cuckooautoinstall

Sobre CuckooAutoinstall Cuckoo Sandbox . script de autoinstalación ¿Qué es Cuckoo Sandbox? Cuckoo Sandbox es un sistema de análisis de malware. ¿Qué significa eso? Significa que puedes lanzarle cualquier archivo sospechoso y obtener un informe con detalles sobre el comportamiento del archivo dent...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . auto install script What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system. What does that mean? It means that you can throw any suspicious file at it and get a report with details about the file's behavior inside an isolated environment. We...

cuckoo-modified

Esta es una versión muy modificada de Cuckoo Sandbox proporcionada bajo GPL. Ofrece una serie de ventajas sobre el Cuckoo original: Nombres de archivos y registro completamente normalizados Análisis de 64 bits Manejo de la redirección del sistema de archivos WoW64 Muchos hooks adicionales de API...

anticuckoo

anticuckoo 一款用于检测并崩溃Cuckoo Sandbox的工具。已在Cuckoo Sandbox官方和Accuvant的Cuckoo版本中测试。 请考虑捐赠：https://github.com/sponsors/therealdreg Anticuckoo 也能检测其他沙盒，如 FireEye（-c2）： Reddit / netsec 上关于 anticuckoo 的讨论 功能 检测: Cuckoo钩子检测（所有类型的Cuckoo钩子）。 自身内存中的可疑数据（不使用API，逐页扫描）。 崩溃（带参数执行）（在沙盒外这些参数不会使程序崩溃）： -c1：修改被钩API的RE...

dynmx

dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...

CAPEv2

CAPE：恶意软件配置与有效载荷提取 - 文档 CAPE 是一个恶意软件沙箱。 沙箱用于在隔离环境中执行恶意文件，同时检测其动态行为并收集取证痕迹。 CAPE 源自 Cuckoo v1，在 Windows 平台上具备以下核心功能： 基于 API 挂钩的行为检测 捕获执行期间创建、修改和删除的文件 以 PCAP 格式捕获网络流量 基于行为和网络签名进行恶意软件分类 在恶意软件执行期间截取桌面截图 对目标系统进行完整内存转储 CAPE 通过以下几个关键补充，扩展了 Cuckoo 传统的沙箱输出： 自动化的动态恶意软件解包 基于解包后有效载荷的 YARA 签名进行恶意软件分类...

CAPE

CAPEv2 Python3 现已发布 CAPEv2 随着 Python 2 即将于 2020 年 1 月 1 日终止支持，CAPEv1 将逐步淘汰。请尽快升级到 Python 3 版本。 CAPE：恶意软件配置与载荷提取 CAPE 是一个恶意软件沙箱。它源自 Cuckoo，旨在自动化恶意软件分析过程，目标是从恶意软件中提取载荷和配置。这使得 CAPE 能够基于载荷签名检测恶意软件，并自动化恶意软件逆向工程和威胁情报的许多目标。 有一个社区版在线可用，任何人都可以免费试用： https://cape.contextis.com/submit CAPE...

cuckoo-droid

CuckooDroid - 自动化Android恶意软件分析。 贡献者：Check Point软件技术有限公司 CuckooDroid是Cuckoo Sandbox的扩展，Cuckoo Sandbox是一款开源软件，用于自动化分析可疑文件。CuckooDroid为Cuckoo带来了Android应用程序的执行和分析能力。 安装 - 简易集成脚本： root@kitploit: git config --global user.email "[email protected]" git config --global user.name "Your Name" git clone...

RansomCoinPublic

RansomCoin 从勒索软件中提取元数据和硬编码的攻击指标（IoC），以可扩展、高效的方式实现，并集成了 Cuckoo。理想情况下，它在 Cuckoo 动态分析期间运行，但也可用于对大量勒索软件进行静态分析。设计目标为快速、低误报率（针对加密货币地址）。对电子邮件、URL、Onion 地址和域名存在有限的误报（这些很难做到完美）。 简而言之，如果您只关心货币化向量，这是一个快速且简单的初始分类工具。 安装说明 请确保您已安装 Python3。 在 Linux 虚拟机中 建议下载并安装一个虚拟机软件，例如 VirtualBox。安装您所需的 Linux 虚拟机（如 Lubuntu、Ka...

Log4Shell-Sandbox-Signature

Log4Shell-Sandbox-Signature Log4ShellCVE-2021-45046 沙箱签名 正则表达式：https://github.com/back2root/log4shell-rex Cape 沙箱签名 Cuckoo 沙箱签名...

volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...

cuckoo

.. image:: https://cuckoosandbox.org/assets/images/cuckoo-black.png :alt: Cuckoo Sandbox :target: https://cuckoosandbox.org/ NOTA BENE: Cuckoo Sandbox 2.x non è attualmente mantenuto. Qualsiasi issue aperta o pull request molto probabilmente non verrà elaborata, poiché è in corso una completa...

CVE-2020-37159

Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature. Attackers can craft a malicious payload exceeding 260 bytes to overwrite EIP and EBP, enabling shellcode execution...

Parallaxis Cuckoo Clock 安全漏洞

Parallaxis Cuckoo Clock is a desktop clock software developed by Parallaxis Corporation. Version 5.0 of Parallaxis Cuckoo Clock contains a security vulnerability, which stems from a buffer overflow in the alarm scheduling function. This vulnerability could allow for the execution of arbitrary cod...

CVE-2020-37159

CVE-2020-37159 affects Parallaxis Cuckoo Clock 5.0. A buffer overflow in the alarm scheduling feature allows an attacker to execute arbitrary code by overwriting memory registers; a payload exceeding 260 bytes can overwrite EIP/EBP and enable shellcode execution, with potential remote code execut...

CVE-2020-37159

Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature. Attackers can craft a malicious payload exceeding 260 bytes to overwrite EIP and EBP, enabling shellcode execution...

CVE-2020-37159 Cuckoo Clock 5.0 - Buffer Overflow

Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature. Attackers can craft a malicious payload exceeding 260 bytes to overwrite EIP and EBP, enabling shellcode execution...

CVE-2020-37159 Cuckoo Clock 5.0 - Buffer Overflow

Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature. Attackers can craft a malicious payload exceeding 260 bytes to overwrite EIP and EBP, enabling shellcode execution...

PT-2026-6825

Name of the Vulnerable Software and Affected Versions Parallaxis Cuckoo Clock version 5.0 Description The software contains a buffer overflow issue in the alarm scheduling feature. An attacker can execute arbitrary code by overwriting memory registers, specifically EIP and EBP, with a malicious...

Security update for redis (critical)

openSUSE security update: security update for redis ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20121-1 Rating: critical References: bsc1250995 bsc1252996 Cross-References: CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 CVE-2025-49844 CVE-2025-625...