detux
A multiplatform Linux sandbox for malware traffic analysis and IOC capture using QEMU emulation.
What is detux?
Detux is a multiplatform Linux sandbox for dynamic malware analysis, designed to execute suspicious Linux binaries in isolated environments and capture their network traffic. It uses QEMU to emulate various CPU architectures, enabling security researchers to analyze malware targeting different platforms. The tool extracts Indicators of Compromise (IOCs) from captured packets and provides both static and dynamic analysis reports.
Security researchers, malware analysts, and incident response teams who need to analyze Linux-based malware in a controlled, multi-architecture environment.
Detux offers a unique combination of multi-architecture emulation via QEMU and automated network traffic analysis, making it a versatile tool for Linux malware research. Its ability to automatically detect CPU architectures and produce customizable JSON reports simplifies the analysis workflow compared to manual sandbox setups.
Overview
The Multiplatform Linux Sandbox
Use Cases
Best For
- Analyzing network behavior of Linux malware across different CPU architectures
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
