Increase your metasm-fu -- @0vercl0k Basics: http://code.google.com/p/metasm/source/browse/README http://code.google.com/p/metasm/source/browse/samples/ Debugging: http://www.time0ut.org/blog/reverse/metasm-for-fun/ Automatic Exploitation stuff: http://esec-lab.sogeti.com/dotclear/index.php?post/2010/07/09/88-exploitation-de-format-string-avec-metasm http://esec-lab.sogeti.com/dotclear/index.php?post/2010/06/19/85-automatic-exploitation-with-metasm http://esec-lab.sogeti.com/dotclear/index.php?post/2010/06/14/84-exploitation-automatique-avec-metasm x64 Emulation: http://esec-lab.sogeti.com/dotclear/index.php?post/2011/02/16/x64-spoon Processor In Metasm: http://esec-lab.sogeti.com/dotclear/index.php?post/2009/10/02/71-how-to-implement-a-new-process-in-metasm Binary Tracing: http://esec-lab.sogeti.com/dotclear/index.php?post/2010/07/19/90-metasm-howto-bintrace ( source here: http://esec-lab.sogeti.com/dotclear/public/blog/metasm/bintrace.zip ) Talks: check talks/ :)