Skip to content
This repository has been archived by the owner on Feb 23, 2021. It is now read-only.

Commit

Permalink
update to 2.0.5.3
Browse files Browse the repository at this point in the history
  • Loading branch information
@blacktop
blacktop committed Mar 21, 2018
1 parent ed5cae0 commit 6d40410
Show file tree
Hide file tree
Showing 2 changed files with 72 additions and 76 deletions.
52 changes: 26 additions & 26 deletions 2.0/Dockerfile
View file
Expand Up @@ -2,46 +2,46 @@ FROM blacktop/volatility:2.6

LABEL maintainer "https://github.com/blacktop"

ENV CUCKOO_VERSION 2.0.5.1
ENV CUCKOO_VERSION 2.0.5.3
ENV CUCKOO_CWD /cuckoo
ENV SSDEEP 2.14.1

# Install Cuckoo Sandbox Required Dependencies
COPY requirements.txt /tmp/requirements.txt
RUN apk add --no-cache tcpdump py-lxml py-chardet py-libvirt py-crypto curl
RUN apk update && apk add --no-cache postgresql-dev \
gcc \
g++ \
python-dev \
libpq \
py-pip \
gcc \
g++ \
python-dev \
libpq \
py-pip \
&& pip install --upgrade pip wheel \
&& pip install psycopg2 \
&& apk del --purge postgresql-dev \
gcc \
g++
gcc \
g++
RUN apk add --no-cache -t .build-deps \
linux-headers \
openssl-dev \
libxslt-dev \
libxml2-dev \
python-dev \
libffi-dev \
build-base \
libstdc++ \
zlib-dev \
libc-dev \
jpeg-dev \
file-dev \
automake \
autoconf \
libtool \
py-pip \
git \
linux-headers \
openssl-dev \
libxslt-dev \
libxml2-dev \
python-dev \
libffi-dev \
build-base \
libstdc++ \
zlib-dev \
libc-dev \
jpeg-dev \
file-dev \
automake \
autoconf \
libtool \
py-pip \
git \
&& set -x \
&& echo "===> Install ssdeep..." \
&& curl -Ls https://github.com/ssdeep-project/ssdeep/releases/download/release-$SSDEEP/ssdeep-$SSDEEP.tar.gz > \
/tmp/ssdeep-$SSDEEP.tar.gz \
/tmp/ssdeep-$SSDEEP.tar.gz \
&& cd /tmp \
&& tar xzf ssdeep-$SSDEEP.tar.gz \
&& cd ssdeep-$SSDEEP \
Expand Down
96 changes: 46 additions & 50 deletions README.md
View file
@@ -1,59 +1,59 @@
# ![cuckoo-logo](https://github.com/blacktop/docker-cuckoo/raw/master/docs/img/logo.png) Dockerfile-beta
# ![cuckoo-logo](https://github.com/blacktop/docker-cuckoo/raw/master/docs/img/logo.png) Dockerfile <beta>

[![CircleCI](https://circleci.com/gh/blacktop/docker-cuckoo.png?style=shield)](https://circleci.com/gh/blacktop/docker-cuckoo) [![License](http://img.shields.io/:license-mit-blue.svg)](http://doge.mit-license.org) [![Docker Stars](https://img.shields.io/docker/stars/blacktop/cuckoo.svg)](https://hub.docker.com/r/blacktop/cuckoo/) [![Docker Pulls](https://img.shields.io/docker/pulls/blacktop/cuckoo.svg)](https://hub.docker.com/r/blacktop/cuckoo/) [![Docker Image](https://img.shields.io/badge/docker%20image-475MB%20MB-blue.svg)](https://hub.docker.com/r/blacktop/cuckoo/)
[![CircleCI](https://circleci.com/gh/blacktop/docker-cuckoo.png?style=shield)](https://circleci.com/gh/blacktop/docker-cuckoo) [![License](http://img.shields.io/:license-mit-blue.svg)](http://doge.mit-license.org) [![Docker Stars](https://img.shields.io/docker/stars/blacktop/cuckoo.svg)](https://hub.docker.com/r/blacktop/cuckoo/) [![Docker Pulls](https://img.shields.io/docker/pulls/blacktop/cuckoo.svg)](https://hub.docker.com/r/blacktop/cuckoo/) [![Docker Image](https://img.shields.io/badge/docker%20image-498MB-blue.svg)](https://hub.docker.com/r/blacktop/cuckoo/)

