Skip to content

Instantly share code, notes, and snippets.

@dubs3c
Last active February 3, 2024 10:35
Show Gist options
  • Star 4 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save dubs3c/f6b03a09129c3cf7f82c868bfd39d0b4 to your computer and use it in GitHub Desktop.
Save dubs3c/f6b03a09129c3cf7f82c868bfd39d0b4 to your computer and use it in GitHub Desktop.
Cuckoo Sandbox dependency install script for Ubuntu 20.04
#!/bin/bash
#
# Cucko Sanbox install script
# -----------------------------
# Tested on Ubuntu 20.04 LTS
# ~ dubs3c
#
# Add virtualbox repo to system
# xenial or focal
RELEASE=$(lsb_release -c | awk '{print $2}')
sudo echo deb [arch=amd64] https://download.virtualbox.org/virtualbox/debian $RELEASE contrib | sudo tee -a /etc/apt/sources.list.d/virtualbox.list
wget -q https://www.virtualbox.org/download/oracle_vbox_2016.asc -O- | sudo apt-key add -
# Install pip for python2.7
wget https://bootstrap.pypa.io/2.7/get-pip.py
sudo python2.7 get-pip.py
sudo rm get-pip.py
# Update repos
sudo apt-get update && sudo apt-get upgrade -y
echo "[+] Installing dependencies"
sudo apt-get install unzip python2.7 python-setuptools python-dev libffi-dev libssl-dev libjpeg-dev zlib1g-dev swig mongodb postgresql libpq-dev tcpdump apparmor-utils libcap2-bin git vim tmux curl virtualbox-6.0 mlocate -y
# tcpdump specific configuration
sudo aa-disable /usr/sbin/tcpdump
# Add cucko user
sudo adduser cuckoo
sudo groupadd pcap
sudo usermod -a -G pcap cuckoo
sudo usermod -a -G vboxusers cuckoo
# Configure necessary capabilities for tcpdump binary
sudo chgrp pcap /usr/sbin/tcpdump
sudo setcap cap_net_raw,cap_net_admin=eip /usr/sbin/tcpdump
echo "[+] Installing mitmproxy"
wget https://snapshots.mitmproxy.org/6.0.2/mitmproxy-6.0.2-linux.tar.gz
gunzip -d mitmproxy-6.0.2-linux.tar.gz
tar -xvf mitmproxy-6.0.2-linux.tar
sudo mv mitmproxy /usr/bin/mitmproxy
sudo mv mitmweb /usr/bin/mitmweb
sudo mv mitmdump /usr/bin/mitmdump
sudo rm mitmproxy-6.0.2-linux.tar
echo "[+] Installing volatility"
wget http://downloads.volatilityfoundation.org/releases/2.6/volatility_2.6_lin64_standalone.zip
unzip volatility_2.6_lin64_standalone.zip
sudo mv volatility_2.6_lin64_standalone/volatility_2.6_lin64_standalone /usr/bin/volatility
sudo rm -rf volatility_2.6_lin64_standalone*
echo "[+] Installing cucko..."
sudo pip2.7 install -U cuckoo
# Run cuckoo
cuckoo
@frenchy35
Copy link

Hello, I don’t anderstant why u use python2.7 (Line 18) and re-install python 2.7 after (line 25), tanks for all

Philipp

@dubs3c
Copy link
Author

dubs3c commented May 12, 2021

@frenchy35 Looks like a typo, the installation of dependencies should come first. I'll update the gist.

@ChadDa3mon
Copy link

The pip27 isn't working for me, I have to download it from here.

https://bootstrap.pypa.io/pip/2.7/get-pip.py

Not sure if they've changed things around.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment