I'm not afraid to get my hands dirty with C/C++ but that's quite a challenge because I usually write in C# and JavaScript. Working with memory and call stacks directly is not something I do but it's something I could start doing with a little practice. The problem is I suspect a lot of exploits can be complicated or at least use language/protocol subtleties that a novice in the language, like myself, might not be keen to.

I'm trying to figure out if I have a good idea for a product . Ideally, a large part of my product (40%) would just be a wrapper around metasploit. So, umm, can you do that? I'm guessing no. But their exploit code is open source so could you copy or port only the exploits you are interested in?

Any advice beyond extremely basic noise (you should talk to a lawyer in your area) is welcome. Thanks!