GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → blacktop → Docker Cuckoo

blacktop / Docker Cuckoo

Licence: other
Cuckoo Sandbox Dockerfile

Programming Languages

shell
77523 projects

Labels

dockermalwaremalware-analysissandbox

Projects that are alternatives of or similar to Docker Cuckoo

Drakvuf Sandbox
DRAKVUF Sandbox - automated hypervisor-level malware analysis system
Stars: ✭ 384 (+32.87%)
Mutual labels:  sandbox, malware, malware-analysis
Norimaci
Norimaci is a simple and lightweight malware analysis sandbox for macOS
Stars: ✭ 37 (-87.2%)
Mutual labels:  sandbox, malware, malware-analysis
Pafish
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
Stars: ✭ 2,026 (+601.04%)
Mutual labels:  sandbox, malware, malware-analysis
HomebrewOverlay
Browser extension adware (showHomebrewOverlayOuter)
Stars: ✭ 52 (-82.01%)
Mutual labels:  malware, malware-analysis
decrypticon
Java-layer Android Malware Simplifier
Stars: ✭ 17 (-94.12%)
Mutual labels:  malware, malware-analysis
Bold-Falcon
毕方智能云沙箱(Bold-Falcon)是一个开源的自动化恶意软件分析系统;方班网络安全综合实验-设计类；
Stars: ✭ 30 (-89.62%)
Mutual labels:  sandbox, malware
memscrimper
Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"
Stars: ✭ 25 (-91.35%)
Mutual labels:  sandbox, malware
maldetect
Debian packaging of Linux Malware Detect (https://github.com/rfxn/linux-malware-detect)
Stars: ✭ 48 (-83.39%)
Mutual labels:  malware, malware-analysis
MalwareDatabase
One of the few malware collection
Stars: ✭ 37 (-87.2%)
Mutual labels:  malware, malware-analysis
Malware-Machine-Learning
Malware Machine Learning
Stars: ✭ 26 (-91%)
Mutual labels:  malware, malware-analysis
MalScan
A Simple PE File Heuristics Scanners
Stars: ✭ 41 (-85.81%)
Mutual labels:  malware, malware-analysis
Simpleator
Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that were added in Windows 10 Spring Update (1803), also called "Redstone 4", with additional improvements that were made in Windows 10 October Update (1809), aka "Redstone 5".
Stars: ✭ 260 (-10.03%)
Mutual labels:  malware, malware-analysis
OLEPackagerFormat
OLE Package Format Documentation
Stars: ✭ 18 (-93.77%)
Mutual labels:  malware, malware-analysis
mobileAudit
Django application that performs SAST and Malware Analysis for Android APKs
Stars: ✭ 140 (-51.56%)
Mutual labels:  malware, malware-analysis
malware-writeups
Personal research and publication on malware families
Stars: ✭ 104 (-64.01%)
Mutual labels:  malware, malware-analysis
malice-av
Malice AntiVirus Plugins
Stars: ✭ 98 (-66.09%)
Mutual labels:  malware, malware-analysis
fake-sandbox
👁‍🗨 This script will simulate fake processes of analysis sandbox/VM software that some malware will try to avoid.
Stars: ✭ 110 (-61.94%)
Mutual labels:  sandbox, malware
MalwareHashDB
Malware hashes for open source projects.
Stars: ✭ 31 (-89.27%)
Mutual labels:  malware, malware-analysis
freki
🐺 Malware analysis platform
Stars: ✭ 327 (+13.15%)
Mutual labels:  malware, malware-analysis
yara
Malice Yara Plugin
Stars: ✭ 27 (-90.66%)
Mutual labels:  malware, malware-analysis
View All Similar Projects ➔

cuckoo-logo Dockerfile beta

CircleCI License Docker Stars Docker Pulls Docker Image

This repository contains a Dockerfile of Cuckoo Sandbox.

Notice

  • 🆕 Checkout the new VirtualBox docs here
  • 🚧 WARNING: Currently only works with remote machinery: esx, vsphere and xenserver.

Table of Contents

Dependencies

Image Tags

REPOSITORY          TAG                 SIZE
blacktop/cuckoo     latest              498MB
blacktop/cuckoo     2.0                 498MB
blacktop/cuckoo     modified (WIP)      317.1 MB
blacktop/cuckoo     1.2                 258.6 MB

NOTE: tags latest and *2.0__ contain all of cuckoosandbox/community

  • tag modified is the awesome spender-sandbox version of cuckoo and contains all of spender-sandbox/community-modified

Installation

  1. Install Docker.
  2. Install docker-compose
  3. Download trusted build from public Docker Registry: docker pull blacktop/cuckoo

To Run on OSX

$ brew tap caskroom/cask
$ brew cask install virtualbox
$ brew install docker
$ brew install docker-machine
$ docker-machine create --driver virtualbox default
$ eval $(docker-machine env)

Or install Docker for Mac

Getting Started

$ git clone https://github.com/blacktop/docker-cuckoo
$ cd docker-cuckoo
$ docker-compose up -d
# For docker-machine
$ curl $(docker-machine ip):8000/cuckoo/status
# For Docker for Mac
$ curl localhost:8000/cuckoo/status

{
  "cpuload": [0.01220703125, 0.03515625, 0.025390625],
  "diskspace": {},
  "hostname": "195855fb100f",
  "machines": {
    "available": 0,
    "total": 0
  },
  "memory": 88.55692015425926,
  "tasks": {
    "completed": 0,
    "pending": 0,
    "reported": 0,
    "running": 0,
    "total": 0
  },
  "version": "2.0-dev"
}

Now Navigate To

cuckoo-dashboard

Documentation

Known Issues

Currently won't work with VirtualBox, VMWare Workstation/Fusion or KVM/qemu, but I have an idea on how to do it. 😉 see the NOTES

If you are getting issues with running elasticsearch you can try running: sysctl -w vm.max_map_count=262144

Issues

Find a bug? Want more features? Find something missing in the documentation? Let me know! Please don't hesitate to file an issue and I'll get right on it.

Todo

  • [x] Install/Run Cuckoo Sandbox
  • [x] Break mongo out into a separate container using docker-compose
  • [x] Fix blacktop/yara and blacktop/volatility so I can use them as a base images for this image
  • [x] Create docker-entryporint.sh to use same container as daemon or web app or api or utility, etc
  • [ ] Figure out how to link to a analysis Windows VM (would be great if it was running in another container)
  • [x] Correctly link mongo/elasticsearch in confs or document how to do it at runtime (or use docker-entryporint BEST OPTION)
  • [x] add wait-for-it.sh to wait for postgres before API starts
  • [ ] Web reverse proxy via Nginx with SSL
  • [ ] Add snort or suricata or both
  • [x] Get modified version of cuckoo to install/run in docker

Credits

Using blacktop/cuckoo with VirtualBox brought to you by the awesome work done by @ilyaglow and remotevbox

CHANGELOG

See CHANGELOG.md

Contributing

See all contributors on GitHub.

Please update the CHANGELOG.md and submit a Pull Request on GitHub.

License

MIT Copyright (c) 2015-2020 blacktop

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].