Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sun, 9 Dec 2012 20:07:09 +0400
From: Solar Designer <>
Subject: enable ASLR or/and DEP for Windows builds of JtR


Here are some recent tweets on this:

RT @dchest: Common Windows apps still without DEP and ASLR

<@solardiz> @dchest Apparently, it's "-Wl,--dynamicbase -Wl,--nxcompat" or "peflags --dynamicbase=true --nxcompat=true MyApp.exe"
<@solardiz> @dchest Apparently, both work with MinGW, but -Wl,--dynamicbase / --dynamicbase=true is expected to break things with Cygwin
<@solardiz> @dchest Apparently, DEP only needs to be enabled on the .exe, whereas its setting on DLLs does not matter:
<solardiz> Enable ASLR (breaks Cygwin? and DEP for MinGW & Cygwin:

Last 4 links expanded:

Summary: we should probably try adding -Wl,--nxcompat to Cygwin targets,
and -Wl,--dynamicbase -Wl,--nxcompat to MinGW targets.

Anyone ready to try that?  (Then see if the flags are actually set, or
better yet if ASLR or/and DEP actually work when the program is run.)


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.