spender-sandbox / cuckoo-modified

Modified edition of cuckoo
394 stars 178 forks source link

Scan a compressed file with many files inside #282

Open agaglia opened 8 years ago

agaglia commented 8 years ago

Hi. If I submit a compressed file with many files inside the system scans them all and then times out. Is there a way to prevent them from being scanned all files in and let out a "maximum files to be scanned" output error? Thx

jowabels commented 8 years ago

From what I have understood from your question, you want to submit a compressed file with several files inside but you want Cuckoo to ignore some of these files.

As far as I know, there is no functionality provided for that. I think that is a responsibility in the user side and not Cuckoo's.

Nwinternights commented 8 years ago

I guessed he wanted to say that if a user upload a zipped file with thousands of files inside, cuckoo starts to check all of them making the sanboxing unusable for hours/days(a sort of DOS). So his request was that if it possibile to block the upload if inside a compressed item there are xxxx files. Hope I understood. :-)

2016-09-19 6:48 GMT+02:00 jowa notifications@github.com:

From what I have understood from your question, you want to submit a compressed file with several files inside but you want Cuckoo to ignore some of these files.

As far as I know, there is no functionality provided for that. I think that is a responsibility in the user side and not Cuckoo's.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/spender-sandbox/cuckoo-modified/issues/282#issuecomment-247910941, or mute the thread https://github.com/notifications/unsubscribe-auth/ARXnqdtGT6W_3o36NoH0Z1E2kSZpJuCAks5qrhQ2gaJpZM4J6Yj2 .