ASLR Process Scanner is the free command-line tool to scan and show all the ASLR enabled Processes.
ASLR (Address space layout randomization) is one of the effective security feature introduced since Windows Vista to protect Process against successful exploitation. It hinders some types of security attacks by randomizing the addresses.
ASLR Process Scanner helps you to perform following things,
Show all ASLR enabled Processes
Show all Non-ASLR or ASLR disabled Processes
Check the ASLR status of Process with the ID
Check the ASLR status of Process with the name
Check the ASLR status of Executable File Path
Being a command-line tool makes it easy to automate through scripting. Also it can be handy tool for developers and researchers.
It is available in both 32-bit & 64-bit versions and works on all Windows platforms starting from Vista to Windows 8.
How to use?
ASLR Process Scanner is very easy to use tool. It is command-line/console based tool, hence you have to launch it from the command prompt (cmd.exe).
Note that it includes both 32-bit and 64-bit version (ASLRProcessScanner64.exe). On 64-bit operating systems, you have to use the 64-bit version.
Screenshots
Release History
Version 1.5: 26th Jun 2013
Now supports detection of ASLR status by checking with Executable file path. Also detects and alert user on accidental running of 32-bit version on 64-bit system.