General

Dynamically Reverse-Engineer Code

Frida

Trace the execution of a process to analyze its behavior.

Website: https://frida.re Author: Ole Andre Vadla Ravnas License: wxWindows Library License 3.1: https://github.com/frida/frida/blob/main/COPYING Notes: frida, frida-ps, frida-trace, frida-discover, frida-ls-devices, frida-kill State File: remnux.python3-packages.frida

Wine

Run Windows applications.

Website: https://www.winehq.org Author: https://wiki.winehq.org/Acknowledgements License: GNU Lesser General Public License (LGPL) v2.1 or later: https://wiki.winehq.org/Licensing Notes: wine State File: remnux.packages.wine

radare2

Examine binary files, including disassembling and debugging. Includes r2ai and decai plugins for LLM-powered analysis (API key or local Ollama required), plus the r2ghidra plugin for Ghidra decompilation via the pdg command.

Website: https://www.radare.org/n/radare2.html Author: https://github.com/radareorg/radare2/blob/master/AUTHORS.md License: GNU Lesser General Public License (LGPL) v3: https://github.com/radareorg/radare2/blob/master/COPYING Notes: r2, rasm2, rabin2, rahash2, rafind2, r2ai, decai, pdg State File: remnux.packages.radare2

r2pipe

Examine binary files, including disassembling and debugging.

Website: https://rada.re/n/r2pipe.html Author: radareorg License: MIT State File: remnux.python3-packages.r2pipe

x64dbg Automate MCP (OpenCode skills)

Drive x64dbg on a remote Windows VM from OpenCode on REMnux, with eight AI commands for tracing, unpacking, state snapshots, decompiling, YARA scanning, and vulnerability hunting.

Website: https://github.com/REMnux/x64dbg-skills-opencode Author: Darius Houle: https://x.com/dariushoule License: MIT License: https://github.com/REMnux/x64dbg-skills-opencode/blob/main/LICENSE Notes: Ships disabled by default in OpenCode. It only works once x64dbg runs with the x64dbg-automate plugin in Remote mode on a separate Windows VM and you connect to it from OpenCode. The skills add OpenCode commands that begin with /x64dbg. Forked from dariushoule/x64dbg-skills (a Claude Code plugin) and adapted for OpenCode on REMnux. State File: remnux.tools.x64dbg-automate-mcp

x64dbg Documentation

Read the official x64dbg documentation offline, including the command reference and format specifiers.

Website: https://github.com/x64dbg/docs Author: x64dbg contributors: https://github.com/x64dbg License: MIT License: https://github.com/x64dbg/docs/blob/master/LICENSE Notes: The documentation is in /usr/local/share/x64dbg-docs. It refreshes every time you run remnux install, so you can look up x64dbg command syntax without internet access. State File: remnux.tools.x64dbg-docs