📄
📄
📄
📄
REMnux Documentation
Search…
📄
📄
📄
📄
REMnux Documentation
REMnux: A Linux Toolkit for Malware Analysis
Install the Distro
Get the Virtual Appliance
Install from Scratch
Add to an Existing System
Run REMnux as a Container
Keep the Distro Up to Date
Discover the Tools
Examine Static Properties
Statically Analyze Code
Dynamically Reverse-Engineer Code
General
Shellcode
Scripts
ELF Files
Perform Memory Forensics
Explore Network Interactions
Investigate System Interactions
Analyze Documents
Gather and Analyze Data
View or Edit Files
General Utilities
Run Tools in Containers
Docker Images of Malware Analysis Tools
Behind the Scenes
People
Technologies
License
Tips and More
REMnux Configuration Tips
REMnux Tool Tips
Malware Analysis Training
REMnux Website
Get Involved
Ask and Answer Questions
Write About the Tools
Add or Update Tools
Implement Enhancements
Powered By GitBook
Scripts
Dynamically Reverse-Engineer Code

SpiderMonkey (Patched)

Execute and deobfuscate JavaScript using a patched version of Mozilla's standalone JavaScript engine.
Website: https://blog.didierstevens.com/2018/04/19/update-patched-spidermonkey/ Author: SpiderMonkey by Mozilla Foundation, patched by Didier Stevens: https://twitter.com/DidierStevens License: Mozilla Public License 2.0: https://github.com/mozilla/treeherder/blob/master/LICENSE.txt Notes: js-ascii, js-file State File: remnux.tools.js-patched​

objects.js

Emulate common browser and PDF viewer objects, methods, and properties when deobfuscating JavaScript.
Website: https://github.com/REMnux/salt-states/blob/master/remnux/config/objects/objects.js Author: Lenny Zeltser License: Public Domain Notes: The file is in /usr/local/share/remnux State File: remnux.config.objects.init​

STPyV8

Python3 and JavaScript interop engine, fork of the original PyV8 project
Website: https://github.com/area1/stpyv8 Author: Area1 Security License: Apache License 2.0: https://github.com/area1/stpyv8/blob/master/LICENSE.txt State File: remnux.python3-packages.stpyv8​

JStillery

Deobfuscate JavaScript scripts using AST and Partial Evaluation techniques.
Website: https://github.com/mindedsecurity/jstillery Author: Stefano Di Paola, Minded Security: http://www.mindedsecurity.com License: GNU General Public License (GPL) v3: https://github.com/mindedsecurity/JStillery/blob/master/LICENSE Notes: jstillery State File: remnux.node-packages.jstillery​

box-js

Analyze suspicious JavaScript scripts.
Website: https://github.com/CapacitorSet/box-js Author: CapacitorSet License: MIT License: https://github.com/CapacitorSet/box-js/blob/master/LICENSE Notes: box-js, box-export State File: remnux.node-packages.box-js​

SpiderMonkey

Execute and deobfuscate JavaScript using Mozilla's standalone JavaScript engine.

Rhino Debugger

GUI JavaScript debugger
Website: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Debugger Author: Mozilla Project License: Mozilla Public License v2.0: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/License Notes: rhino-debugger State File: remnux.packages.rhino​

PowerShell Core

Run PowerShell scripts and commands.
Website: https://github.com/powershell/powershell Author: Microsoft Corporation License: MIT License: https://github.com/PowerShell/PowerShell/blob/master/LICENSE.txt Notes: pwsh State File: remnux.packages.powershell​
Previous
Shellcode
Next
ELF Files
Last modified 1yr ago
Copy link
On this page
SpiderMonkey (Patched)
objects.js
STPyV8
JStillery
box-js
SpiderMonkey
Rhino Debugger
PowerShell Core