cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.55k stars 1.71k forks source link

Oops! Cuckoo failed in an unhandled exception! #2506

Closed manzy90 closed 6 years ago

manzy90 commented 6 years ago
install cuckoo latest version and i am getting this error

sudo cuckoo

                 _
____ _   _  ____| |  _ ___   ___

/ ) | | |/ ) |/ ) \ / _ \ ( (| || ( (| ( || | || | __)__/ ___)| _)_/ _/

Cuckoo Sandbox 2.0.6 www.cuckoosandbox.org Copyright (c) 2010-2018

Oops! Cuckoo failed in an unhandled exception! Sometimes bugs are already fixed in the development release, it is therefore recommended to retry with the latest development release available https://github.com/cuckoosandbox/cuckoo If the error persists please open a new issue at https://github.com/cuckoosandbox/cuckoo/issues

=== Exception details === Cuckoo version: 2.0.6 OS version: posix OS release: Ubuntu 16.04 xenial Python version: 2.7.12 Python implementation: CPython Machine arch: x86_64 Modules: alembic:0.8.8 androguard:3.0.1 asn1crypto:0.24.0 beautifulsoup4:4.5.3 capstone:3.0.5rc2 cffi:1.11.5 click:6.6 colorama:0.3.7 cryptography:2.3.1 cuckoo:2.0.6.2 distorm3:3.3.4 django-extensions:1.6.7 django:1.8.4 dpkt:1.8.7 ecdsa:0.13 egghatch:0.2.3 elasticsearch:5.3.0 enum34:1.1.6 et-xmlfile:1.0.1 flask-sqlalchemy:2.1 flask:0.12.2 functools32:3.2.3.post2 future:0.16.0 httpreplay:0.2.4 idna:2.7 ipaddress:1.0.22 itsdangerous:0.24 jdcal:1.4 jinja2:2.9.6 jsbeautifier:1.6.2 jsonschema:2.6.0 mako:1.0.7 markupsafe:1.0 olefile:0.43 oletools:0.51 openpyxl:2.5.8 peepdf:0.4.2 pefile2:1.2.11 pillow:3.2.0 pycparser:2.19 pycrypto:2.6.1 pydeep:0.2 pyelftools:0.24 pyguacamole:0.6 pymisp:2.4.54 pymongo:3.0.3 pyopenssl:18.0.0 python-dateutil:2.4.2 python-editor:1.0.3 python-magic:0.4.12 pythonaes:1.0 requests:2.13.0 roach:0.1.2 scapy:2.3.2 sflock:0.3.6 six:1.11.0 sqlalchemy:1.0.8 tlslite-ng:0.6.0 ujson:1.35 unicorn:1.0.1 urllib3:1.23 volatility:2.6 wakeonlan:0.2.2 werkzeug:0.14.1 yara-python:3.6.3

2018-09-30 14:02:53,218 [cuckoo] ERROR: ArgumentError: Could not parse rfc1738 URL from string 'off' Traceback (most recent call last): File "/usr/local/lib/python2.7/dist-packages/cuckoo/main.py", line 233, in main cuckoo_init(level, ctx) File "/usr/local/lib/python2.7/dist-packages/cuckoo/main.py", line 143, in cuckoo_init Database().connect() File "/usr/local/lib/python2.7/dist-packages/cuckoo/core/database.py", line 448, in connect self._connect_database(dsn) File "/usr/local/lib/python2.7/dist-packages/cuckoo/core/database.py", line 522, in _connect_database self.engine = create_engine(connection_string) File "/usr/local/lib/python2.7/dist-packages/sqlalchemy/engine/init.py", line 386, in create_engine return strategy.create(*args, **kwargs) File "/usr/local/lib/python2.7/dist-packages/sqlalchemy/engine/strategies.py", line 49, in create u = url.make_url(name_or_url) File "/usr/local/lib/python2.7/dist-packages/sqlalchemy/engine/url.py", line 186, in make_url return _parse_rfc1738_args(name_or_url) File "/usr/local/lib/python2.7/dist-packages/sqlalchemy/engine/url.py", line 235, in _parse_rfc1738_args "Could not parse rfc1738 URL from string '%s'" % name) ArgumentError: Could not parse rfc1738 URL from string 'off'

manzy90 commented 6 years ago

fixed that , in the cuckoo.config I had connection = off i left it empty

[database]

Specify the database connection string.

NOTE: If you are using a custom database (different from sqlite), you have to

use utf-8 encoding when issuing the SQL database creation statement.

