search

cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.55k stars 1.71k forks source link

Web analysis problem in cuckoo #1767

Open seantree opened 7 years ago

seantree commented 7 years ago

Hello Guys,

When I am submitting and analyzing the following URL's:

http://www.onlineformfinder.com/index.jhtml

http://internetspeedpilot.com/SpeedTest?

It's not downloading and adding these addons in the Browser, Can you tell me the way how the cuckoo will add these addons in the browser. . If there is no feature like this, I would do humbly request with you guys kindly add this feature, it is very helpful in analyzing the BHO work.

I hope you got my point, if any question kindly ask me. . Thanks & Regards SeanTree

jbremer commented 7 years ago

If you show us the manual steps to install a BHO by browsing a website we can see if we can automate this in Cuckoo ;-)

seantree commented 7 years ago

Hi @jbremer Thank you for the reply below are the list of some sites I hope you will understand it.

  1. http://www.mergedocsnow.com/index.jhtml

  2. http://free.getvideoconvert.com/index.jhtml?partner=^BZE^xdm363

  3. http://www.mapseasy.net/

  4. http://www.weather-hub.com/

  5. http://www.thebettertab.com/

  6. http://www.myfileconvert.com/index.jhtml

  7. http://www.mydiygenie.com/index.jhtml

etc.

Open all this links in all browsers (Opera, IE, Chrome, Firefox) it, cuckoo needs some automation in web part also because when some URL open the browsers it needs click on buttons like agree, download, next etc. When you see the above links you will get my point what I am trying to say.

and second thing I don't know whether it's a bug or not but I just want to discuss that part also, I have installed all the browsers(IE,Chrome,Firefox,Opera) in the VM and I have chosen each Default browser in different-different VM with snapshot taken. Suppose if I have set default browser google chrome in one VM and when I passed the URL through cuckoo it will launch IE always instead of default browser. Kindly set this issue also. Waiting for your reply. . Thanks & Regards Seantree

--

--

doomedraven commented 7 years ago

that is not an issue, is bcz of the package, IE is default for urls, you need to specify different browser package to execute different browser, read man about how packages works

seantree commented 7 years ago

Thanks @doomedraven for guiding me @jbremer it would be great if you add BHO part in the sandbox I am waiting for that update :)