Alternatives to REMnux
Linux toolkit for reverse engineering and analysing malicious software. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
REMnux
Linux toolkit for reverse engineering and analysing malicious software.
Replacements
Listings that take over the same core job as REMnux.
Kali Linux
Debian-based distribution preloaded with security testing tools.
Kali Linux is a Debian-based distribution aimed at general security testing, so its preloaded tools cover penetration testing broadly rather than a curated malware analysis set.
CAINE
Ubuntu-based digital forensics live distribution.
CAINE is an Ubuntu-based live distribution for digital forensics that mounts devices read-only by default, focusing on evidence handling rather than malware reverse engineering.
BlackArch Linux
Arch-based security distribution with a repository of 2,800 tools.
BlackArch is an Arch-based distribution with about 2,800 packaged security tools of varying quality, assuming Arch knowledge instead of offering REMnux's curated preconfiguration.
Parrot OS
Lightweight security distribution with pentesting and privacy editions.
Parrot OS is a lighter security distribution with pentesting and privacy editions, oriented toward testing rather than a dedicated malware analysis toolkit.
Similar software
Related functionality, not a direct replacement.
Ghidra
The NSA's reverse engineering framework, with a decompiler that turns machine code back into readable C.
radare2
Command-line reverse engineering framework and binary analysis toolkit.
YARA
Pattern-matching engine for identifying and classifying malware samples.
capa
Identify likely capabilities inside executable files.
Volatility 3
Memory forensics framework for extracting artefacts from RAM images.
Hybrid Analysis
Free online sandbox that runs submitted files and URLs and reports on their behaviour.
