Conversation

RELEASE: checksec.py 🐍 A cross-platform checksec tool for Windows and Linux. ➡️ pip install checksec.py ➡️ windows: get checksec.exe on Github release ➡️ demo: asciinema.org/a/363216 ➡️ Github: github.com/Wenzel/checkse cc

@LIEF_project

174

474

Replying to

and

It's hard to grade fortify support since it can only work for statically sized buffers and avoids checks in cases where the compiler can see it never overflows. Some implementations primarily (or only) use inline checks and won't be detected. Some also cover more libc functions.

9:41 PM · Oct 4, 2020Twitter Web App

Replying to

and

Bionic's covers buffer reads rather than only writes, as do others, unlike glibc. The glibc implementation also doesn't support Clang. Type-based CFI (clang.llvm.org/docs/ControlFl) and ShadowCallStack (arm64-only clang.llvm.org/docs/ShadowCal) are others thing to check. Both by Android.

Replying to

and

Thanks, I opened 2 new issues to detect these mitigations.

Show replies