run_tool
Execute malware analysis commands on REMnux to extract strings, analyze files, and investigate suspicious samples using tools like pestr and strings.
Instructions
Execute a command in REMnux. Supports piped commands (e.g., 'oledump.py sample.doc | grep VBA'). String extraction: For PE files use 'pestr'; for non-PE use 'strings' (ASCII) and 'strings -el' (Unicode).
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"command": "<command>"
},
"name": "run_tool"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| command | Yes | Command to execute (can include pipes, e.g., 'strings sample.exe | grep -i password') | |
| input_file | No | Input file path (relative to samples dir, or absolute path in local mode) - appended to command | |
| timeout | No | Timeout in seconds (default: 300) |