Skip to content
CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox)
Perl
Branch: master
Clone or download
Latest commit 82172c6 Aug 2, 2012
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
README Intermediate code (0.4 ok) Aug 2, 2012
cuckoomx.conf Intermediate code (0.4 ok) Aug 2, 2012
cuckoomx.pl Intermediate code (0.4 ok) Aug 2, 2012

README

CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox) 
Copyright (C) 2012 Xavier Mertens <xavier(at)rootshell(dot)be>

More information is available here: http://blog.rootshell.be/2012/06/20/cuckoomx-autom…ng-with-cuckoo/

History
-------
2012/06/20	First release
2012/08/02	Improved code - fixed support for Cuckoo 0.4, processing URLs

Installation
------------

Requirement:
- A running instance of Postfix
- A running install of Cuckoo

1. Copy cuckoomx.pl in your prefered directory.
2. Edit the configuration file path (line 58).
3. Copy the sample configuration file in the right directory and change it to match your environment.
4. Edit your Postfix master.cf file:

	- Change the smtp service:

		# ==========================================================================
		# service type  private unpriv  chroot  wakeup  maxproc command + args
		#               (yes)   (yes)   (yes)   (never) (100)
		# ==========================================================================
		smtp      inet  n       -       -       -       -       smtpd
		        -o content_filter=cuckoomx

	- Create a new service (bottom of the file)

		cuckoomx  unix  -       n       n       -       -       pipe
		        user=cuckoo argv=/data/cuckoo/cuckoomx.pl -f ${sender} ${recipient}

	- Restart Postfix

You can’t perform that action at this time.