Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/mikehorn-git/mal
Malware Automatic Lab (MAL).
https://github.com/mikehorn-git/mal
blackarch flarevm malware-analysis packer remnux vagrant virtualbox
Last synced: about 2 months ago
JSON representation
Malware Automatic Lab (MAL).
- Host: GitHub
- URL: https://github.com/mikehorn-git/mal
- Owner: MikeHorn-git
- License: mit
- Created: 2024-09-08T08:45:08.000Z (4 months ago)
- Default Branch: main
- Last Pushed: 2024-09-18T12:13:06.000Z (3 months ago)
- Last Synced: 2024-10-11T03:42:08.713Z (3 months ago)
- Topics: blackarch, flarevm, malware-analysis, packer, remnux, vagrant, virtualbox
- Language: HCL
- Homepage:
- Size: 12.7 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Available OS
* [Blackarch](https://www.blackarch.org/index.html)
* [FlareVM](https://github.com/mandiant/flare-vm)
* [REMnux](https://docs.remnux.org/)
# Requirements
* Packer
* Ssh
* Vagrant
* Virtualbox
# Virtualbox
## Build Blackarch
```bash
git clone https://github.com/MikeHorn-git/MAL.git
cd MAL/packer
packer init blackarch.pkr.hcl
packer build blackarch.pkr.hcl
```
## Build FlareVM
Place your Windows iso in iso/ directory. Default name is Windows_11.iso
```bash
git clone https://github.com/MikeHorn-git/MAL.git
cd MAL/packer
packer init flarevm.pkr.hcl
packer build flarevm.pkr.hcl
```
Stop the VM manually, after the FlareVM script is ended.
Default shutdown_timeout is 2h.
## Build REMnux
```bash
git clone https://github.com/MikeHorn-git/MAL.git
cd MAL/packer
packer init remnux.pkr.hcl
packer build remnux.pkr.hcl
```
When the VM is up :
```bash
sudo systemctl start ssh
```
Default ssh_timeout is 5m.
# Custom FlareVM
* Modify config/config.xml
* MAL used the [default](https://github.com/mandiant/flare-vm/blob/main/config.xml) one
# Credits
* [Baune8D](https://github.com/Baune8D/packer-windows-desktop/tree/main)
* [Logo](https://www.terranovasecurity.com/fr/solutions/sensibilisation-cybersecurite/quest-ce-quun-logiciel-malveillant)
# To-Do
- [x] Blackarch Support
- [ ] Nix Integration
- [ ] Proxmox Support
- [ ] Qemu Support