Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I learned basis of assembly language with, both, AT&T and Intel style. After that I gone through buffer overflow and how to use shellcode with it. Should I go for Metasploit now?

share|improve this question
Depends on, if you want to focus on reversing, analysing malware, metasploit won't help you. You can use metasploit to test exploits. – Dominik Antal Jan 7 '14 at 10:00
up vote 6 down vote accepted

Nope. Metasploit is a pentester framework, not a reversing/malware-dev framework. Instead, you should master a debugger (IDA, Radare2, OllyDbg, etc) and at least one scripting language (Python or Ruby).

share|improve this answer
Does Python or Ruby helps in RE? – Pranit Kothari Jan 7 '14 at 9:13
Scripting language does help for automation. And, moreover, most of the tools in RE are coded in one of these languages (easy prototyping and quite robust in the long term). – perror Jan 7 '14 at 9:17
@perror Thanks. – Pranit Kothari Jan 7 '14 at 10:36

No.               ​  

share|improve this answer

We're looking for long answers that provide some explanation and context. Don't just give a one-line answer; explain why your answer is right, ideally with citations. Answers that don't include explanations may be removed.

+1. Thanks for your answer. Actually, I got your point, but can accept only one answer. – Pranit Kothari Jan 7 '14 at 6:24
This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post. - From Review – perror Dec 5 '15 at 0:34
"This does not provide an answer to the question." -- Are you serious? :) – Jason Geffner Dec 5 '15 at 2:06

Metasploit can generate some malicious files, such as PDFs. Malware analysis isn't necessarily just Windows PE files so it might be a good idea to look into other file formats. Metaploit could be useful to generate your own samples to analyze.

Msfvenom might be interesting to you as well. It is a tool that generates shellcode given a payload. Generated shellcode might not always be the best though.

share|improve this answer

You may find other people code useful and metasplot is good to test and understand how things can be exploited.

For reversing there are alot of videos and sildes that other people have released explaining how they achieved there goals

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.