-
-
Save trietptm/b84ccad9db01f459ac7e to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| @ECHO OFF | |
| SETLOCAL | |
| ECHO ASLR Enable / Diable Batch Script - Please run as admin | |
| set /p Choice=Want to Enable or Disable ASLR? (e or d):%=% | |
| if "%Choice%"=="e" goto :ENABLE | |
| if "%Choice%"=="d" goto :DISABLE | |
| :ENABLE | |
| reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "MoveImages" /t REG_DWORD /d 1 /f | |
| goto :EOF | |
| :DISABLE | |
| reg delete "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "MoveImages" | |
| goto :EOF |
@glnzglnz It exists on Windows 10, so it should exists on Windows 7 ;) .
I believe the default is to have ASLR enabled so deleting the key will most probably enable ASLR. To disable you need to explicitly set the value to 0.
I believe the default is to have ASLR enabled so deleting the key will most probably enable ASLR. To disable you need to explicitly set the value to 0.
yes that is the case @xambroz
This method is only valid for x86 software, I guess ASLR is not disabled for x64 software
On Win10 and WIn11, you can disable ASLR by adjusting the settings in Windows Defender. See here for screenshots:
https://gfs-gamerfullstop.online/how-to-fix-windows-11-settings-menu-not-opening/
It is invalid, and Windows 11 cannot disable it.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Will this work in Win 7 Pro 64-bit, which does not even have the key "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" ?