> This repository contains a **Dockerfile** of [Cuckoo Sandbox](https://github.com/cuckoosandbox/cuckoo).
--------------------------------------------------------------------------------
---

## Notice

- :new: Checkout the new VirtualBox docs [here](https://github.com/blacktop/docker-cuckoo/blob/master/docs/virtualbox.md)
- :construction: WARNING: Currently only works with remote machinery: **esx, vsphere and xenserver**.
* :new: Checkout the new VirtualBox docs [here](https://github.com/blacktop/docker-cuckoo/blob/master/docs/virtualbox.md)
* :construction: WARNING: Currently only works with remote machinery: **esx, vsphere and xenserver**.

**Table of Contents**

- [Dependencies](#dependencies)
- [Image Tags](#image-tags)
- [Installation](#installation)
- [To Run on OSX](#to-run-on-osx)
- [Getting Started](#getting-started)
- [Documentation](#documentation)
- [Known Issues](#known-issues)
- [Issues](#issues)
- [Todo](#todo)
- [CHANGELOG](#changelog)
- [Contributing](#contributing)
- [License](#license)
* [Dependencies](#dependencies)
* [Image Tags](#image-tags)
* [Installation](#installation)
* [To Run on OSX](#to-run-on-osx)
* [Getting Started](#getting-started)
* [Documentation](#documentation)
* [Known Issues](#known-issues)
* [Issues](#issues)
* [Todo](#todo)
* [CHANGELOG](#changelog)
* [Contributing](#contributing)
* [License](#license)

## Dependencies

- [blacktop/yara:3.7](https://hub.docker.com/r/blacktop/yara/)
- [blacktop/volatility:2.6](https://hub.docker.com/r/blacktop/volatility/)
* [blacktop/yara:3.7](https://hub.docker.com/r/blacktop/yara/)
* [blacktop/volatility:2.6](https://hub.docker.com/r/blacktop/volatility/)

## Image Tags

```bash
REPOSITORY TAG SIZE
blacktop/cuckoo latest 367MB
blacktop/cuckoo 2.0 367MB
blacktop/cuckoo latest 498MB
blacktop/cuckoo 2.0 498MB
blacktop/cuckoo modified (WIP) 317.1 MB
blacktop/cuckoo 1.2 258.6 MB
```

> **NOTE:** _tags **latest** and_ *2.0__ contain all of `cuckoosandbox/community`
> **NOTE:** _tags **latest** and_ \*2.0\_\_ contain all of `cuckoosandbox/community`
> - tag **modified** is the _awesome_ **spender-sandbox** version of cuckoo and contains all of `spender-sandbox/community-modified`
> * tag **modified** is the _awesome_ **spender-sandbox** version of cuckoo and contains all of `spender-sandbox/community-modified`
## Installation

1. Install [Docker](https://docs.docker.com).
2. Install [docker-compose](https://docs.docker.com/compose/install/)
3. Download [trusted build](https://hub.docker.com/r/blacktop/cuckoo/) from public [Docker Registry](https://hub.docker.com/): `docker pull blacktop/cuckoo`
1. Install [Docker](https://docs.docker.com).
2. Install [docker-compose](https://docs.docker.com/compose/install/)
3. Download [trusted build](https://hub.docker.com/r/blacktop/cuckoo/) from public [Docker Registry](https://hub.docker.com/): `docker pull blacktop/cuckoo`

## To Run on OSX

- Install [Homebrew](http://brew.sh)
* Install [Homebrew](http://brew.sh)

```bash
$ brew tap caskroom/cask
Expand All @@ -80,11 +80,7 @@ $ curl localhost:8000/cuckoo/status

