$ sudo apt-get install -y python python-pip python-dev python-sqlalchemy python-dpkt python-jinja2 python-magic python-pymongo python-libvirt subversion git build-essential git libpcre3 libpcre3-dev libpcre++-dev python-bottle libffi-dev libssl-dev libxml2-dev libxslt-dev libxslt1-dev libjpeg-dev libfuzzy-dev ssdeep autoconf automake libtool make gcc
Step3: Upgrade pip-9.0.1-py2.py3-none-any.whlc
$ sudo pip install --upgrade pip
$ sudo pip install -U pip setuptools
Step4: Install Pefile Python Modulec
$ wget https://github.com/erocarrera/pefile/files/192316/pefile-2016.3.28.tar.gz
$ tar zxvf pefile-2016.3.28.tar.gz
$ cd pefile-2016.3.28/
$ sudo python setup.py build
$ sudo python setup.py install
$ cd ..
Step5: Install pydeept Python Module
$ git clone https://github.com/kbandla/pydeep.git pydeep
$ cd pydeep
$ sudo python setup.py build
$ sudo python setup.py install
$ cd ..
Step6: Install jasson-2.10
$ wget http://www.digip.org/jansson/releases/jansson-2.10.tar.gz
$ tar zxvf jansson-2.10.tar.gz
$ cd jansson-2.10/
$ ./configure
$ make
$ sudo make install
$ cd ..
Step7: Install swing-3.0.12
$ wget http://downloads.sourceforge.net/swig/swig-3.0.12.tar.gz
$ tar zxvf swig-3.0.12.tar.gz
$ cd swig-3.0.12/
$ ./configure
$ make
$ sudo make install
$ cd ..
Step8: Install M2Crypto==0.24.0
$ wget https://pypi.python.org/packages/58/75/362faac80a1bc2742b4b696dc350518312043d568bfd2687a9270f18da88/M2Crypto-0.24.0.tar.gz#md5=8e87235942c76d1ba9f999ee33764fdb
$ tar zxvf M2Crypto-0.24.0.tar.gz
$ cd M2Crypto-0.24.0/
$ sudo python setup.py build
$ sudo python setup.py install
$ cd ..
Step9: \Install YARA 3.5
$ sudo apt-get install -y flex bison
$ wget https://github.com/VirusTotal/yara/archive/v3.5.0.tar.gz
$ tar xvfz v3.5.0.tar.gz
$ cd yara-3.5.0/
$ ./bootstrap.sh
$ ./configure --enable-cuckoo --enable-magic
$ make
$ sudo make install
Step10: Install Tcpdump
$ sudo apt-get -y install tcpdump libpcap-dev
$ sudo setcap cap_net_raw,cap_net_admin=eip /usr/sbin/tcpdump
$ getcap /usr/sbin/tcpdump
Step11: "Create ip_tables.sh"
$ echo '#!/bin/bash' >update_ip_tables.sh
$ echo 'iptables -A FORWARD -o eth0 -i vboxnet0 -s 192.168.56.0/24 -m conntrack --ctstate NEW -j ACCEPT' >> update_ip_tables.sh
$ echo 'iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT' >> update_ip_tables.sh
$ echo 'iptables -A POSTROUTING -t nat -j MASQUERADE' >> update_ip_tables.sh
$ echo 'sysctl -w net.ipv4.ip_forward=1' >> update_ip_tables.sh
$ chmod +x ./update_ip_tables.sh
$ sudo ./update_ip_tables.sh
Step12: "Install Dnsmasq"
$ sudo apt-get install -y dnsmasq
$ sudo service dnsmasq start
Step13: "Install volatility、MongoDB、tesseract-oct"
$ sudo apt-get install -y volatility mongodb tesseract-ocr
Step 14: "Install Cuckoo Sandbox"
$ git clone https://github.com/cuckoosandbox/cuckoo
Step 15: "Install Cuckoo Sandbox requirement modules"
$ cd cuckoo/
$ sudo -H pip install -r requirements.txt
Step16: "Install Cuckoo Sandbox utilitys"
$ cd utils/
$ ./community.py -a -f -w
Step17: "Install Install Oracle VM VirtualBox"
$ sudo sh -c 'echo "deb http://download.virtualbox.org/virtualbox/debian xenial contrib" >> /etc/apt/sources.list.d/virtualbox.list'
$ wget -q https://www.virtualbox.org/download/oracle_vbox_2016.asc -O- | sudo apt-key add -
$ wget -q https://www.virtualbox.org/download/oracle_vbox.asc -O- | sudo apt-key add -
$ sudo apt update && sudo apt-get -y install virtualbox-5.1
Step18: "Install Install Oracle VM VirtualBox Extension Pack"
$ wget http://download.virtualbox.org/virtualbox/5.1.18/Oracle_VM_VirtualBox_Extension_Pack-5.1.18-114002.vbox-extpack
$ VBoxManage extpack install Oracle_VM_VirtualBox_Extension_Pack-5.1.18-114002.vbox-extpack
Step19 : "Add cuckoo to Vboxusers Grops"
$ sudo usermod -aG vboxusers cuckoo
========================================================================
install.sh
#!/bin/bash
mkdir install_tmp
cd install_tmp/
echo "====================================="
echo "Ubuntu Packages Update"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
sudo apt-get update
echo "====================================="
echo "Install the dependencies and libraries"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
sudo apt-get install -y python python-pip python-dev python-sqlalchemy python-dpkt python-jinja2 python-magic python-pymongo python-libvirt subversion git build-essential git libpcre3 libpcre3-dev libpcre++-dev python-bottle libffi-dev libssl-dev libxml2-dev libxslt-dev libxslt1-dev libjpeg-dev libfuzzy-dev ssdeep autoconf automake libtool make gcc
echo ""
echo ""
echo "====================================="
echo "Upgrade pip-9.0.1-py2.py3-none-any.whlc"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
sudo pip install --upgrade pip
sudo pip install -U pip setuptools
echo ""
echo ""
echo "====================================="
echo "Install Pefile Python Module"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
wget https://github.com/erocarrera/pefile/files/192316/pefile-2016.3.28.tar.gz
tar zxvf pefile-2016.3.28.tar.gz
cd pefile-2016.3.28/
sudo python setup.py build
sudo python setup.py install
cd ..
