02 July 2012

Microsoft Exploit Mitigation Techniques

Microsoft C++ 2005 SP1 and later has the following compiler options :

/GS - Enabling stack cookies / canaries
/DYNAMIC BASE - Enabling ASLR
/SAFESEH - Exception Handler Protection
/NXCOMPAT - Enabling DEP/NX

During dynamic analysis , i can advice you to use "Microsoft BinScope" tool before moving on. It has also some more advices rather than above checks.


http://www.microsoft.com/en-us/download/details.aspx?id=11910


Here you can find one of the executable result.

No comments: