I learned basis of assembly language with, both, AT&T and Intel style. After that I gone through buffer overflow and how to use shellcode with it. Should I go for Metasploit now?

  • Depends on, if you want to focus on reversing, analysing malware, metasploit won't help you. You can use metasploit to test exploits. Jan 7, 2014 at 10:00

4 Answers 4


Nope. Metasploit is a pentester framework, not a reversing/malware-dev framework. Instead, you should master a debugger (IDA, Radare2, OllyDbg, etc) and at least one scripting language (Python or Ruby).

  • Does Python or Ruby helps in RE? Jan 7, 2014 at 9:13
  • 1
    Scripting language does help for automation. And, moreover, most of the tools in RE are coded in one of these languages (easy prototyping and quite robust in the long term).
    – perror
    Jan 7, 2014 at 9:17

No.               ​  

  • +1. Thanks for your answer. Actually, I got your point, but can accept only one answer. Jan 7, 2014 at 6:24
  • "This does not provide an answer to the question." -- Are you serious? :) Dec 5, 2015 at 2:06

Metasploit can generate some malicious files, such as PDFs. Malware analysis isn't necessarily just Windows PE files so it might be a good idea to look into other file formats. Metaploit could be useful to generate your own samples to analyze.

Msfvenom might be interesting to you as well. It is a tool that generates shellcode given a payload. Generated shellcode might not always be the best though.


You may find other people code useful and metasplot is good to test and understand how things can be exploited.

For reversing there are alot of videos and sildes that other people have released explaining how they achieved there goals

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.