All about the remote administration tools

.
├── index.md
├── attachment
└── content
    ├── meterpreter
    ├── poisonivy
    │   └── main.md
    └── communication-lib

• 关于ShellCode的若干前置知识
• PoisonIvy ShellCode 简析
• PoisonIvy 逆向初步
• PoisonIvy PeDiy
• Meterpreter 工作方式简析
• 剥离Msf与Meterpreter

• SecurityBits - http://badishi.com/
• Reverse Engineering Poison Ivy's Injected Code Fragments - http://volatility-labs.blogspot.com/2012/10/reverse-engineering-poison-ivys.html
• Metasploit Unleashed - http://www.offensive-security.com/metasploit-unleashed