This repository contains full code examples from the book Gray Hat C#

Cuckoo Sandbox Dockerfile

A tool to detect and crash Cuckoo Sandbox

Malware dataset for security researchers, data scientists. Public malware dataset generated by Cuckoo Sandbox based on Windows OS API calls analysis for cyber security researchers

Cuckoo Sandbox plugin for extracts configuration data of known malware

Malware dataset for security researchers, data scientists. Public malware dataset generated by Cuckoo Sandbox based on Windows OS API calls analysis for cyber security researchers

这是一个基于 Cuckoo 开源版本的沙箱的修订版本, 该版本完全为了适配国内软件环境所打造

Peekaboo Extended Email Attachment Behavior Observation Owl

The current repository contains all the scripts needed to complement kernel-mode mac-a-mal malicious activity hooking on macOS to Cuckoo sandbox.

Malware Detection using Machine Learning (MDML)

通过ACPI检测沙箱

Public datasets of malware and benign executable files (Windows EXE files). The dataset can be used by cybersecurity researchers focusing on the area of malware detection. It is suitable for training and testing both machine learning and deep learning algorithms.

VBoxManage/vmrun proxy to allow communication from within a VM to the hypervisor running the VM.

👾 Malware Classification using Deep Learning and Cuckoo Sandbox

MIST (Malware Instruction Set) is a metalanguage representation for monitored behavior of malicious software. Cuckoo2MIST works by converting Cuckoo Sandbox analysis reports into MIST format for data mining and machine learning.

EmailScanner is an integration application in python that uses `exchangelib` to process mail items in Microsoft exchange.

Dynamic Malware Analsysis Sandbox

Cuckoo Sandbox report parser into ransomware classifier

结合cuckoo沙箱调用及报告处理实现基于API调用序列和网络流量的恶意代码检测