I hope you already know, this year Cuckoo Sandbox joined the Google Summer of Code program thanks to the Honeynet Project.

We proposed two project ideas: a Linux analyzer project and a Mac OS X analyzer project.

We got a lot of submissions, many talented and skilled students applied with their project proposal. Sadly Google gave only 8 slots for all the Honeynet organization, so trying to decide which lucky students would eventually be accepted was an hard task.

Difficult decisions unfortunately had to be made to best use the limited number of slots, so only the best student of …

After a while we finally released Cuckoo Sandbox 1.2!

It is one of the Cuckoo’s release with the most impressive amount of new features, just to mention a few:

• XenServer machinery support
• Physical machine support, to run analysis on bare metal
• Comparative reporting, you can compare analysis in a fancy way
• Improved visualization of network data

A complete list of feature is available in the announce post, I kindly suggest to have a look over it.

Starting with Cuckoo Sandbox 1.2, which will be released soon, the old data cleanup tool will be deprecated in favor of a new cleanup method.

The old clean tool, still available, it is the clean.sh script in the tools directory. It is a bash script used to delete the data inside the storage directory (malware samples and reports), logs directory and db directory. The downside is that if you are not using SQLite database but  MySQL or PostgreSQL and if you enable the MongoDB reporting module to store analysis results in MongoDB, clean.sh won’t clean up …

I am getting older and I need to write down commands I use rarely.

Cuckoo sandbox expects to found all network interfaces configured in its configuration file up when you start it.

If you configured Cuckoo to bind on, for example, VirtualBox virtual interface although it is not up and working, Cuckoo will raise an error to tell you it cannot operate with an interface down.

Cuckoo Sandbox 1.2-dev
www.cuckoosandbox.org
Copyright (c) 2010-2014

2014-08-24 00:21:33,713 [root] CRITICAL: CuckooCriticalError: Unable to bind ResultServer on 192.168.56.1:2042: [Errno 99] Cannot assign requested address …