[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cuckoo
Subject:    [cuckoo] Feature request: support for large lists of md5 hashes for filtering
From:       mokosec () gmail ! com (Mokosec)
Date:       2012-01-09 16:31:06
Message-ID: CAD_v0+NS1AG2vOF0GPYt0XWsAghL9-QoB5WYTvsMOEt1-yaBmA () mail ! gmail ! com
[Download RAW message or body]

Sorry -try this link

http://www.mediafire.com/file/3s6z203j5734rgw/analyzer.py


On Mon, Jan 9, 2012 at 11:18 AM, Claudio <claudio at shadowserver.org> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi,
> Thanks for contribution, but the mediafire link seems wrong.
> C.
>
> On 1/9/12 5:15 PM, Mokosec wrote:
> > Great job on Cuckoo 0.3.1 -thank you
> >
> > I have made some modifications to the way Cuckoo handles lists of
> > md5 hashes for filtering dropped files. I wanted to be able to use
> > a large list of all the md5s from my VM. In my modification the
> > list has been converted to a global dictionary and the input is a
> > file of hashes you create from your VMs.  The link below in the
> > modified analyzer.py file for the /cuckoo/shares/setup directory.
> > The file of hashes goes into the /cuckoo/shares/setup/conf
> > directory under the filname "hashes". The hash file should have
> > only hashes with normal linefeeds. If you are interested please
> > feel free to review the changes for possible inclusion in a future
> > release. My apologies in advance for my coding, I am not advanced
> > in python.
> >
> > http://www.mediafire.com/?3s6z203j5734rg
> >
> >
> >
> > _______________________________________________ Cuckoo mailing
> > list Cuckoo at public.honeynet.org
> > https://public.honeynet.org/mailman/listinfo/cuckoo
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQEcBAEBAgAGBQJPCxNwAAoJEKLAxXCp+Dw4o88IAIUtX8c+y4i92mgLvkrdG4rM
> ymZg7uC4KihxTXrA3eKPkQDmJUVlWf8E1q9afFlFByDfGO3hAZh5Y4b0sYs6+QWT
> PRPDLWDA+CGs0WLPcSt3bCP1QzvClWS8DVoA9FgMAB0dklvA2hscYk5ox9lrNyCC
> /7+8SX0xI7Ehk6Ryj6zGvXtWykrNSaW5NggtUUyFsaqv/q7PVUpfLRe8aHnBGdP0
> O9IU0JYRjVyu8vHRFrTYMqiDWLYFEaGThQGvnJDA9SQCQz0J8rKsfvukwl/b/gcS
> 01YCDvq/+6MWEQWv9uTTKtsS9LP+AOaPj99MFPxYVCD+cPBpqku4+338YZKLeWk=
> =SGyf
> -----END PGP SIGNATURE-----
> _______________________________________________
> Cuckoo mailing list
> Cuckoo at public.honeynet.org
> https://public.honeynet.org/mailman/listinfo/cuckoo
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://public.honeynet.org/pipermail/cuckoo/attachments/20120109/3cfe169d/attachment.html 

[prev in list] [next in list] [prev in thread] [next in thread]