Hello and welcome to the Thursday, July 9th, 2006 edition of the Sands International

Center's Stormcast.

My name is Johannes Ulrich and today I'm recording from Jacksonville, Florida.

And this episode is brought you by the Sands.edu master's degree program in information security engineering.

And today we got from Xavier a new tool, the stack simulator. It's a web-based tool that Xavier created and that you can use.

And what it's really about is whenever you're dealing with exploit development

or if you're dealing with, for example, reversing malware,

one of the important concepts to master is, well, how does the stack work?

How do programs use the stack?

And that is what this tool is about.

It's really a learning tool to allow you to explore

how sort of different values are passed in the stack,

how, for example, commands can be executed,

how pointers can be manipulated,

and well, give it a try, play with it.

It's really more learning tool,

and so for anybody here, sort of new to this kind of work like reverse engineering

and exploit development probably a nice tool to go along with whatever classes you're taking

because he did develop this for our reversing malware class forensic 610 well in talking about

tools i figure we can also include another tool here that I just

came across this week and I think some of you may be interested in, and that's root-ass

role. So typically when you're dealing with Linux, what you usually do in order to assign

...