remnux-tools

This repository contains my scripts to install REMnux and Sift with some added tools. I started this repository to be able to quickly install a new virtual machine with the tools I use or would like to use more often. This way it is easy to maintain the same images on many computers. To make it even easier to install I use packer.io to automate process. My repository for this is called packer.

The following scripts are available for installs:

• setup-remnux.sh - install REMnux and tools.
• setup-sift.sh - install Sift and tools.
• setup-arkime.sh - install Arkime.

The scripts are tested on Ubuntu 18.04 LTS for Sift and Arkime. Remnux uses 20.04.

setup-remnux.sh

This script installs REMnux and some other tools.

The additions are:

• Ubuntu is updated
• Some general packages are installed. This includes bsdgames (some useful tools for CTFs), vim, tshark, exfat and more. Also a basic development environment is installed
• Installs open-vm-tools for VMware
• Create a basic directory structure
• Run the REMnux install script
• Install Google Chrome
• The repository ppa:pi-rho/security is activated and newer versions of many tools are updated from there
• Install some scripts. psparser.py, vt.py, testssl.sh and floss
• Install Brim
• Install DAMM
• Install Rekall
• Turn off sound

If you run make dotfiles my version of .bashrc, .vimrc are installed. There are a couple of aliases for docker images from REMnux. They use directories under ~/docker/.

setup-sift.sh

This script installs Sift and some additional tools listed below:

• Ubuntu is updated
• Some general packages are installed. This includes bsdgames (some useful tools for CTFs), vim, tshark, exfat and more. Also a basic development environment is installed
• Installs open-vm-tools
• Create a basic directory structure
• Run the SIFT install script
• Install Google Chrome
• Install Tekdefense Automater
• Turn off sound

setup-arkime.sh

This script installs Arkime.

Test Suricata functionality with:

curl testmynids.org/uid/index.html

Initial setup

First install Git and clone the repository. Run all commands as a regular user and only use sudo when needed.

sudo apt-get install -y git
git clone https://github.com/reuteras/remnux-tools.git
cd remnux-tools

Install

Choose if you would like to install REMnux or SIFT. Don't try to run both scripts in the same VM since it will not work. To install REMnux with my extra packages listed above:

./bin/setup-remux.sh      # or make install

Or to install SIFT with additions listed above:

./bin/setup-sift.sh

Update

To update REMnux and tools run:

./bin/update-remnux.sh     # or make update

To update SIFT and tools run:

./bin/update-sift.sh

Clean

This command will clean apt and write zeros to free space. Use this command if you like to shrink the size of your virtual machine.

./bin/clean.sh      # or make clean

If you use VMware remember to run the following command to shrink the image:

vmware-vdiskmanager -k Virtual\ Disk.vmdk

Extra utilities

There are some extra utilities in the bin directory.

• api.sh - configures API keys from config.cfg. Currently has support for
  • Shodan
• install-vmhgfs.sh - Install the vmghfs kernel module.
• run-one.sh - Run one function from common. Use -l or --list for list of functions.