-2

I learned basis of assembly language with, both, AT&T and Intel style. After that I gone through buffer overflow and how to use shellcode with it. Should I go for Metasploit now?

  • Depends on, if you want to focus on reversing, analysing malware, metasploit won't help you. You can use metasploit to test exploits. – Dominik Antal Jan 7 '14 at 10:00
5

Nope. Metasploit is a pentester framework, not a reversing/malware-dev framework. Instead, you should master a debugger (IDA, Radare2, OllyDbg, etc) and at least one scripting language (Python or Ruby).

  • Does Python or Ruby helps in RE? – Pranit Kothari Jan 7 '14 at 9:13
  • 1
    Scripting language does help for automation. And, moreover, most of the tools in RE are coded in one of these languages (easy prototyping and quite robust in the long term). – perror Jan 7 '14 at 9:17
4

No.               ​  

We're looking for long answers that provide some explanation and context. Don't just give a one-line answer; explain why your answer is right, ideally with citations. Answers that don't include explanations may be removed.

  • +1. Thanks for your answer. Actually, I got your point, but can accept only one answer. – Pranit Kothari Jan 7 '14 at 6:24
  • "This does not provide an answer to the question." -- Are you serious? :) – Jason Geffner Dec 5 '15 at 2:06
3

Metasploit can generate some malicious files, such as PDFs. Malware analysis isn't necessarily just Windows PE files so it might be a good idea to look into other file formats. Metaploit could be useful to generate your own samples to analyze.

Msfvenom might be interesting to you as well. It is a tool that generates shellcode given a payload. Generated shellcode might not always be the best though.

2

You may find other people code useful and metasplot is good to test and understand how things can be exploited.

For reversing there are alot of videos and sildes that other people have released explaining how they achieved there goals

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.