Examples, see documentation for more:

sqlite:///foo.db

postgresql://foo:bar@localhost:5432/mydatabase

mysql://foo:bar@localhost/mydatabase

If empty, defaults to a SQLite3 database at $CWD/cuckoo.db.

connection =

But now i get this :(

Cuckoo Sandbox 2.0.6 www.cuckoosandbox.org Copyright (c) 2010-2018

2018-09-30 17:03:06,445 [cuckoo.core.startup] DEBUG: Imported modules... 2018-09-30 17:03:06,445 [cuckoo.core.startup] DEBUG: Imported "auxiliary" modules: 2018-09-30 17:03:06,445 [cuckoo.core.startup] DEBUG: |-- MITM 2018-09-30 17:03:06,446 [cuckoo.core.startup] DEBUG: |-- Reboot 2018-09-30 17:03:06,446 [cuckoo.core.startup] DEBUG: |-- Services 2018-09-30 17:03:06,446 [cuckoo.core.startup] DEBUG: -- Sniffer 2018-09-30 17:03:06,446 [cuckoo.core.startup] DEBUG: Imported "machinery" modules: 2018-09-30 17:03:06,446 [cuckoo.core.startup] DEBUG: |-- vSphere 2018-09-30 17:03:06,446 [cuckoo.core.startup] DEBUG: |-- KVM 2018-09-30 17:03:06,446 [cuckoo.core.startup] DEBUG: |-- ESX 2018-09-30 17:03:06,446 [cuckoo.core.startup] DEBUG: |-- XenServer 2018-09-30 17:03:06,446 [cuckoo.core.startup] DEBUG: |-- VMware 2018-09-30 17:03:06,447 [cuckoo.core.startup] DEBUG: |-- Avd 2018-09-30 17:03:06,447 [cuckoo.core.startup] DEBUG: |-- QEMU 2018-09-30 17:03:06,447 [cuckoo.core.startup] DEBUG: |-- VirtualBox 2018-09-30 17:03:06,447 [cuckoo.core.startup] DEBUG:-- Physical 2018-09-30 17:03:06,447 [cuckoo.core.startup] DEBUG: Imported "processing" modules: 2018-09-30 17:03:06,447 [cuckoo.core.startup] DEBUG: |-- AnalysisInfo 2018-09-30 17:03:06,447 [cuckoo.core.startup] DEBUG: |-- ApkInfo 2018-09-30 17:03:06,447 [cuckoo.core.startup] DEBUG: |-- Baseline 2018-09-30 17:03:06,447 [cuckoo.core.startup] DEBUG: |-- BehaviorAnalysis 2018-09-30 17:03:06,448 [cuckoo.core.startup] DEBUG: |-- Debug 2018-09-30 17:03:06,448 [cuckoo.core.startup] DEBUG: |-- Droidmon 2018-09-30 17:03:06,448 [cuckoo.core.startup] DEBUG: |-- Dropped 2018-09-30 17:03:06,448 [cuckoo.core.startup] DEBUG: |-- DroppedBuffer 2018-09-30 17:03:06,448 [cuckoo.core.startup] DEBUG: |-- Extracted 2018-09-30 17:03:06,448 [cuckoo.core.startup] DEBUG: |-- GooglePlay 2018-09-30 17:03:06,448 [cuckoo.core.startup] DEBUG: |-- Irma 2018-09-30 17:03:06,448 [cuckoo.core.startup] DEBUG: |-- Memory 2018-09-30 17:03:06,448 [cuckoo.core.startup] DEBUG: |-- MetaInfo 2018-09-30 17:03:06,448 [cuckoo.core.startup] DEBUG: |-- MISP 2018-09-30 17:03:06,449 [cuckoo.core.startup] DEBUG: |-- NetworkAnalysis 2018-09-30 17:03:06,449 [cuckoo.core.startup] DEBUG: |-- ProcessMemory 2018-09-30 17:03:06,449 [cuckoo.core.startup] DEBUG: |-- Procmon 2018-09-30 17:03:06,449 [cuckoo.core.startup] DEBUG: |-- Screenshots 2018-09-30 17:03:06,449 [cuckoo.core.startup] DEBUG: |-- Snort 2018-09-30 17:03:06,449 [cuckoo.core.startup] DEBUG: |-- Static 2018-09-30 17:03:06,449 [cuckoo.core.startup] DEBUG: |-- Strings 2018-09-30 17:03:06,449 [cuckoo.core.startup] DEBUG: |-- Suricata 2018-09-30 17:03:06,449 [cuckoo.core.startup] DEBUG: |-- TargetInfo 2018-09-30 17:03:06,449 [cuckoo.core.startup] DEBUG: |-- TLSMasterSecrets 2018-09-30 17:03:06,450 [cuckoo.core.startup] DEBUG: -- VirusTotal 2018-09-30 17:03:06,450 [cuckoo.core.startup] DEBUG: Imported "signatures" modules: 2018-09-30 17:03:06,450 [cuckoo.core.startup] DEBUG: |-- CreatesExe 2018-09-30 17:03:06,450 [cuckoo.core.startup] DEBUG:-- SystemMetrics 2018-09-30 17:03:06,450 [cuckoo.core.startup] DEBUG: Imported "reporting" modules: 2018-09-30 17:03:06,450 [cuckoo.core.startup] DEBUG: |-- ElasticSearch 2018-09-30 17:03:06,450 [cuckoo.core.startup] DEBUG: |-- Feedback 2018-09-30 17:03:06,450 [cuckoo.core.startup] DEBUG: |-- JsonDump 2018-09-30 17:03:06,450 [cuckoo.core.startup] DEBUG: |-- Mattermost 2018-09-30 17:03:06,450 [cuckoo.core.startup] DEBUG: |-- MISP 2018-09-30 17:03:06,451 [cuckoo.core.startup] DEBUG: |-- Moloch 2018-09-30 17:03:06,451 [cuckoo.core.startup] DEBUG: |-- MongoDB 2018-09-30 17:03:06,451 [cuckoo.core.startup] DEBUG: |-- Notification 2018-09-30 17:03:06,451 [cuckoo.core.startup] DEBUG: `-- SingleFile 2018-09-30 17:03:06,451 [cuckoo.core.startup] DEBUG: Checking for locked tasks.. 2018-09-30 17:03:06,462 [cuckoo.core.startup] DEBUG: Checking for pending service tasks.. 2018-09-30 17:03:06,470 [cuckoo.core.startup] DEBUG: Initializing Yara... 2018-09-30 17:03:06,472 [cuckoo.core.startup] DEBUG: |-- binaries embedded.yar 2018-09-30 17:03:06,472 [cuckoo.core.startup] DEBUG: |-- binaries shellcodes.yar 2018-09-30 17:03:06,472 [cuckoo.core.startup] DEBUG: |-- binaries vmdetect.yar 2018-09-30 17:03:06,473 [cuckoo] CRITICAL: CuckooStartupError: The rooter is required but it is either not running or it has been configured to a different Unix socket path. Please refer to the documentation on working with the rooter.

