Skip to content

Security implications of some options ( /DYNAMICBASE:NO and ASLR) #4

Description

@p0358

The whole project is nice, but I think it might be worth it to mention somewhere in readme that disabling ASLR for the DLL with /DYNAMICBASE:NO would be a pretty bad idea in production in practice other than for tests. Because otherwise all the other options can be used just fine with the goal of creating tiny stub DLLs. (apart from maybe also the merging of sections, but it's much less risky for simple stub DLLs probably)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions