Take the 2-minute tour ×
Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It's 100% free, no registration required.

I learned basis of assembly language with, both, AT&T and Intel style. After that I gone through buffer overflow and how to use shellcode with it. Should I go for Metasploit now?

share|improve this question
    
Depends on, if you want to focus on reversing, analysing malware, metasploit won't help you. You can use metasploit to test exploits. –  Dominik Antal Jan 7 at 10:00
add comment

4 Answers

up vote 6 down vote accepted

Nope. Metasploit is a pentester framework, not a reversing/malware-dev framework. Instead, you should master a debugger (IDA, Radare2, OllyDbg, etc) and at least one scripting language (Python or Ruby).

share|improve this answer
    
Does Python or Ruby helps in RE? –  pranitkothari Jan 7 at 9:13
1  
Scripting language does help for automation. And, moreover, most of the tools in RE are coded in one of these languages (easy prototyping and quite robust in the long term). –  perror Jan 7 at 9:17
    
@perror Thanks. –  pranitkothari Jan 7 at 10:36
add comment

No.               ​  

share|improve this answer
    
+1. Thanks for your answer. Actually, I got your point, but can accept only one answer. –  pranitkothari Jan 7 at 6:24
add comment

We're looking for long answers that provide some explanation and context. Don't just give a one-line answer; explain why your answer is right, ideally with citations. Answers that don't include explanations may be removed.

Metasploit can generate some malicious files, such as PDFs. Malware analysis isn't necessarily just Windows PE files so it might be a good idea to look into other file formats. Metaploit could be useful to generate your own samples to analyze.

Msfvenom might be interesting to you as well. It is a tool that generates shellcode given a payload. Generated shellcode might not always be the best though.

share|improve this answer
add comment

You may find other people code useful and metasplot is good to test and understand how things can be exploited.

For reversing there are alot of videos and sildes that other people have released explaining how they achieved there goals

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.