mirror of
https://github.com/hanzoui/custom-nodes-security-scan.git
synced 2026-10-30 20:56:54 +00:00
168 lines
6.5 KiB
Plaintext
168 lines
6.5 KiB
Plaintext
[cuckoo]
|
|
# Enable or disable startup version check. When enabled, Cuckoo will connect
|
|
# to a remote location to verify whether the running version is the latest
|
|
# one available.
|
|
version_check = yes
|
|
|
|
# Cuckoo will stop at startup if the version check reports vulnerabilities in
|
|
# one of Cuckoo's dependencies. This setting ignores the vulnerabilities
|
|
# and starts anyway
|
|
ignore_vulnerabilities = no
|
|
|
|
# The authentication token that is required to access the Cuckoo API, using
|
|
# HTTP Bearer authentication. This will protect the API instance against
|
|
# unauthorized access and CSRF attacks. It is strongly recommended to set this
|
|
# to a secure value.
|
|
api_token = 03sFahaf2Zuk_aqdbqJDJA
|
|
|
|
# The Web secret is used as a very basic, but successful way to provide basic
|
|
# authentication to the Cuckoo Web Interface. This is a shared secret amongst
|
|
# all users of this Cuckoo instance and will "protect" usage from users outside
|
|
# of this instance. Therefore, if you'd like to share this Cuckoo instance with
|
|
# the outside world, then don't use the Web secret functionality.
|
|
web_secret =
|
|
|
|
# If turned on, Cuckoo will delete the original file after its analysis
|
|
# has been completed.
|
|
delete_original = no
|
|
|
|
# If turned on, Cuckoo will delete the copy of the original file in the
|
|
# local binaries repository after the analysis has finished. (On *nix this
|
|
# will also invalidate the file called "binary" in each analysis directory,
|
|
# as this is a symlink.)
|
|
delete_bin_copy = no
|
|
|
|
# Specify the name of the machinery module to use, this module will
|
|
# define the interaction between Cuckoo and your virtualization software
|
|
# of choice.
|
|
machinery = virtualbox
|
|
|
|
# Enable creation of memory dump of the analysis machine before shutting
|
|
# down. Even if turned off, this functionality can also be enabled at
|
|
# submission. Currently available for: VirtualBox and libvirt modules (KVM).
|
|
memory_dump = no
|
|
|
|
# When the timeout of an analysis is hit, the VM is just killed by default.
|
|
# For some long-running setups it might be interesting to terminate the
|
|
# monitored processes before killing the VM so that connections are closed.
|
|
terminate_processes = no
|
|
|
|
# Enable automatically re-schedule of "broken" tasks each startup.
|
|
# Each task found in status "processing" is re-queued for analysis.
|
|
reschedule = no
|
|
|
|
# Enable processing of results within the main cuckoo process.
|
|
# This is the default behavior but can be switched off for setups that
|
|
# require high stability and process the results in a separate task.
|
|
process_results = yes
|
|
|
|
# Limit the amount of analysis jobs a Cuckoo process goes through.
|
|
# This can be used together with a watchdog to mitigate risk of memory leaks.
|
|
max_analysis_count = 0
|
|
|
|
# Limit the number of concurrently executing analysis machines.
|
|
# This may be useful on systems with limited resources.
|
|
# Set to 0 to disable any limits.
|
|
max_machines_count = 0
|
|
|
|
# Limit the amount of VMs that are allowed to start in parallel. Generally
|
|
# speaking starting the VMs is one of the more CPU intensive parts of the
|
|
# actual analysis. This option tries to avoid maxing out the CPU completely.
|
|
max_vmstartup_count = 10
|
|
|
|
# Minimum amount of free space (in MB) available before starting a new task.
|
|
# This tries to avoid failing an analysis because the reports can't be written
|
