discovered 03 Aug 2026
kasld
→ View on GitHubKASLD is a tool designed to recover the Linux kernel's virtual and physical memory layout, specifically the kernel text base, from a local process by leveraging various system evidence and architectural invariants. Its primary use case is kernel Address Space Layout Randomization (KASLR) derandomization, which allows users to infer potential kernel text placements even in hardened environments. Notable features include support for multiple architectures, an inference engine that fuses evidence from various techniques, and the ability to report the upper bounds of KASLR protection based on the collected data.