[lsp]

Okay,

I'm considering buying a 'cracked' exploit builder from one of the tor-based marketplaces, just because I'm lazy and it's cheap.

How can I verify that it's safe to use? I'll be running in a VM anyway but would like to know of any simple/entry level methods of checking for trojans etc.

Bare in mind that I'm a shit reverse engineererer. I've just never had much reason to practice the skill.