📄
REMnux Documentation
  • REMnux: A Linux Toolkit for Malware Analysis
  • Install the Distro
    • Get the Virtual Appliance
    • Install from Scratch
    • Add to an Existing System
    • Run REMnux as a Container
    • Keep the Distro Up to Date
  • Discover the Tools
    • Examine Static Properties
      • General
      • PE Files
      • ELF Files
      • .NET
      • Deobfuscation
    • Statically Analyze Code
      • General
      • Unpacking
      • PE Files
      • Python
      • Scripts
      • Java
      • .NET
      • Flash
      • Android
    • Dynamically Reverse-Engineer Code
      • General
      • Shellcode
      • Scripts
      • ELF Files
    • Perform Memory Forensics
    • Explore Network Interactions
      • Monitoring
      • Connecting
      • Services
    • Investigate System Interactions
    • Analyze Documents
      • General
      • PDF
      • Microsoft Office
      • Email Messages
    • Gather and Analyze Data
    • View or Edit Files
    • General Utilities
  • Run Tools in Containers
    • Docker Images of Malware Analysis Tools
  • Behind the Scenes
    • People
    • Technologies
      • SaltStack Management
      • REMnux Installer
      • State Files Without the REMnux Installer
      • Debian Packages
      • Website and Docs
    • License
  • Tips and More
    • REMnux Configuration Tips
    • REMnux Tool Tips
    • Malware Analysis Training
    • REMnux Website
  • Get Involved
    • Ask and Answer Questions
    • Write About the Tools
    • Add or Update Tools
      • Contribute a Salt State File
      • Contribute a Debian Package
      • Contribute a Dockerfile
    • Implement Enhancements
Powered by GitBook
On this page
  • GNU Project Debugger
  • edb
  • ltrace
  • strace
  1. Discover the Tools
  2. Dynamically Reverse-Engineer Code

ELF Files

Dynamically Reverse-Engineer Code

PreviousScriptsNextPerform Memory Forensics

GNU Project Debugger

Multi-language debugger

Website: Author: License: GNU General Public License (GPL): State File:

edb

An AArch32/x86/x86-64 debugger, well suited for debugging ELF files.

Website: Author: Evan Teran: License: GNU General Public License (GPL) v2: State File:

ltrace

Trace library calls and signals.

Website: Author: Juan Cespedes License: GNU General Public License (GPL) v2: State File:

strace

Trace process' system calls and signals.

Website: Author: Paul Kranenburg, Branko Lankester, Rick Sladkey, etc. License: GNU General Public License v2.1+: State File:

https://www.sourceware.org/gdb/
https://www.gnu.org/software/gdb/committee/
https://www.sourceware.org/gdb/download/onlinedocs/gdb.html#Summary
remnux.packages.gdb
https://github.com/eteran/edb-debugger
http://codef00.com/about
https://github.com/eteran/edb-debugger/blob/master/COPYING
remnux.packages.edb-debugger
https://ltrace.org
https://gitlab.com/cespedes/ltrace/-/blob/master/COPYING
remnux.packages.ltrace
https://strace.io
https://gitlab.com/strace/strace/blob/master/COPYING
remnux.packages.strace