Tobias Kessels 6bfcfd7935 Add comprehensive offline help system with fuzzy search
🎯 Enhanced Features:
- Integrated navi, cheat, tldr, and fzf for interactive help
- Custom cheat sheets for PDF analysis, malware analysis, and system utilities
- find-tool command for fuzzy searching through all REMnux tools
- Comprehensive help command with workflows and examples
- Complete offline documentation system

📚 Help System Components:
- help                    - Main help system
- help tools [term]       - Search for tools (fuzzy matching)
- help cheat <tool>       - Show command examples
- help examples           - Browse examples interactively (navi + fzf)
- help pdf/malware/forensics - Analysis workflows
- help --offline          - Verify offline capabilities

🛠️ Tools Added:
- navi: Interactive cheat sheet browser
- cheat: Command-line cheat sheets
- tldr: Quick command examples
- fzf: Fuzzy finder (already included)

All documentation works completely offline with local REMnux docs database
and custom cheat sheets for analysis workflows.
2025-09-30 13:01:03 +02:00
2025-09-30 12:40:55 +02:00

docker_file_analysis

REMnux-Based File Analysis Container

This container is now based on the REMnux malware analysis toolkit, providing a comprehensive set of tools for file analysis, especially PDFs and malware samples.

Usage

# REMnux-based version
docker build -f Dockerfile.remnux -t tabledevil/file-analysis:remnux .
docker run -it --rm -v "$(pwd):/data" tabledevil/file-analysis:remnux

# Original Kali-based version (legacy)
docker run -it --rm -v "$(pwd):/data" tabledevil/file-analysis

Included Tools (REMnux Base + Additional)

PDF Analysis Suite (from REMnux)

  • peepdf - PDF analysis framework with JavaScript detection
  • pdf-parser.py - Extract and analyze PDF elements (Didier Stevens)
  • pdfid.py - Quick PDF structure overview (Didier Stevens)
  • origami - Ruby gem suite (pdfcop, pdfextract, pdfmetadata)
  • pdftk-java - PDF manipulation and flattening
  • qpdf - PDF manipulation (merge, convert, transform)
  • pdfresurrect - Extract previous versions from PDFs
  • pdftool - Analyze PDF incremental updates

Malware Analysis (Additional)

  • capa - Malware capability detection (Mandiant)
  • box-js - JavaScript sandbox analysis
  • oletools - Office document analysis suite
    • oledump.py
    • rtfdump.py
    • emldump.py
    • and more

Data Analysis & Utilities (Additional)

  • visidata - Data exploration and analysis
  • unfurl - URL and data analysis (DFIR)
  • base64dump - Base64 decoder (Didier Stevens)
  • tesseract - OCR text extraction
  • exiftool - Metadata extraction

System Tools

  • mc - Midnight Commander file manager
  • p7zip-full - Archive utilities
  • All standard REMnux tools and utilities
Description
Docker Repo for File-Analysis-Image
Readme 156 KiB
Languages
Shell 87.2%
Python 7.1%
Dockerfile 3.7%
Makefile 2%