yyyy
yyyy

Reputation: 672

Is Windows ASLR session-based?

I've heard that Windows ASLR is session-based: A DLL would be relocated only once in each session, subsequent linking to the same dll in the same session would reuse this cached relocation.

So I tried:

  1. Write a small program to print the address of a DLL
  2. Connect to the computer with RDP twice, each creates its' own session (confirmed by query session)
  3. Call the program within different RDP sessions

What I expect:

What actually happens:

Why?

enter image description here

Upvotes: 0

Views: 45

Answers (0)

Related Questions