ASLR Process Scanner is the free command-line tool to scan and show all the ASLR enabled Processes.

ASLR (Address space layout randomization) is one of the effective security feature introduced since Windows Vista to protect Process against successful exploitation. It hinders some types of security attacks by randomizing the addresses.

ASLR Process Scanner helps you to perform following things,

Show all ASLR enabled Processes
Show all Non-ASLR or ASLR disabled Processes
Check the ASLR status of Process with the ID
Check the ASLR status of Process with the name
Check the ASLR status of Executable File Path

Being a command-line tool makes it easy to automate through scripting. Also it can be handy tool for developers and researchers.

It is available in both 32-bit & 64-bit versions and works on all Windows platforms starting from Vista to Windows 8.

How to use?

ASLR Process Scanner is very easy to use tool. It is command-line/console based tool, hence you have to launch it from the command prompt (cmd.exe).

Here is the simple usage information

[For 32-bit Systems]
ASLRProcessScanner32.exe [-h \| -d \| -p <pid> \| -n <process_name> \| -f <exe_file_path>]

[For 64-bit Systems]
ASLRProcessScanner64.exe [-h \| -d \| -p <pid> \| -n <process_name> \| -f <exe_file_path>]

Examples of ASLR Process Scanner

//List all ASLR enabled Processes

ASLRProcessScanner.exe

//List all Non-ASLR or ASLR disabled Processes

ASLRProcessScanner.exe -d

//Check if ASLR is enabled for Process with pid 1151

ASLRProcessScanner.exe -p 1151

//Check if ASLR is enabled for Process with name 'chrome'

ASLRProcessScanner.exe -n "chrome"

//Check if ASLR is enabled for Executable File

ASLRProcessScanner.exe -f "c:\windows\explorer.exe"

//Show this help screen

ASLRProcessScanner.exe -h

Note that it includes both 32-bit and 64-bit version (ASLRProcessScanner64.exe). On 64-bit operating systems, you have to use the 64-bit version.

Screenshots

Release History

Version 1.5: 26th Jun 2013

Now supports detection of ASLR status by checking with Executable file path. Also detects and alert user on accidental running of 32-bit version on 64-bit system.

Version 1.0: 20th Apr 2013

First public release of ASLR Process Scanner.

Download