NyxPE — Nyx Rescue Environment

Guia de uso das ferramentas  •  por Pablo Murad (runawaydevil)  •  github.com/runawaydevil  •  build 2026-07-12
Como funciona: os programas ficam em Y:\Programs (fora do boot.wim) e aparecem no Menu Iniciar → NyxPE, por categoria. Ha dois tipos: GUI abre uma janela ao clicar; CLI abre um prompt de comando ja na pasta da ferramenta — digite o comando (ex.: rg --help) para usar. Ferramentas de linha de comando nao "fazem nada" sozinhas, isso e normal.

Core Utilities

FerramentaTipoComo usar
IrfanViewGUIIrfanView - abra pelo menu.
jqCLIProcessa JSON no terminal. Ex.: jq . arquivo.json
mpvGUIReprodutor de midia (GUI).
RapidCRC UnicodeGUIRapidCRC Unicode - abra pelo menu.
ripgrepCLIBusca de texto recursiva. Ex.: rg "senha" C:\Usuarios
SumatraPDFGUISumatraPDF - abra pelo menu.

File Management

FerramentaTipoComo usar
7-ZipGUI7-Zip - abra pelo menu.
Double CommanderGUIGerenciador de arquivos duplo painel (GUI).
EverythingGUIEverything - abra pelo menu.
Explorer++GUIExplorer++ - abra pelo menu.
FastCopyGUIVerify current license edition at audit time (historically freeware; 5.x GPLv3).
grepWinGUIgrepWin - abra pelo menu.
HxDGUIHxD - abra pelo menu.
Notepad++GUINotepad++ - abra pelo menu.
Q-DirGUIQ-Dir - abra pelo menu.
TeraCopyGUITeraCopy - abra pelo menu.
WinDirStatGUIWinDirStat - abra pelo menu.
WizTreeGUIWizTree - abra pelo menu.

Disk Management

FerramentaTipoComo usar
AOMEI Partition AssistantGUICOMMERCIAL: official script integrates user-supplied licensed files.
BleachBitGUIBleachBit - abra pelo menu.
BOOTICEGUIBOOTICE - abra pelo menu.
DefragglerGUIDefraggler - abra pelo menu.
DiskGeniusGUICOMMERCIAL: official script integrates user-supplied licensed files.
DiskPart LauncherGUIDiskPart Launcher - abra pelo menu.
DiskWipeGUIDiskWipe - abra pelo menu.
DriveLetterViewGUIDriveLetterView - abra pelo menu.
Free Raid RecoveryGUIFree Raid Recovery - abra pelo menu.
HDD Low Level Format ToolGUICOMMERCIAL: official script integrates user-supplied licensed files.
HotSwap!GUIHotSwap! - abra pelo menu.
ImDisk ToolkitGUIVirtual disk mounting. Test carefully in PE; driver load required.
Linux ReaderGUICOMMERCIAL: official script integrates user-supplied licensed files.
MiniTool Partition Wizard 12GUICOMMERCIAL: official script integrates user-supplied licensed files.
OSFMountGUIRedistribution unclear -> MANUAL placeholder.
RufusGUICria pendrive bootavel (interface grafica).
Ventoy2DiskGUIInstala o Ventoy em pendrive (interface grafica).
VeraCryptGUIVeraCrypt - abra pelo menu.
WinContigGUIWinContig - abra pelo menu.

Backup & Imaging

FerramentaTipoComo usar
Acronis True ImageGUICOMMERCIAL: official script integrates user-supplied licensed files.
Acronis True Image 2021GUICOMMERCIAL: official script integrates user-supplied licensed files.
Active@ Disk ImageGUICOMMERCIAL: official script integrates user-supplied licensed files.
AOMEI BackupperGUICOMMERCIAL: official script integrates user-supplied licensed files.
AutoBackup7ProGUICOMMERCIAL: official script integrates user-supplied licensed files. Caused the 02:04 build Halt when selected without a source path. Keep DESELECTED unless configured.
Drive SnapshotGUICOMMERCIAL: official script integrates user-supplied licensed files.
Hasleo Backup SuiteGUICOMMERCIAL: official script integrates user-supplied licensed files.
HDCloneGUICOMMERCIAL: official script integrates user-supplied licensed files.
HDD Raw CopyGUICOMMERCIAL: official script integrates user-supplied licensed files.
Macrium Reflect 8GUICOMMERCIAL: official script integrates user-supplied licensed files.
Macrium Reflect XGUICOMMERCIAL: official script integrates user-supplied licensed files.
rcloneCLICopia para nuvem. Ex.: rclone config (depois) rclone copy origem remoto:destino
Robocopy LauncherCLIRobocopy Launcher - abra pelo menu.
UltraISOGUICOMMERCIAL: official script integrates user-supplied licensed files.
wimlib-imagexCLIManipula .wim/.esd. Ex.: wimlib-imagex info imagem.wim

