📄
REMnux Documentation
  • REMnux: A Linux Toolkit for Malware Analysis
  • Install the Distro
    • Get the Virtual Appliance
    • Install from Scratch
    • Add to an Existing System
    • Run REMnux as a Container
    • Keep the Distro Up to Date
  • Discover the Tools
    • Examine Static Properties
      • General
      • PE Files
      • ELF Files
      • .NET
      • Deobfuscation
    • Statically Analyze Code
      • General
      • Unpacking
      • PE Files
      • Python
      • Scripts
      • Java
      • .NET
      • Flash
      • Android
    • Dynamically Reverse-Engineer Code
      • General
      • Shellcode
      • Scripts
      • ELF Files
    • Perform Memory Forensics
    • Explore Network Interactions
      • Monitoring
      • Connecting
      • Services
    • Investigate System Interactions
    • Analyze Documents
      • General
      • PDF
      • Microsoft Office
      • Email Messages
    • Gather and Analyze Data
    • View or Edit Files
    • General Utilities
  • Run Tools in Containers
    • Docker Images of Malware Analysis Tools
  • Behind the Scenes
    • People
    • Technologies
      • SaltStack Management
      • REMnux Installer
      • State Files Without the REMnux Installer
      • Debian Packages
      • Website and Docs
    • License
  • Tips and More
    • REMnux Configuration Tips
    • REMnux Tool Tips
    • Malware Analysis Training
    • REMnux Website
  • Get Involved
    • Ask and Answer Questions
    • Write About the Tools
    • Add or Update Tools
      • Contribute a Salt State File
      • Contribute a Debian Package
      • Contribute a Dockerfile
    • Implement Enhancements
Powered by GitBook
On this page
  • fakedns
  • dnsresolver.py
  • fakemail
  • accept-all-ips
  • netcat
  • Nginx
  • inspircd 3
  • INetSim
  • FakeNet-NG
  1. Discover the Tools
  2. Explore Network Interactions

Services

Explore Network Interactions

PreviousConnectingNextInvestigate System Interactions

Last updated 3 months ago

fakedns

Respond to DNS queries with the specified IP address.

Website: Author: Mike Murr: mike@socialexploits.com, License: Apache License 2.0 Notes: Use the -h parameter to display usage and help details. State File:

dnsresolver.py

Respond to DNS queries in a controlled way.

Website: Author: Didier Stevens: License: Public Domain State File:

fakemail

Intercept and examine SMTP email activity with this fake SMTP server.

Website: Author: Oliver Cope License: Apache License 2.0: State File:

accept-all-ips

Accept connections to all IPv4 and IPv6 addresses and redirect it to the corresponding local port.

Website: Author: Lenny Zeltser, with input from the community License: GNU General Public License (GPL) v3+ Notes: accept-all-ips <start|stop> State File:

netcat

Read and write data across network connections.

Nginx

Web server

inspircd 3

Examine IRC activity with this IRC server.

INetSim

Emulate common network services and interact with malware.

FakeNet-NG

Emulate common network services and interact with malware.

Website: Author: Hobbit, Mike Frysinger, a3alex, Anatoly Techtonik License: Public Domain Notes: nc State File:

Website: Author: Igor Sysoev, Nginx Inc. License: Free, custom license: Notes: The webroot directory is /var/www/html. Control the daemon using: httpd <start|stop|status|restart>. State File:

Website: Author: InspIRCd Development Team License: GNU General Public License (GPL) v2: State File:

Website: Author: Thomas Hungenberg, Matthias Eckert License: GNU General Public License (GPL) v3 Notes: inetsim State File:

Website: Author: FireEye Inc, Peter Kacherginsky, Michael Bailey: License: Apache License 2.0: Notes: Run the tool using sudo fakenet. First, edit /usr/local/lib/python2.7/dist-packages/fakenet/configs/default.ini, changing the LinuxRestrictInterface parameter to your Ethernet network interface name, such as ens33. State File:

https://github.com/SocialExploits/fakedns/blob/main/fakedns.py
https://socialexploits.com
remnux.tools.fakedns
https://blog.didierstevens.com/2021/07/15/new-tool-dnsresolver-py/
https://twitter.com/DidierStevens
remnux.scripts.dnsresolver
https://hg.sr.ht/~olly/fakemail
https://hg.sr.ht/~olly/fakemail/browse/LICENSE.txt?rev=default
remnux.python3-packages.fakemail
https://github.com/REMnux/distro/blob/master/files/accept-all-ips
remnux.scripts.accept-all-ips
https://nc110.sourceforge.io/
remnux.packages.netcat
https://nginx.org
https://nginx.org/LICENSE
remnux.packages.nginx
https://www.inspircd.org/
https://docs.inspircd.org/license/
remnux.packages.inspircd
https://www.inetsim.org/
remnux.packages.inetsim
https://github.com/fireeye/flare-fakenet-ng
https://github.com/fireeye/flare-fakenet-ng/blob/master/AUTHORS
https://github.com/fireeye/flare-fakenet-ng/blob/master/LICENSE.txt
remnux.python3-packages.fakenet-ng