```json
{
"cpuload": [
0.01220703125,
0.03515625,
0.025390625
],
"cpuload": [0.01220703125, 0.03515625, 0.025390625],
"diskspace": {},
"hostname": "195855fb100f",
"machines": {
Expand All @@ -105,18 +101,18 @@ $ curl localhost:8000/cuckoo/status

### Now Navigate To

- With [docker-machine](https://docs.docker.com/machine/) : `http://$(docker-machine ip)`
- With [Docker for Mac](https://docs.docker.com/engine/installation/mac/) : `http://localhost`
* With [docker-machine](https://docs.docker.com/machine/) : `http://$(docker-machine ip)`
* With [Docker for Mac](https://docs.docker.com/engine/installation/mac/) : `http://localhost`

![cuckoo-dashboard](https://github.com/blacktop/docker-cuckoo/raw/master/docs/img/2.0/dashboard.png)

## Documentation

- [Usage](https://github.com/blacktop/docker-cuckoo/blob/master/docs/usage.md)
- [Available Subcommands](https://github.com/blacktop/docker-cuckoo/blob/master/docs/subcmd.md)
- [Running Modified Version](https://github.com/blacktop/docker-cuckoo/blob/master/docs/modified.md)
- [Running with VirtualBox](https://github.com/blacktop/docker-cuckoo/blob/master/docs/virtualbox.md)
- [Tips and Tricks](https://github.com/blacktop/docker-cuckoo/blob/master/docs/tips-tricks.md)
* [Usage](https://github.com/blacktop/docker-cuckoo/blob/master/docs/usage.md)
* [Available Subcommands](https://github.com/blacktop/docker-cuckoo/blob/master/docs/subcmd.md)
* [Running Modified Version](https://github.com/blacktop/docker-cuckoo/blob/master/docs/modified.md)
* [Running with VirtualBox](https://github.com/blacktop/docker-cuckoo/blob/master/docs/virtualbox.md)
* [Tips and Tricks](https://github.com/blacktop/docker-cuckoo/blob/master/docs/tips-tricks.md)

## Known Issues

Expand All @@ -128,16 +124,16 @@ Find a bug? Want more features? Find something missing in the documentation? Let

## Todo

- [x] Install/Run Cuckoo Sandbox
- [x] Break mongo out into a separate container using docker-compose
- [x] Fix blacktop/yara and blacktop/volatility so I can use them as a base images for this image
- [x] Create docker-entryporint.sh to use same container as daemon or web app or api or utility, etc
- [ ] Figure out how to link to a analysis Windows VM (would be great if it was running in another container)
- [x] Correctly link mongo/elasticsearch in confs or document how to do it at runtime (or use docker-entryporint BEST OPTION)
- [x] add wait-for-it.sh to wait for postgres before API starts
- [ ] Web reverse proxy via Nginx with SSL
- [ ] Add snort or suricata or both
- [x] Get `modified` version of cuckoo to install/run in docker
* [x] Install/Run Cuckoo Sandbox
* [x] Break mongo out into a separate container using docker-compose
* [x] Fix blacktop/yara and blacktop/volatility so I can use them as a base images for this image
* [x] Create docker-entryporint.sh to use same container as daemon or web app or api or utility, etc
* [ ] Figure out how to link to a analysis Windows VM (would be great if it was running in another container)
* [x] Correctly link mongo/elasticsearch in confs or document how to do it at runtime (or use docker-entryporint BEST OPTION)
* [x] add wait-for-it.sh to wait for postgres before API starts
* [ ] Web reverse proxy via Nginx with SSL
* [ ] Add snort or suricata or both
* [x] Get `modified` version of cuckoo to install/run in docker

## Credits

Expand All @@ -155,4 +151,4 @@ Please update the [CHANGELOG.md](https://github.com/blacktop/docker-cuckoo/blob/

## License

MIT Copyright (c) 2015-2017 **blacktop**
MIT Copyright (c) 2015-2018 **blacktop**

0 comments on commit 6d40410

Please sign in to comment.