Boot & Deployment

FerramentaTipoComo usar
BCDBoot LauncherCLIRebuild boot files: bcdboot W:\Windows.
BCDEdit LauncherCLIBCDEdit Launcher - abra pelo menu.
Dism++GUIDism++ - abra pelo menu.
Driver Store ExplorerGUIDriver Store Explorer - abra pelo menu.
ProduKeyGUIProduKey - abra pelo menu.
ShowKeyPlusGUIRecupera a chave do Windows (GUI, suporta hive offline).
WinNTSetupGUIWinNTSetup - abra pelo menu.

Diagnostics & Repair

FerramentaTipoComo usar
BlueScreenViewGUIBlueScreenView - abra pelo menu.
CheckDisk GUIGUICheckDisk GUI - abra pelo menu.
CHKDSK LauncherCLIAbre prompt para checar disco. Ex.: chkdsk C: /f /r
CrystalDiskInfoGUICrystalDiskInfo - abra pelo menu.
DISM Repair LauncherCLIReparo de imagem. Ex.: DISM /Image:C:\ /Cleanup-Image /RestoreHealth
FullEventLogViewGUIFullEventLogView - abra pelo menu.
GSmartControlGUIS.M.A.R.T. grafico dos discos (GUI).
h2testwGUIh2testw - abra pelo menu.
Microsoft DaRT 10GUICOMMERCIAL: user must supply licensed files. Official script handles it.
Offline SFCGUIOffline SFC - abra pelo menu.
Offline SFC LauncherCLIReparo de sistema offline. Ex.: sfc /scannow /offbootdir=C:\ /offwindir=C:\Windows
ProcDumpGUIProcDump - abra pelo menu.
Process ExplorerGUISuperseded by Sysinternals Suite; keep one.
Process MonitorGUIOverlaps Sysinternals Suite.
smartmontoolsCLISaude S.M.A.R.T. do disco. Ex.: bin\smartctl -a /dev/sda
VictoriaGUIVictoria - abra pelo menu.

System Information

FerramentaTipoComo usar
AIDA64GUICOMMERCIAL/MANUAL.
BatteryInfoViewGUIBatteryInfoView - abra pelo menu.
BGInfoGUIBGInfo - abra pelo menu.
DesktopInfoGUIDesktopInfo - abra pelo menu.
Installed Software (PE)GUIInstalled Software (PE) - abra pelo menu.
MonitorInfoViewGUIMonitorInfoView - abra pelo menu.
PCI-ZGUIPCI-Z - abra pelo menu.
RunScannerGUIRunScanner - abra pelo menu.
ServiWinGUIServiWin - abra pelo menu.
SpeccyGUISpeccy - abra pelo menu.
SSD-ZGUISSD-Z - abra pelo menu.
Sysinternals SuiteGUISuite Sysinternals: Process Explorer, Autoruns, TCPView (GUI) + Sigcheck, Handle, PsList, Strings (CLI).
USB Device Tree ViewerGUIConfirm redistribution terms at audit; else MANUAL.

Hardware Diagnostics

FerramentaTipoComo usar
CPU-ZGUICPU-Z - abra pelo menu.
GPU-ZGUIGPU-Z - abra pelo menu.
HWiNFOGUIHWiNFO - abra pelo menu.
Keyboard TestGUIKeyboard Test - abra pelo menu.
Monitor TestGUIMonitor Test - abra pelo menu.
MultiMonitorToolGUIMultiMonitorTool - abra pelo menu.

Hardware Stress

FerramentaTipoComo usar
CrystalDiskMarkGUIStress category; OFF in Core.
FurMarkGUIThermal risk warning; OFF in Core.
HeavyLoadGUIOFF in Core.
OCCTGUIOFF in Core.
Prime95GUIOFF in Core.

File Recovery

FerramentaTipoComo usar
DMDE FreeGUIDMDE Free - abra pelo menu.
EaseUS Data Recovery WizardGUICOMMERCIAL: official script integrates user-supplied licensed files.
Hasleo Data RecoveryGUICOMMERCIAL: official script integrates user-supplied licensed files.
PreviousFilesRecoveryGUIPreviousFilesRecovery - abra pelo menu.
RecuvaGUIRecuva - abra pelo menu.
ShadowCopyViewGUIShadowCopyView - abra pelo menu.
TestDisk & PhotoRecGUITestDisk & PhotoRec - abra pelo menu.
Unstoppable CopierGUIUnstoppable Copier - abra pelo menu.

