I learned basis of assembly language with, both, AT&T and Intel style. After that I gone through buffer overflow and how to use shellcode with it. Should I go for Metasploit now?
asked Jan 7, 2014 at 3:46
-
Depends on, if you want to focus on reversing, analysing malware, metasploit won't help you. You can use metasploit to test exploits.– Dominik AntalJan 7, 2014 at 10:00
Add a comment
|
4 Answers
Nope. Metasploit is a pentester framework, not a reversing/malware-dev framework. Instead, you should master a debugger (IDA, Radare2, OllyDbg, etc) and at least one scripting language (Python or Ruby).
-
-
1Scripting language does help for automation. And, moreover, most of the tools in RE are coded in one of these languages (easy prototyping and quite robust in the long term).– perrorJan 7, 2014 at 9:17
No.
answered Jan 7, 2014 at 3:52
-
+1. Thanks for your answer. Actually, I got your point, but can accept only one answer. Jan 7, 2014 at 6:24
-
"This does not provide an answer to the question." -- Are you serious? :) Dec 5, 2015 at 2:06
Metasploit can generate some malicious files, such as PDFs. Malware analysis isn't necessarily just Windows PE files so it might be a good idea to look into other file formats. Metaploit could be useful to generate your own samples to analyze.
Msfvenom might be interesting to you as well. It is a tool that generates shellcode given a payload. Generated shellcode might not always be the best though.
You may find other people code useful and metasplot is good to test and understand how things can be exploited.
For reversing there are alot of videos and sildes that other people have released explaining how they achieved there goals