remnux

Complete Claude skills toolkit for professional malware analysis. 5 specialized skills covering triage, dynamic analysis, detection engineering, and reporting. Works with REMnux/FlareVM offline environments.

Spin up a fully configured, host‑only malware analysis lab with FlareVM, REMnux or CAPE Sandbox using a few repeatable commands.

This project focuses on static and dynamic malware analysis using REMnux and FlareVM. It involves setting up analysis environments on both platforms to examine malware behavior, dissect malicious code, and understand threat vectors. Goals: enhance malware detection, improve analysis techniques, and strengthen overall cybersecurity defenses.

Menú de herramientas para análisis de malware

A programmable network simulator for malware analysis; simulate any network protocol with small, sandboxed, shareable Lua handlers.

I explored advanced techniques for dissecting and understanding malicious software, diving deep into the intricate world of cybersecurity. From identifying potential threats to analyzing their behavior, every step of the process was a fascinating journey into digital security.

Triage-first malware analysis workflow for REMnux (OpenClaw skill)

Behavioral Malware Analysis of a Simulated Multi-Stage Windows Malware Sample using FLARE-VM and REMnux. Evidence-driven DFIR investigation with IOC extraction, MITRE ATT&CK mapping, and detection engineering.

REMnux in a Box - Containerized Malware Analysis and fully operational within your Browser

Static and behavioral malware analysis of LokiBot using FlareVM, REMnux, VirusTotal, and Hybrid Analysis. Includes MITRE ATT&CK mapping and prevention guidance.

Static analysis of a malicious RTF document through to C2 identification, with a full findings report.

Analysis of a .NET malware loader tagged as Agent Tesla: hidden image payload, Defender-exclusion behavior, ATT&CK mapping, and draft YARA rules.

This repository contains two static malware analysis labs: one exploring Emotet using VirusTotal and Hybrid Analysis, and another focused on keylogger dissection using REMnux and PEStudio.

Comprehensive static malware analysis of suspicious Windows PE samples using REMnux, FLARE-VM, CAPA, PEStudio, FLOSS, PEview, and MITRE ATT&CK mapping.

PCAP-based analysis of CryptoLocker and Word-Dropper malware samples using Wireshark and REMnux. Focus on DNS, HTTP, and TLS artifacts to identify adversary behavior and exfiltration attempts.

Seven full Debian-family tool collections in one Ubuntu 26.10 / WSL2 workspace: Kali, Parrot, REMnux, SIFT, BackBox, CAINE and Tsurugi. MCP integration for AI assistants and NVIDIA CUDA GPU support, powered by rootless Podman + Distrobox. Experimental; MIT-licensed.

A structured malware analysis lab covering static analysis, dynamic behavioral analysis, memory forensics, and detection engineering with Sigma and Wazuh.

Static and dynamic analysis of 5 real malware samples in an isolated REMnux sandbox — SOC malware-analysis portfolio project

Guided, safety-hardened desktop GUI for the REMnux maldoc tools (pdfid, pdf-parser, oledump, oletools, peepdf): triage a suspicious PDF or Office file in one place, with explanations and next steps.

Personal cybersecurity homelab documentation — pfSense + REMnux malware analysis sandbox with strong isolation. Built for SOC skills, cert prep, and portfolio.