Come c'è scritto, devo impostare degli ip statici affinchè da Linux possa aprire la windows per l'analisi. In parole povere devo collegarle in qualche modo. Ho seguito tutto il setup alla lettera. Ma, mentre con windows è stata una passeggiata impostare l'ip statico , con Ubuntu sto avendo non pochi problemi.
se faccio "ifconfig" esce questo:
con ip: 10.0.2.15, mentre io ho impostato l'ip 10.10.10.2 nel file virtualbox.conf di cuckoo (come al punto 3 della guida). In più se lancio nm-connection-editor come connessione ethernet risulta che sto usando DHCP, quindi automatico. E se provo a modificare con "manuale" su terminale mi da errore. Se può servire, la linux comunque va su internet (da virtualbox la rete di linux è impostata su nat, mentre la windows su scheda con bridge).
Di ip e configurazioni di rete, come si può notare, ne capisco ben poco. Qualcuno sa darmi qualche consiglio?
grazie anticipatamente e buon weekend a tutti
EDIT: vi incollo il file virtualbox.conf
Codice: Seleziona tutto
[virtualbox]
# Specify which VirtualBox mode you want to run your machines on.
# Can be "gui" or "headless". Please refer to VirtualBox's official
# documentation to understand the differences.
mode = headless
# Path to the local installation of the VBoxManage utility.
path = /usr/bin/VBoxManage
# If you are running Cuckoo on Mac OS X you have to change the path as follows:
# path = /Applications/VirtualBox.app/Contents/MacOS/VBoxManage
# Default network interface.
interface = vboxnet0
# Specify a comma-separated list of available machines to be used. For each
# specified ID you have to define a dedicated section containing the details
# on the respective machine. (E.g. cuckoo1,cuckoo2,cuckoo3)
machines = cuckoo1
[cuckoo1]
# Specify the label name of the current machine as specified in your
# VirtualBox configuration.
label = Win7
# Specify the operating system platform used by current machine
# [windows/darwin/linux].
platform = windows
# Specify the IP address of the current virtual machine. Make sure that the
# IP address is valid and that the host machine is able to reach it. If not,
# the analysis will fail.
ip = 10.10.10.3
# (Optional) Specify the snapshot name to use. If you do not specify a snapshot
# name, the VirtualBox MachineManager will use the current snapshot.
# Example (Snapshot1 is the snapshot name):
snapshot = Istantanea 1
# when dumping network traffic from this machine with tcpdump. If specified,
# overrides the default interface specified in auxiliary.conf
# Example (vboxnet0 is the interface name):
interface =
# (Optional) Specify the IP of the Result Server, as your virtual machine sees $
# The Result Server will always bind to the address and port specified in cucko$
# however you could set up your virtual network to use NAT/PAT, so you can spec$
# the IP address for the Result Server as your machine sees it. If you don't sp$
# address here, the machine will use the default value from cuckoo.conf.
# NOTE: if you set this option you have to set result server IP to 0.0.0.0 in c$
# Example:
resultserver_ip = 10.10.10.2
# (Optional) Specify the port for the Result Server, as your virtual machine se$
# The Result Server will always bind to the address and port specified in cucko$
# however you could set up your virtual network to use NAT/PAT, so you can spec$
# the port for the Result Server as your machine sees it. If you don't specify $
# here, the machine will use the default value from cuckoo.conf.
# (Optional) Specify the port for the Result Server, as your virtual machine se$
# The Result Server will always bind to the address and port specified in cucko$
# however you could set up your virtual network to use NAT/PAT, so you can spec$
# the port for the Result Server as your machine sees it. If you don't specify $
# here, the machine will use the default value from cuckoo.conf.
# Example:
resultserver_port = 2042
# (Optional) Set your own tags. These are comma separated and help to identify
# specific VMs. You can run samples on VMs with tag you require.
tags =
# Mostly unused for now. Please don't fill it out.
options =
# (Optional) Specify the OS profile to be used by volatility for this
# virtual machine. This will override the guest_profile variable in
# memory.conf which solves the problem of having multiple types of VMs
# and properly determining which profile to use.
osprofile =
[honeyd]
# For more information on this VM please refer to the "services" section of
# the conf/auxiliary.conf configuration file. This machine is a bit special
# in the way that its used as an additional VM for an analysis.
# *NOTE* that if this functionality is used, the VM should be registered in
# the "machines" list in the beginning of this file.
label = honeyd
platform = linux
ip = 192.168.56.102
# The tags should at least contain "service" and the name of this service.
# This way the services auxiliary module knows how to find this particular VM.
tags = service, honeyd
# Not all services actually have a Cuckoo Agent running in the VM, for those
# services one can specify the "noagent" option so Cuckoo will just wait until
# the end of the analysis instead of trying to connect to the non-existing
# Cuckoo Agent. We can't really intercept any inter-VM communication from the
# host / gateway so in order to dump traffic between VMs we have to use a
# different network dumping approach. For this machine we use the "nictrace"
# functionality from VirtualBox (which is basically their internal tcpdump)
# and thus properly dumps inter-VM traffic.
options = nictrace noagent
