumerating the 1,500-plus WMI classes on a system with Get-CimClass, then dissecting properties and methods of classes like Win32_Process to find attacker-useful functionality.
blog · netspi.com
Blindly Discover SQL Server Instances with PowerUpSQL
Introduces PowerUpSQL discovery functions that enumerate SQL Server instances from local, network, and domain perspectives, an essential first step for data hunting or privilege escalation.
blog · netspi.com
Attacking Federated Skype for Business with PowerShell
Examines security issues in federated Skype for Business, showing how external domains can validate email addresses, read availability and out-of-office status, and deliver phishing messages.
back