XhstormR


On a dark desert highway, cool wind in my hair.


Cuckoo

Updated on 2020-04-27

https://github.com/cuckoosandbox/cuckoo

https://cuckoo.sh/docs/installation/index.html

Basic

conda config --add channels conda-forge
conda create -y -n myenv2 pycrypto m2crypto python=2
conda activate myenv2

python -m pip install --index-url=https://mirrors.aliyun.com/pypi/simple/ --upgrade cuckoo M2CryptoWin64

cuckoo init
cuckoo community
cuckoo

cuckoo submit --package exe --options arguments="-Lvk http://www.qq.com" curl.exe

Web

cuckoo web runserver 0.0.0.0:1234

MongoDB

mongod --dbpath D:\Work\mongo\db --bind_ip_all

mongo
----
use admin
db.createUser({user: "root", pwd: "123456", roles: [{db: "admin", role: "root"}]})
use cuckoo
db.createUser({user: "123",  pwd: "123456", roles: [{db: "cuckoo", role: "dbOwner"}]})
db.getUsers()

mongod --dbpath D:\Work\mongo\db --bind_ip_all --auth

API

cuckoo api -H 0.0.0.0 -p 1337

python -m pip install --index-url=https://mirrors.aliyun.com/pypi/simple/ --upgrade flask

curl -H "Authorization: Bearer giDMhiP63PZiCfnI0Oz3Yw" http://127.0.0.1:1337/tasks/list

Misc

mklink cuckoo cuckoo.exe
tcpdump -D
getmac /fo list /v
Lib\site-packages\cuckoo\auxiliary\sniffer.py
----
err_whitelist_start
----
"tcpdump.exe: listening on ",
resultserver 的 IP 为主机 HOST-ONLY 网卡的 IPv4 地址,推荐设置为 192.168.137.1。

Reference


TOP