#Ubuntu 18 LTS 安装Cuckoo 笔记

参考：https://www.freebuf.com/sectool/234251.html && https://cuckoo.sh/docs/

#替换中科大源，酌情替换
sudo sed -i "s/us.archive.ubuntu.com/mirrors.ustc.edu.cn/g" /etc/apt/sources.list

#更新源
sudo apt update

#vbox虚拟机
sudo apt install virtualbox virtualbox-dkms virtualbox-ext-pack virtualbox-qt
#虚拟机配置略

#vbox配置快照
vboxmanage snapshot ghostxp list
vboxmanage snapshot ghostxp take Snapshot1

#安装postgresql 用于存放配置
sudo apt install postgresql libpq-dev
sudo -u postgres psql
>>>>ALTER USER postgres WITH PASSWORD 'postgres';
sudo passwd postgres

#tcpdump 抓包
sudo apt-get install tcpdump apparmor-utils
sudo setcap cap_net_raw,cap_net_admin=eip /usr/sbin/tcpdump
sudo getcap /usr/sbin/tcpdump
sudo aa-disable /usr/sbin/tcpdump

#volatility分析
sudo apt install volatility m2crypto
#抓包库
sudo apt-get install libcap2-bin

#django用到
sudo apt install mongodb mongodb-clients mongodb-server

#一些依赖和guac
sudo apt-get install libjpeg-dev zlib1g-dev swig
sudo apt install libguac-client-rdp0 libguac-client-vnc0 libguac-client-ssh0 guacd

#安装pydeep
sudo apt install libfuzzy-dev
git clone https://github.com/kbandla/pydeep
cd pydeep/
python setup.py build
python setup.py test
sudo python setup.py install

#supervisor服务
sudo apt install supervisor
sudo systemctl stop supervisor
sudosupervisord -c /home/zcm/.cuckoo/supervisord.conf

#更新pip源安装Cuckoo
pip install pip -U
pip config set global.index-url https://pypi.tuna.tsinghua.edu.cn/simple
pip install -U pip setuptools
pip install pillow
pip install psycopg2
sudo pip install -U cuckoo

#手动启动
cuckoo -d &
cuckoo web runserver 0.0.0.0:8001