RicoVZ commented 6 years ago

Hi manzy90,

Thanks for posting an issue.

I'm sure we can find a solution. Can you share your routing.conf file with us? :slightly_smiling_face: I suspect there is some routing setting enabled (For which Cuckoo rooter is required)

manzy90 commented 6 years ago

Hey

It's all solved I had a typo il n it :)

-------- Original message -------- From: Ricardo van Zutphen notifications@github.com Date: 1/10/18 6:53 pm (GMT+10:00) To: cuckoosandbox/cuckoo cuckoo@noreply.github.com Cc: manzy90 mansur.saleh@hotmail.com, Author author@noreply.github.com Subject: Re: [cuckoosandbox/cuckoo] Oops! Cuckoo failed in an unhandled exception! (#2506)

Hi manzy90,

Thanks for posting an issue.

I'm sure we can find a solution. Can you share your routing.conf file with us? 🙂

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fcuckoosandbox%2Fcuckoo%2Fissues%2F2506%23issuecomment-425834197&data=02%7C01%7C%7C9f3a0ac95edf4cfd5ff308d6277b4dbc%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636739807866221273&sdata=vy%2F5uVSC2wI9qA%2Fe4qpfu6mqtyJH9PaogHsyAWRR1dg%3D&reserved=0, or mute the threadhttps://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FApsLDTkoQwQHUiq9LeD26t4jeoFWdNQ_ks5ugdfxgaJpZM4XAzU3&data=02%7C01%7C%7C9f3a0ac95edf4cfd5ff308d6277b4dbc%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636739807866221273&sdata=LK2ZVGfvgtarO093D4XPjZ0b2U65ZpuVSDaYPfkmrN0%3D&reserved=0.

RicoVZ commented 6 years ago

@manzy90 Ah, good to hear. Can you close the issue? :smile: