Mention showing ASLR/DEP status in ProcessExplorer.

Involves #6.
berke1337 · Apr 5, 2014 · 6c5ef1e · 6c5ef1e
1 parent d72baca
commit 6c5ef1e
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/hacksheet.tex b/hacksheet.tex
@@ -190,8 +190,7 @@ \subsection*{OS \& Software}
 \end{action}
 
 \begin{action}{Enable ASLR}
-\cmd{\linux}{echo 2 > /proc/sys/kernel/randomize\_va\_space\\
-             /etc/sysctl.conf:\\kernel.randomize\_va\_space = 2}
+\tool{\windows}{ProcessExplorer \click Select Columns \click Enable ASLR}
 \tool{\windows}{EMET}
 \cmd{\windows}{reg add
                hklm{\textbackslash}%
@@ -201,11 +200,14 @@ \subsection*{OS \& Software}
                session manager{\textbackslash}%
                memory management\\
                /v moveimages /t REG\_DWORD /d 1 /f}
+\cmd{\linux}{echo 2 > /proc/sys/kernel/randomize\_va\_space\\
+             /etc/sysctl.conf:\\kernel.randomize\_va\_space = 2}
 \cmd{\solaris}{sxadm enable -c model=tagged-files aslr}
 \cmd{\solaris}{sxadm enable -c model=all aslr}
 \end{action}
 
 \begin{action}{Enable DEP}
+\tool{\windows}{ProcessExplorer \click Select Columns \click DEP Status}
 \tool{\windows}{EMET}
 \cmd{\windows}{\comment{Vista}\\
                bcdedit /set nx AlwaysOn\\