stack-protector

Check various security hardening features on ELF, PE and Mach-O binaries

🥬 chard measures which hardening protections a C and C++ toolchain applies: probe programs built with your gcc or clang, run, and read back as the binaries it built. What the toolchain does, not what a packaging spec says.

This lab required the execution of a buffer-overflow attack variant, known as return-to-libc, bypassing existing protection schemes implemented in Linux OS.

LLVM module pass auditing SSP, SafeStack and ShadowCallStack per function at IR level - the hardening question before the linker exists.

Hands-on labs and in-depth guides for Linux kernel security hardening and mitigations