mirror of
https://github.com/hanzoui/custom-nodes-security-scan.git
synced 2026-10-30 20:56:54 +00:00
201 lines
7.1 KiB
Plaintext
201 lines
7.1 KiB
Plaintext
[qemu]
|
|
# Path to one qemu binary (assumes the other ones are there as well)
|
|
path = /usr/bin/qemu-system-x86_64
|
|
|
|
# Specify a comma-separated list of available machines to be used. For each
|
|
# specified ID you have to define a dedicated section containing the details
|
|
# on the respective machine. (E.g. cuckoo1,cuckoo2,cuckoo3)
|
|
machines = vm1, vm2, vm3
|
|
|
|
# Specify the name of the default network interface that will be used
|
|
# when dumping network traffic with tcpdump.
|
|
# Example (qemubr is the interface name):
|
|
interface = qemubr
|
|
|
|
|
|
[vm1]
|
|
label = vm1
|
|
|
|
# image path
|
|
image = /home/rep/vms/qvm_wheezy64_1.qcow2
|
|
|
|
# saved snapshot name
|
|
snapshot =
|
|
|
|
# vm arch (mips/mipsel/arm/x64/x86)
|
|
arch =
|
|
|
|
# use kvm virtualization
|
|
enable_kvm = no
|
|
|
|
# path to kernel image
|
|
kernel =
|
|
|
|
# path to initrd image
|
|
initrd =
|
|
|
|
# Specify the operating system platform used by current machine
|
|
# [windows/darwin/linux].
|
|
platform = linux
|
|
|
|
# Specify the IP address of the current virtual machine. Make sure that the
|
|
# IP address is valid and that the host machine is able to reach it. If not,
|
|
# the analysis will fail.
|
|
ip = 192.168.55.2
|
|
|
|
# (Optional) Specify the name of the network interface that should be used
|
|
# when dumping network traffic from this machine with tcpdump.
|
|
# Example (qemubr is the interface name):
|
|
interface = qemubr
|
|
|
|
# (Optional) Specify the IP of the Result Server, as your virtual machine sees it.
|
|
# The Result Server will always bind to the address and port specified in cuckoo.conf,
|
|
# however you could set up your virtual network to use NAT/PAT, so you can specify here
|
|
# the IP address for the Result Server as your machine sees it. If you don't specify an
|
|
# address here, the machine will use the default value from cuckoo.conf.
|
|
# NOTE: if you set this option you have to set result server IP to 0.0.0.0 in cuckoo.conf.
|
|
# Example:
|
|
resultserver_ip = 192.168.55.1
|
|
|
|
# (Optional) Specify the port for the Result Server, as your virtual machine sees it.
|
|
# The Result Server will always bind to the address and port specified in cuckoo.conf,
|
|
# however you could set up your virtual network to use NAT/PAT, so you can specify here
|
|
# the port for the Result Server as your machine sees it. If you don't specify a port
|
|
# here, the machine will use the default value from cuckoo.conf.
|
|
# Example:
|
|
resultserver_port =
|
|
|
|
# (Optional) Set your own tags. These are comma separated and help to identify
|
|
# specific VMs. You can run samples on VMs with tag you require.
|
|
tags = debian_wheezy,64_bit
|
|
|
|
# (Optional) Specify the OS profile to be used by volatility for this
|
|
# virtual machine. This will override the guest_profile variable in
|
|
# memory.conf which solves the problem of having multiple types of VMs
|
|
# and properly determining which profile to use.
|
|
osprofile =
|
|
|
|
[vm2]
