c++ - How to tell if /GS compiler is enabled for a PE Win32 -
c++ - How to tell if /GS compiler is enabled for a PE Win32 -
i able parse aslr, dep, seh, etc. dos headers not sure how tell if file compiled /gs stack canaries.
i writing program, pointing me programme pestudio won't help me unless open source.
is part of dos headers? or have scan .data section __security_cookie?
go image_nt_headers then image_optional_header (image_nt_headers.optionalheader ) then image_data_directory (image_nt_headers.optionalheader.datadirectory) the 10th entry virtualaddress fellow member rva "load configuration directory". image_nt_headers.optionalheader.datadirectory[image_directory_entry_load_config].virtualaddress
the load configuration directory image_load_config_directory structure.
check securitycookie member: if it's not 0 /gs in utilize pe.
c++ c winapi pe executable-format
Comments
Post a Comment