|
# due out-of-diskspace errors. Setting this value to 0 disables the check.
|
|
# (Note: this feature is currently not supported under Windows.)
|
|
freespace = 1024
|
|
|
|
# Temporary directory containing the files uploaded through Cuckoo interfaces
|
|
# (api.py and Django web interface). Defaults to the default temporary
|
|
# directory of the operating system (e.g., /tmp on Linux). Overwrite the value
|
|
# if you'd like to specify an alternative path.
|
|
tmppath =
|
|
|
|
# Path to the unix socket for running root commands.
|
|
rooter = /tmp/cuckoo-rooter
|
|
|
|
[feedback]
|
|
# Cuckoo is capable of sending "developer feedback" to the developers so that
|
|
# they can more easily improve the project. This functionality also allows the
|
|
# user to quickly request new features, report bugs, and get in touch with
|
|
# support in general, etc.
|
|
enabled = no
|
|
name =
|
|
company =
|
|
email =
|
|
|
|
[resultserver]
|
|
# The Result Server is used to receive in real time the behavioral logs
|
|
# produced by the analyzer.
|
|
# Specify the IP address of the host. The analysis machines should be able
|
|
# to contact the host through such address, so make sure it's valid.
|
|
# NOTE: if you set resultserver IP to 0.0.0.0 you have to set the option
|
|
# `resultserver_ip` for all your virtual machines in machinery configuration.
|
|
ip = 192.168.56.1
|
|
|
|
# Specify a port number to bind the result server on. Set to 0 to use a random
|
|
# port.
|
|
port = 2042
|
|
|
|
# Maximum size of uploaded files from VM (screenshots, dropped files, log).
|
|
# The value is expressed in bytes, by default 128 MB.
|
|
upload_max_size = 134217728
|
|
|
|
[processing]
|
|
# Set the maximum size of analyses generated files to process. This is used
|
|
# to avoid the processing of big files which may take a lot of processing
|
|
# time. The value is expressed in bytes, by default 128 MB.
|
|
analysis_size_limit = 134217728
|
|
|
|
# Enable or disable DNS lookups.
|
|
resolve_dns = yes
|
|
|
|
# Enable PCAP sorting, needed for the connection content view in the web interface.
|
|
sort_pcap = yes
|
|
|
|
[database]
|
|
# Specify the database connection string.
|
|
# NOTE: If you are using a custom database (different from sqlite), you have to
|
|
# use utf-8 encoding when issuing the SQL database creation statement.
|
|
# Examples, see documentation for more:
|
|
# sqlite:///foo.db
|
|
# postgresql://foo:bar@localhost:5432/mydatabase
|
|
# mysql://foo:bar@localhost/mydatabase
|
|
# If empty, defaults to a SQLite3 database at $CWD/cuckoo.db.
|
|
connection =
|
|
|
|
# Database connection timeout in seconds.
|
|
# If empty, default is set to 60 seconds.
|
|
timeout = 60
|
|
|
|
[timeouts]
|
|
# Set the default analysis timeout expressed in seconds. This value will be
|
|
# used to define after how many seconds the analysis will terminate unless
|
|
# otherwise specified at submission.
|
|
default = 120
|
|
|
|
# Set the critical timeout expressed in (relative!) seconds. It will be added
|
|
# to the default timeout above and after this timeout is hit
|
|
# Cuckoo will consider the analysis failed and it will shutdown the machine
|
|
# no matter what. When this happens the analysis results will most likely
|
|
# be lost.
|
|
critical = 60
|
|
|
|
# Maximum time to wait for virtual machine status change. For example when
|
|
# shutting down a vm. Default is 60 seconds.
|
|
vm_state = 60
|
|
|
|
[remotecontrol]
|
|
# Enable for remote control of analysis machines inside the web interface.
|
|
enabled = no
|
|
|
|
# Set host of the running guacd service.
|
|
guacd_host = localhost
|
|
|
|
# Set port of the running guacd service.
|
|
guacd_port = 4822
|