|
|
label = vm2
|
|
|
|
# image path
|
|
image = /home/rep/vms/qvm_wheezy64_1.qcow2
|
|
|
|
# saved snapshot name
|
|
snapshot =
|
|
|
|
# vm arch (mips/mipsel/arm/x64/x86)
|
|
arch = mipsel
|
|
|
|
# use kvm virtualization
|
|
enable_kvm = no
|
|
|
|
# path to kernel image
|
|
kernel = {imagepath}/vmlinux-3.16.0-4-4kc-malta-mipsel
|
|
|
|
# path to initrd image
|
|
initrd =
|
|
|
|
# Specify the operating system platform used by current machine
|
|
# [windows/darwin/linux].
|
|
platform = linux
|
|
|
|
# Specify the IP address of the current virtual machine. Make sure that the
|
|
# IP address is valid and that the host machine is able to reach it. If not,
|
|
# the analysis will fail.
|
|
ip = 192.168.55.3
|
|
|
|
# (Optional) Specify the name of the network interface that should be used
|
|
# when dumping network traffic from this machine with tcpdump.
|
|
# Example (qemubr is the interface name):
|
|
interface = qemubr
|
|
|
|
# (Optional) Specify the IP of the Result Server, as your virtual machine sees it.
|
|
# The Result Server will always bind to the address and port specified in cuckoo.conf,
|
|
# however you could set up your virtual network to use NAT/PAT, so you can specify here
|
|
# the IP address for the Result Server as your machine sees it. If you don't specify an
|
|
# address here, the machine will use the default value from cuckoo.conf.
|
|
# NOTE: if you set this option you have to set result server IP to 0.0.0.0 in cuckoo.conf.
|
|
# Example:
|
|
resultserver_ip = 192.168.55.1
|
|
|
|
# (Optional) Specify the port for the Result Server, as your virtual machine sees it.
|
|
# The Result Server will always bind to the address and port specified in cuckoo.conf,
|
|
# however you could set up your virtual network to use NAT/PAT, so you can specify here
|
|
# the port for the Result Server as your machine sees it. If you don't specify a port
|
|
# here, the machine will use the default value from cuckoo.conf.
|
|
# Example:
|
|
resultserver_port =
|
|
|
|
# (Optional) Set your own tags. These are comma separated and help to identify
|
|
# specific VMs. You can run samples on VMs with tag you require.
|
|
tags = debian_wheezy,mipsel
|
|
|
|
# (Optional) Specify the OS profile to be used by volatility for this
|
|
# virtual machine. This will override the guest_profile variable in
|
|
# memory.conf which solves the problem of having multiple types of VMs
|
|
# and properly determining which profile to use.
|
|
osprofile =
|
|
|
|
[vm3]
|
|
label = vm3
|
|
|
|
# image path
|
|
image = /home/rep/vms/qvm_wheezy64_1.qcow2
|
|
|
|
# saved snapshot name
|
|
snapshot =
|
|
|
|
# vm arch (mips/mipsel/arm/x64/x86)
|
|
arch = arm
|
|
|
|
# use kvm virtualization
|
|
enable_kvm = no
|
|
|
|
# path to kernel image
|
|
kernel = {imagepath}/vmlinuz-3.2.0-4-versatile-arm
|
|
|
|
# path to initrd image
|
|
initrd = {imagepath}/initrd-3.2.0-4-versatile-arm
|
|
|
|
# Specify the operating system platform used by current machine
|
|
# [windows/darwin/linux].
|
|
platform = linux
|
|
|
|
# Specify the IP address of the current virtual machine. Make sure that the
|
|
# IP address is valid and that the host machine is able to reach it. If not,
|
|
# the analysis will fail.
|
|
ip = 192.168.55.4
|
|
|
|
# (Optional) Specify the name of the network interface that should be used
|
|
# when dumping network traffic from this machine with tcpdump.
|
|
# Example (qemubr is the interface name):
|
|
interface = qemubr
|
|
|
|
# (Optional) Specify the IP of the Result Server, as your virtual machine sees it.
|
|
# The Result Server will always bind to the address and port specified in cuckoo.conf,
|
|
# however you could set up your virtual network to use NAT/PAT, so you can specify here
|
|
# the IP address for the Result Server as your machine sees it. If you don't specify an
|
|
# address here, the machine will use the default value from cuckoo.conf.
|
|
# NOTE: if you set this option you have to set result server IP to 0.0.0.0 in cuckoo.conf.
|
|
# Example:
|
|
resultserver_ip =
|
|
|
|
# (Optional) Specify the port for the Result Server, as your virtual machine sees it.
|
|
# The Result Server will always bind to the address and port specified in cuckoo.conf,
|
|
# however you could set up your virtual network to use NAT/PAT, so you can specify here
|
|
# the port for the Result Server as your machine sees it. If you don't specify a port
|
|
# here, the machine will use the default value from cuckoo.conf.
|
|
# Example:
|
|
resultserver_port =
|
|
|
|
# (Optional) Set your own tags. These are comma separated and help to identify
|
|
# specific VMs. You can run samples on VMs with tag you require.
|
|
tags = debian_wheezy,arm
|
|
|
|
# (Optional) Specify the OS profile to be used by volatility for this
|
|
# virtual machine. This will override the guest_profile variable in
|
|
# memory.conf which solves the problem of having multiple types of VMs
|
|
# and properly determining which profile to use.
|
|
osprofile =
|