SecurityXploded.com
ASLR Process Scanner : Command-line Tool to Scan and Show ASLR Enabled Processes
 
 
ASLR Process Scanner
 
 
 
See Also
 
 
Contents
 
 
 
About
ASLR Process Scanner is the free command-line tool to scan and show all the ASLR enabled Processes.

ASLR (Address space layout randomization) is one of the effective security feature introduced since Windows Vista to protect Process against successful exploitation. It hinders some types of security attacks by randomizing the addresses.


ASLR Process Scanner helps you to perform following things,

  • Show all ASLR enabled Processes
  • Show all Non-ASLR or ASLR disabled Processes
  • Check the ASLR status of Process with the ID
  • Check the ASLR status of Process with the name
  • Check the ASLR status of Executable File Path

Being a command-line tool makes it easy to automate through scripting. Also it can be handy tool for developers and researchers.


It is available in both 32-bit & 64-bit versions and works on all Windows platforms starting from Vista to Windows 8.

 
 
 
How to use?
ASLR Process Scanner is very easy to use tool. It is command-line/console based tool, hence you have to launch it from the command prompt (cmd.exe).

Here is the simple usage information
[For 32-bit Systems]
ASLRProcessScanner32.exe [-h | -d | -p <pid> | -n <process_name> | -f <exe_file_path>]
 
[For 64-bit Systems]
ASLRProcessScanner64.exe [-h | -d | -p <pid> | -n <process_name> | -f <exe_file_path>]
 
Examples of ASLR Process Scanner
//List all ASLR enabled Processes
ASLRProcessScanner.exe
 
//List all Non-ASLR or ASLR disabled Processes
ASLRProcessScanner.exe -d
 
//Check if ASLR is enabled for Process with pid 1151
ASLRProcessScanner.exe -p 1151
 
//Check if ASLR is enabled for Process with name 'chrome'
ASLRProcessScanner.exe -n "chrome"
 
//Check if ASLR is enabled for Executable File
ASLRProcessScanner.exe -f "c:\windows\explorer.exe"
 
//Show this help screen
ASLRProcessScanner.exe -h
 
 
Note that it includes both 32-bit and 64-bit version (ASLRProcessScanner64.exe). On 64-bit operating systems, you have to use the 64-bit version.
 
 
 
Screenshots
 
ASLRProcessScanner in Action
 
 
 
Release History
 
Version 1.5: 26th Jun 2013
Now supports detection of ASLR status by checking with Executable file path. Also detects and alert user on accidental running of 32-bit version on 64-bit system.
 
Version 1.0: 20th Apr 2013
First public release of ASLR Process Scanner.
 
 
 
Download
FREE Download ASLR Process Scanner v1.5

License  : Freeware
Platform : Windows Vista, Windows 7, Windows 8

Download
 
 
 
 
See Also