search

cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.55k stars 1.71k forks source link

Add possibility to upload multiple files at once through Django web interface #297

Closed botherder closed 9 years ago

botherder commented 10 years ago

Adding multiple files singularly through the web form can be a tedious task. Would be nice to have a way of uploading multiple files at once and queue them up all with the same provided options.

chrestme commented 10 years ago

HTML5 input tag contains a "multiple" attribute for exactly this. This is on my personal list of things to incorporate, just haven't had a chance yet to implement it.

On Sun, Apr 6, 2014 at 5:20 AM, Nex notifications@github.com wrote:

Adding multiple files singularly through the web form can be a tedious task. Would be nice to have a way of uploading multiple files at once and queue them up all with the same provided options.

Reply to this email directly or view it on GitHubhttps://github.com/cuckoobox/cuckoo/issues/297 .

Crashman1983 commented 10 years ago

There is another use-case for multiple files:

Some malware uses an lnk-file and two other files. They have to be in the same directory and the lnk-file needs to be executed to release the malware.

Yes, you can do these steps manually as some kind of preparation, but it would be easer to do it within the sandbox environment.

botherder commented 10 years ago

You can zip them up and specify which file to execute to the zip package.

jbremer commented 9 years ago

Anyone who would like to pick up on this feature?

chrestme commented 9 years ago

Just for clarification, are you referring to Crashman's request, or the original from @botherder? PR #356 addressed the original request.

jbremer commented 9 years ago

As @botherder mentioned this can be done by zipping up the files. I agree that it's sub-optimal, but at this point I don't think it makes sense to do a lot of work on this matter when simply zipping works fine. And yeah, I mentioned the original request, but it appears it has been resolved already indeed :)

Edit: first note targets @Crashman1983's request.

KillerInstinct commented 9 years ago

Just FYI, you don't need to use a zip.

Per https://github.com/cuckoobox/cuckoo/blob/master/web/submission/views.py#L58

You can upload multiple files by default which was added with https://github.com/cuckoobox/cuckoo/commit/04b506c2030e67ad20eb65b05f9308de2e6851cb

Just shift-click the files you want to submit and it'll submit 'em.

jbremer commented 9 years ago

The zip was for the case where multiple files have to be bundled together for an analysis to work properly :-)

KillerInstinct commented 9 years ago

Yeah I read it wrong. Perhaps it would be best to have a "run_this" variable which specifies the actual file to pass to the loader for the zip package.