binsec
binsec copied to clipboard
Binary (In)security tool
Bumps [shlex](https://github.com/comex/rust-shlex) from 1.0.0 to 1.3.0. Changelog Sourced from shlex's changelog. 1.3.0 Full fix for the high-severity security vulnerability RUSTSEC-2024-0006 a.k.a. GHSA-r7qv-8r2h-pg27: Deprecates quote APIs in favor of try_ equivalents...
If specified with a flag like `--opinion`, return compiler flags that can be harnessed in order to mitigate any security features that are not set for the specific instance. Ie...
Good series of posts with information about different Windows mitigations: - https://www.crowdstrike.com/blog/state-of-exploit-development-part-1/ - https://www.crowdstrike.com/blog/state-of-exploit-development-part-2/ For binary checks: * Legacy ASLR * ACG * Authenticode * CET / Return flow guarding