docker-cuckoo - Cuckoo Sandbox Dockerfile

项目说明

!cuckoo-logo Dockerfile _beta_

![CircleCI]() ![License]() ![Docker Stars]() ![Docker Pulls]() ![Docker Image]()

> This repository contains a Dockerfile of Cuckoo Sandbox.

---

Notice

* :new: Checkout the new docs here
* :construction: WARNING: Currently only works with remote machinery: esx, and xenserver.

Table of Contents

!cuckoo-logo Dockerfile _beta_

- Notice
- Dependencies
- Image Tags
- Installation
- To Run on OSX
- Getting Started
- Now Na To
- Documentation
- Known Issues
- Issues
- Todo
- Credits
- CHANGELOG
- Contributing
- License

Dependencies

* blacktop/yara:3.7
* blacktop/:2.6

Image Tags

> NOTE: _tags latest and_ \*2.0\_\_ contain all of cuckoosandbox/community

> * tag modified is the _awesome_ spender-sandbox of cuckoo and contains all of spender-sandbox/community-modified

Installation

1. Install Docker.
2. Install docker-compose
3. Download trusted build from public Docker Registry: docker pull blacktop/cuckoo

To Run on OSX

* Install Homebrew

Or install Docker for Mac

Getting Started

Now Na To

* With docker-machine : ip)
* With Docker for Mac :

!cuckoo-dashboard

Documentation

* Usage
* A Subcommands
* Running Modified
* Running with
* Tips and Tricks

Known Issues

Currently won't work with , Workstation/Fusion or KVM/qemu, but I have an idea on how to do it. :wink: see the NOTES

If you are getting issues with running elasticsearch you can try running: sysctl -w =262144

Issues

Find a bug? Want more features? Find something missing in the documentation? Let me know! Please don't hesitate to file an issue and I'll get right on it.

Todo

* [x] Install/Run Cuckoo Sandbox
* [x] Break mongo out into a separate container using docker-compose
* [x] Fix blacktop/yara and blacktop/ so I can use them as a base images for this image
* [x] Create docker-entryporint.sh to use same container as daemon or web app or api or utility, etc
* [ ] Figure out how to link to a analysis Windows be great if it was running in another container)
* [x] Correctly link mongo/elasticsearch in confs or document how to do it at runtime (or use docker-entryporint BEST OPTION)
* [x] add wait-for-it.sh to wait for postgres before API starts
* [ ] Web reverse proxy with SSL
* [ ] Add snort or suricata or both
* [x] Get modified of cuckoo to install/run in docker

Credits

Using blacktop/cuckoo with brought to you by the awesome work done by and remotevbox

CHANGELOG

See CHANGELOG.md

Contributing

See all contributors on GitHub.

Please update the CHANGELOG.md and submit a Pull Request on GitHub.

License

MIT Copyright (c) 2015-2020 blacktop

项目信息

开发语言：Shell

Star 数：332

技术要点

该项目属于病毒分析方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Cuckoo Sandbox Dockerfile展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。