echo ""
echo ""
echo "====================================="
echo "Install pydeept Python Module"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
git clone https://github.com/kbandla/pydeep.git pydeep
cd pydeep
sudo python setup.py build
sudo python setup.py install
cd ..
echo ""
echo ""
echo "====================================="
echo "Install jasson-2.10"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
wget http://www.digip.org/jansson/releases/jansson-2.10.tar.gz
tar zxvf jansson-2.10.tar.gz
cd jansson-2.10/
./configure
make
sudo make install
cd ..
echo ""
echo ""
echo "====================================="
echo "Install swing-3.0.12"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
wget http://downloads.sourceforge.net/swig/swig-3.0.12.tar.gz
tar zxvf swig-3.0.12.tar.gz
cd swig-3.0.12/
./configure
make
sudo make install
cd ..
echo ""
echo ""
echo "====================================="
echo "Install M2Crypto==0.24.0"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
wget https://pypi.python.org/packages/58/75/362faac80a1bc2742b4b696dc350518312043d568bfd2687a9270f18da88/M2Crypto-0.24.0.tar.gz#md5=8e87235942c76d1ba9f999ee33764fdb
tar zxvf M2Crypto-0.24.0.tar.gz
cd M2Crypto-0.24.0/
sudo python setup.py build
sudo python setup.py install
cd ..
echo ""
echo ""
echo "====================================="
echo "Install YARA 3.5"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
sudo apt-get install -y flex bison
wget https://github.com/VirusTotal/yara/archive/v3.5.0.tar.gz
tar xvfz v3.5.0.tar.gz
cd yara-3.5.0/
./bootstrap.sh
./configure --enable-cuckoo --enable-magic
make
sudo make install
cd ~
echo ""
echo ""
echo "====================================="
echo "Install Tcpdump"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
sudo apt-get -y install tcpdump libpcap-dev
sudo setcap cap_net_raw,cap_net_admin=eip /usr/sbin/tcpdump
getcap /usr/sbin/tcpdump
echo ""
echo ""
echo "====================================="
echo "Create ip_tables.sh"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
echo '#!/bin/bash' >update_ip_tables.sh
echo 'iptables -A FORWARD -o eth0 -i vboxnet0 -s 192.168.56.0/24 -m conntrack --ctstate NEW -j ACCEPT' >> update_ip_tables.sh
echo 'iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT' >> update_ip_tables.sh
echo 'iptables -A POSTROUTING -t nat -j MASQUERADE' >> update_ip_tables.sh
echo 'sysctl -w net.ipv4.ip_forward=1' >> update_ip_tables.sh
chmod +x ./update_ip_tables.sh
sudo ./update_ip_tables.sh
echo ""
echo ""
echo "====================================="
echo "Install Dnsmasq"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
sudo apt-get install -y dnsmasq
sudo service dnsmasq start
echo ""
echo ""
echo "====================================="
echo "Install volatility,MongoDB,tesseract-oct"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
sudo apt-get install -y volatility mongodb tesseract-ocr
echo ""
echo ""
echo "====================================="
echo "Install Cuckoo Sandbox"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
git clone https://github.com/cuckoosandbox/cuckoo
echo ""
echo ""
echo "====================================="
echo "Install Cuckoo Sandbox requirement modules"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
cd cuckoo/
sudo -H pip install -r requirements.txt
echo ""
echo ""
echo "====================================="
echo "Install Cuckoo Sandbox utilitys"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
cd utils/
./community.py -a -f -w
echo ""
echo ""
echo "Cuckoo Sandbox Installed!"
cd ~
cd install_tmp/
echo ""
echo ""
echo "====================================="
echo "Install Install Oracle VM VirtualBox"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
sudo sh -c 'echo "deb http://download.virtualbox.org/virtualbox/debian xenial contrib" >> /etc/apt/sources.list.d/virtualbox.list'
wget -q https://www.virtualbox.org/download/oracle_vbox_2016.asc -O- | sudo apt-key add -
wget -q https://www.virtualbox.org/download/oracle_vbox.asc -O- | sudo apt-key add -
sudo apt update && sudo apt-get -y install virtualbox-5.1
echo ""
echo ""
echo "====================================="
echo "Install Install Oracle VM VirtualBox Extension Pack"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
wget http://download.virtualbox.org/virtualbox/5.1.18/Oracle_VM_VirtualBox_Extension_Pack-5.1.18-114002.vbox-extpack
VBoxManage extpack install Oracle_VM_VirtualBox_Extension_Pack-5.1.18-114002.vbox-extpack
cd ~
echo ""
echo ""
echo "====================================="
echo "Add cuckoo to Vboxusers Grops"
echo "====================================="
read -rsp $'Press [Enter] key to continue....\n'
sudo usermod -aG vboxusers cuckoo
echo ""
echo ""
echo "==========================================="
echo " Finished!! "
echo "==========================================="
sudo rm -fr install_tmp/