Forensics

FerramentaTipoComo usar
BrowserDownloadsViewGUIBrowserDownloadsView - abra pelo menu.
BrowsingHistoryViewGUIBrowsingHistoryView - abra pelo menu.
ChainsawCLICaca de ameacas em logs EVTX. Ex.: chainsaw hunt C:\Windows\System32\winevt\Logs -s sigma --mapping mappings
Eric Zimmerman Tools (CLI)CLIFerramentas forenses CLI (Eric Zimmerman). Ex.: MFTECmd -f C:\$MFT --csv saida. Precisa de .NET.
ExifToolCLIMetadados de arquivos. Ex.: exiftool foto.jpg
hashdeep/md5deepCLIHash recursivo. Ex.: hashdeep64 -r -c sha256 C:\pasta
HayabusaCLITimeline/Sigma de eventos Windows. Ex.: hayabusa csv-timeline -d <pasta_logs> -o saida.csv
ImageCacheViewerGUIImageCacheViewer - abra pelo menu.
Internet History BrowserGUIInternet History Browser - abra pelo menu.
LastActivityViewGUILastActivityView - abra pelo menu.
Mail ViewerGUIAllowed: views mail content, not a credential extractor.
RecentFilesViewGUIRecentFilesView - abra pelo menu.
ShellBagsViewGUIShellBagsView - abra pelo menu.
USBDeviewGUIUSBDeview - abra pelo menu.
USBDriveLogGUIUSBDriveLog - abra pelo menu.
Windows File AnalyzerGUIWindows File Analyzer - abra pelo menu.
Windows Registry RecoveryGUIWindows Registry Recovery - abra pelo menu.
WinFE Write Protect ToolGUICore of read-only forensic posture.
WinPrefetchViewGUIWinPrefetchView - abra pelo menu.
YARA CLICLIRegras de deteccao. Ex.: yara64 regra.yar C:\alvo

Malware Removal

FerramentaTipoComo usar
AutorunsGUIAutoruns - abra pelo menu.
Emsisoft Emergency KitGUIEmsisoft Emergency Kit - abra pelo menu.
ESET Online ScannerGUINeeds network for defs.
Kaspersky Virus Removal ToolGUIRe-download for fresh defs.
Malwarebytes AdwCleanerGUISingle exe with embedded defs; re-download near use for fresh signatures.
Microsoft Safety ScannerGUISignatures expire ~10 days; Sync-NyxPEMalwarePackages must re-download near build/use. Never ship stale.
Sophos Scan & CleanGUIRegistration/EULA -> MANUAL placeholder.
Trellix StingerGUITrellix Stinger - abra pelo menu.
Trend Micro HouseCallGUITrend Micro HouseCall - abra pelo menu.

Networking

FerramentaTipoComo usar
Advanced IP ScannerGUIAdvanced IP Scanner - abra pelo menu.
curlCLIBaixa/testa HTTP. Ex.: curl -O https://site/arquivo.zip
CurrPortsGUICurrPorts - abra pelo menu.
iperf3GUIiperf3 - abra pelo menu.
Mozilla FirefoxGUIAlready integrated + NyxPE bookmark branding.
NmapCLIScanner de rede. Ex.: nmap -sn 192.168.0.0/24
OpenSSH (Win32)CLICliente SSH/SCP. Ex.: ssh usuario@host
PortQryGUIPortQry - abra pelo menu.
PuTTYGUIPuTTY - abra pelo menu.
simplewallGUIsimplewall - abra pelo menu.
tcpingGUItcping - abra pelo menu.
WakeMeOnLanGUIWakeMeOnLan - abra pelo menu.
WifiInfoViewGUIWifiInfoView - abra pelo menu.
WinMTRGUIWinMTR - abra pelo menu.
WinSCPGUIWinSCP - abra pelo menu.

Remote Support

FerramentaTipoComo usar
RustDeskGUIRustDesk - abra pelo menu.

Account Recovery

FerramentaTipoComo usar
Local Admin Account Reset (NTPWEdit)CLIReset AUTORIZADO de conta local (avisa, faz backup das hives, chama o NTPWEdit).
manage-bde LauncherCLIBitLocker status/unlock with a user-supplied key.
NTPWEditGUIALLOWED: authorized local account reset. Wrapped by NyxPE account-reset (backup+warnings).
Offline Registry EditorGUIGuided load/unload of an offline SOFTWARE/SYSTEM hive.
repair-bde LauncherCLIrepair-bde Launcher - abra pelo menu.
SAM/SYSTEM/SECURITY Hive BackupCLIBackup de SAM/SYSTEM/SECURITY antes de mexer no registro.