[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 9 Dec 2012 22:02:08 -0500
From: Rich Rumble <richrumble@...il.com>
To: john-dev@...ts.openwall.com
Subject: Re: enable ASLR or/and DEP for Windows builds of JtR
On Sun, Dec 9, 2012 at 6:32 PM, Solar Designer <solar@...nwall.com> wrote:
> On Sun, Dec 09, 2012 at 11:37:11AM -0500, Rich Rumble wrote:
>> > Summary: we should probably try adding -Wl,--nxcompat to Cygwin targets,
>> > and -Wl,--dynamicbase -Wl,--nxcompat to MinGW targets.
>> Does MinGW build work?
>
> I don't know. JimF did have them working at some point.
Failed quickly for me: (john-1.7.9-jumbo-7)
In file included from dynamic_fmt.c:69:0:
sha.h:4:25: fatal error: openssl/sha.h: No such file or directory
>> > Anyone ready to try that? (Then see if the flags are actually set, or
>> > better yet if ASLR or/and DEP actually work when the program is run.)
I thought about trying to add the flags, but I chickened out, figured
I'd put them in around line 1317 (win32-cygwin-x86-sse2i:) of the
makefile, but I don't know what I'm doing :)
> Apparently, the peflags program from Cygwin (package called "rebase"?)
> can do this too.
I tried peflags it seems to have worked on the face of it
peflags --dynamicbase=true --nxcompat=true ../run/john.exe
peflags ../run/john.exe -v
Warning: file has no relocation info but has dynbase set (../run/john.exe).
../run/john.exe:
coff(0x032f[+relocs_stripped,+executable_image,+line_nums_stripped,+local_syms_stripped,+bigaddr,+32bit_machine,+sepdbg])
pe(0x8140[+dynamicbase,+nxcompat,+tsaware])
peflags ../run/john.exe -v (fresh make)
../run/john.exe:
coff(0x032f[+relocs_stripped,+executable_image,+line_nums_stripped,+local_syms_stripped,+bigaddr,+32bit_machine,+sepdbg])
pe(0x8000[+tsaware])
PEstudio thinks it uses DEP, however Sysinternals (M$) process
explorer doesn't seem to think DEP is going when it's being run on XP.
It (process explorer) does see both ASLR and DEP in windows 7 when
dynamicbase and nxcompat are both set using peflags. XP must need
opt-in, haven't messed around with it in some time.
-rich
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
