Cuckoo-setup

RELEASE=$(lsb_release -c | awk '{print $2}')

sudo echo deb [arch=amd64] https://download.virtualbox.org/virtualbox/debian $RELEASE contrib | sudo tee -a /etc/apt/sources.list.d/virtualbox.list

wget -q https://www.virtualbox.org/download/oracle_vbox_2016.asc -O- | sudo apt-key add -

Install pip for python2.7

wget https://bootstrap.pypa.io/pip/2.7/get-pip.py

get python2.7

sudo apt-add-repository universe

sudo apt update

sudo apt install python2-minimal

Check Python2 version

python2 -V

get pip

sudo python2.7 get-pip.py

sudo rm get-pip.py

Update repos

sudo apt-get update && sudo apt-get upgrade -y

echo "[+] Installing dependencies"

sudo apt-get install unzip python2.7 python-setuptools python-dev libffi-dev libssl-dev libjpeg-dev zlib1g-dev swig mongodb postgresql libpq-dev tcpdump apparmor-utils libcap2-bin git vim tmux curl virtualbox-6.0 mlocate -y

tcpdump specific configuration

sudo aa-disable /usr/sbin/tcpdump

Add cuckoo user

sudo adduser cuckoo

sudo groupadd pcap

sudo usermod -a -G pcap cuckoo

sudo usermod -a -G vboxusers cuckoo

Configure necessary capabilities for tcpdump binary

sudo chgrp pcap /usr/sbin/tcpdump

sudo setcap cap_net_raw,cap_net_admin=eip /usr/sbin/tcpdump

echo "[+] Installing mitmproxy"

wget https://snapshots.mitmproxy.org/6.0.2/mitmproxy-6.0.2-linux.tar.gz

gunzip -d mitmproxy-6.0.2-linux.tar.gz

tar -xvf mitmproxy-6.0.2-linux.tar

sudo mv mitmproxy /usr/bin/mitmproxy

sudo mv mitmweb /usr/bin/mitmweb

sudo mv mitmdump /usr/bin/mitmdump

sudo rm mitmproxy-6.0.2-linux.tar

echo "[+] Installing volatility"

wget http://downloads.volatilityfoundation.org/releases/2.6/volatility_2.6_lin64_standalone.zip

unzip volatility_2.6_lin64_standalone.zip

sudo mv volatility_2.6_lin64_standalone/volatility_2.6_lin64_standalone /usr/bin/volatility

sudo rm -rf volatility_2.6_lin64_standalone*

echo "[+] Installing cucko..."

sudo pip2.7 install -U cuckoo

Run cuckoo

cuckoo -d

Modified

Do the following changes in the conf files.

cuckoo.conf

sudo nano ~/.cuckoo/conf/cuckoo.conf

auxiliary.conf

sudo nano ~/.cuckoo/conf/auxiliary.conf

virtualbox.conf

sudo nano ~/.cuckoo/conf/virtualbox.conf

processing.conf

sudo nano ~/.cuckoo/conf/processing.conf

reporting.conf

sudo nano ~/.cuckoo/conf/reporting.conf

Run web

cuckoo web