Effortless security feature detection with Winchecksec

Summary: Trail of Bits released Winchecksec, an open-source tool that takes a Windows PE binary as input and reports the security features baked in at build time, with plain-text and JSON output modes controlled by a single -j flag. The tool distinguishes "Dynamic Base" from ASLR because setting /DYNAMICBASE does not guarantee randomization: binaries that request ASLR but lack a relocation table are loaded without randomized address spaces, an edge case behind CVE-2017-17670 in VLC 2.2.8, and the underlying mingw-w64 toolchain error remains unfixed.
Why it matters: A build flag that looks like ASLR can silently produce a binary without it, and the mingw-w64 error that turned a moderate use-after-free in VLC 2.2.8 into a serious hole is still unfixed - so what your build reports and what your binaries actually enforce may not match.

Read the original at Trail of Bits Blog ↗

Mentions: CVE-2017-17670