cuckoosandbox/monitor
Stars: 310
Forks: 173
Pull Requests: 35
Issues: 54
Watchers: 47
Last Updated: 2022-07-22 16:03:43
The new Cuckoo Monitor.
License: GNU General Public License v3.0
Languages: Makefile, C, Shell, Python, CMake, C++, Java, OCaml, Ruby, Tcl
monitor
The new Cuckoo Monitor. Click here for documentation. If at first it doesn't compile, just try a second time!
Note that you'll need the pyyaml package, which may be installed as follows:
pip install pyyaml.
OPEN ISSUES
See all- More resilient hooking by @soumy
- Some exploit docs crash with or without monitor injection by @jjo-sec
- Unable to start with --dbg path_to/windbg.exe by @elibi
- vbe6 hooks does not cover later office apps? by @kevross33
- Additional IE hooks request (And Other API requests) by @kevross33
- Adobe Reader crashes when process injection is selected by @E3L-1
- IE9+ fails to run properly with URL analysis by @E3L-1
- Deadlock in open_handles() of pipe by @leeqwind
- Problem about limitation override in log_api function by @leeqwind
- Processes created via WMI are not hooked? by @acalarch
- How to hide VM with cuckoomonitor? by @Soukaiinaa
- Some discussion about anti cuckoo monitor by @lynnux
- hook engine bug on win7 x64 by @lynnux
- native.c: _native_copy_function crash if special antivirus software installed by @lynnux
- slow performance on win7 x64 by @lynnux
- inject not working when not running as administrator by @shahar4499
- Windows 10 x86 (10.0.16299.0 / 2017-09-22) winword.exe crash by @jamie-34254
- Unsupported Anti-VM trick by @jfloser
- How to modify an existing hook by @ranashafaqat
- Windows 8.1 machine dont hook System calls by @ferdinan4
- Install monitor help by @fesleywox
- Add hook for RtlQueryEnvironmentVariable_U by @hexlax
- Missing symbol SIG_vbscript_COleScript_Compile_0 by @dannyquist
- COleScript::Compile hook not working by @baxitaurus
- Error creating function stub for advapi32!RegOpenKeyExW. by @d0mnik
- Inject issue to malware service process by CreateService API by @Tatsuya-hasegawa
- insn hook bug by @ne1llee
- IWbemServices_ExecMethod api can not be monitored in win7 by @qux-bbb
- Virtual* function hook bug by @fzxcp3
- Debugging cuckoo monitor by @3ntr0phy
- Monitor leaks memory? by @baxitaurus
- Export the Sandbox results by @omaroudat
- Configuring procmon filter by @QandyZ