Cyber Risks · Trail of Bits Blog

Building checksec without boundaries with Checksec Anywhere

Summary: Trail of Bits released Checksec Anywhere, a browser-based tool that analyzes ELF, PE, and Mach-O binaries for exploit mitigations such as ASLR, DEP, stack canaries, GS cookies, Control Flow Guard, ARC, and code signing from a single interface. Built by a summer intern, it runs entirely locally with no accounts or uploads, analyzes thousands of files in seconds on a modern MacBook Pro, and supports shareable result URLs and SARIF export.

What's compelling: The tool's acknowledged blind spot is mobile binaries - Android APK and iOS IPA - and firmware and bootloaders, exactly the formats where the expanding mobile threat landscape lives, so coverage of those targets still depends on separate tooling.

Read the original at Trail of Bits Blog ↗