Cuckoo GSOC: about winners and winners

Posted on May 10, 2015 in Blog • Tagged with cuckoo, GSOC2015 • 1 min read

I hope you already know, this year Cuckoo Sandbox joined the Google Summer of Code program thanks to the Honeynet Project.

We proposed two project ideas: a Linux analyzer project and a Mac OS X analyzer project.

We got a lot of submissions, many talented and skilled students applied with their project proposal. Sadly Google gave only 8 slots for all the Honeynet organization, so trying to decide which lucky students would eventually be accepted was an hard task.

Difficult decisions unfortunately had to be made to best use the limited number of slots, so only the best student of …

Continue reading

Cuckoo Sandbox Summer of Code 2015

Posted on March 10, 2015 in Tools • Tagged with cuckoo, GSOC, GSOC2015 • 3 min read

This summer the Cuckoo Sandbox project is participating the Google Summer of Code 2015, thanks to a big effort of the Honeynet Project.
This is a great opportunity for students who would like to work on Cuckoo and get paid for it! This is a great challenge and an huge opportunity to work on a real malware sandbox, write code and gain valuable experience, and help improving the open source security tools ecosystem.
Almost all college and graduate students are eligible, we are searching for problem solving people with strong development skills who would like to learn about malware and …

Continue reading

Cuckoo Sandbox 1.2 released

Posted on March 05, 2015 in Tools • Tagged with cuckoo • 1 min read

After a while we finally released Cuckoo Sandbox 1.2!

It is one of the Cuckoo’s release with the most impressive amount of new features, just to mention a few:

  • XenServer machinery support
  • Physical machine support, to run analysis on bare metal
  • Comparative reporting, you can compare analysis in a fancy way
  • Improved visualization of network data

A complete list of feature is available in the announce post, I kindly suggest to have a look over it.

Continue reading

How to clean data in Cuckoo Sandbox

Posted on March 02, 2015 in Tools • Tagged with cuckoo • 1 min read

Starting with Cuckoo Sandbox 1.2, which will be released soon, the old data cleanup tool will be deprecated in favor of a new cleanup method.

The old clean tool, still available, it is the script in the tools directory. It is a bash script used to delete the data inside the storage directory (malware samples and reports), logs directory and db directory. The downside is that if you are not using SQLite database but  MySQL or PostgreSQL and if you enable the MongoDB reporting module to store analysis results in MongoDB, won’t clean up …

Continue reading

Bringing up VirtualBox interface before starting Cuckoo

Posted on August 27, 2014 in Tools • Tagged with cuckoo, virtualbox • 1 min read

I am getting older and I need to write down commands I use rarely.

Cuckoo sandbox expects to found all network interfaces configured in its configuration file up when you start it.

If you configured Cuckoo to bind on, for example, VirtualBox virtual interface although it is not up and working, Cuckoo will raise an error to tell you it cannot operate with an interface down.

Cuckoo Sandbox 1.2-dev
Copyright (c) 2010-2014

2014-08-24 00:21:33,713 [root] CRITICAL: CuckooCriticalError: Unable to bind ResultServer on [Errno 99] Cannot assign requested address …

Continue reading