upstream rooter

[ctxis]

upstream rooter

[doomedraven]

https://github.com/ctxis/CAPE/blob/master/utils/rooter.py

[wizkidnc]

brain fog on my part. thanks @doomedraven

[wizkidnc]

So I just took a look at this and it is trying to import from core and that may be where my issue is I think.

[wizkidnc]

so possibly this is missing in CAPE I guess from the latest commit. I could however be wrong.

[enzok]

My bad. The rooter file is indeed missing from my commit. I will add it ASAIC.

[wizkidnc]

I really appreciate all you do. This sandbox is really awesome.

…

On May 21, 2018, at 3:06 PM, enzo ***@***.***> wrote: My bad. The rooter file is indeed missing from my commit. I will add it ASAIC. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

[enzok]

@wizkidnc The commit has been merged. Please check it out.

[Kuzuto]

I just updated the new merged.
I'm getting :

Traceback (most recent call last):
File "cuckoo.py", line 138, in
test=args.test)
File "cuckoo.py", line 63, in cuckoo_init
init_rooter()
File "/home/cuckoo/CAPE/lib/cuckoo/core/startup.py", line 657, in init_rooter
if not Config("vpn").vpn.enabled and cuckoo.routing.route == "none":
AttributeError: Config instance has no attribute 'vpn'

If I rename conf/vpn.conf.py to vpn.conf as the other .conf files, it can load the config, but then gets

Traceback (most recent call last):
File "cuckoo.py", line 138, in
test=args.test)
File "cuckoo.py", line 64, in cuckoo_init
init_routing()
File "/home/cuckoo/CAPE/lib/cuckoo/core/startup.py", line 782, in init_routing
if not rooter("nic_available", cuckoo.routing.tor_interface):
File "/home/cuckoo/CAPE/lib/cuckoo/core/rooter.py", line 23, in rooter
if not os.path.exists(cfg.cuckoo.rooter):
File "/usr/lib/python2.7/genericpath.py", line 18, in exists
os.stat(path)
TypeError: coercing to Unicode: need string or buffer, NoneType found

I can't see what's wrong, but it can't startup on my installation.

[enzok]

Ugh, sorry about that. My IDE must have appended the .py to that conf file. It should be vpn.conf.

As for the other error:

From the cuckoo.conf file:

# Path to the unix socket for running root commands.
rooter = /tmp/cuckoo-rooter

Have you started the rooter daemon?

I use the following script (make sure you sudo as rooter needs to run as root):

$CUCKOO_PATH=/opt/cuckoo

# Stop and Start rooter.py
pkill -f rooter.py
python $CUCKOO_PATH/utils/rooter.py /tmp/cuckoo-rooter &

[Kuzuto]

thanks for the quick reply..
I tried to set the route=none and internet=none or to internet and also starting up rooter.py, but getting the following error on every startup :

Traceback (most recent call last):
File "cuckoo.py", line 138, in
test=args.test)
File "cuckoo.py", line 64, in cuckoo_init
init_routing()
File "/home/cuckoo/CAPE/lib/cuckoo/core/startup.py", line 782, in init_routing
if not rooter("nic_available", cuckoo.routing.tor_interface):
File "/home/cuckoo/CAPE/lib/cuckoo/core/rooter.py", line 23, in rooter
if not os.path.exists(cfg.cuckoo.rooter):
File "/usr/lib/python2.7/genericpath.py", line 18, in exists
os.stat(path)
TypeError: coercing to Unicode: need string or buffer, NoneType found

The error : coercing to Unicode: need string or buffer
looks like the same from this https://stackoverflow.com/questions/16169035/coercing-to-unicode-need-string-or-buffer-nonetype-found-when-rendering-in-dja

But what is it that returns empty.. ?

[enzok]

Fix incoming...

[kevoreilly]

How's this shaping up? Any joy getting it sorted?

[enzok]

This was fixed (hopefully) in #40.

[Kuzuto]

Hi.. sorry for not getting back on this. My environment needed to be restored before I could test.

After the new #40, The errors is fixed, but I still have some problems getting it started.
Is it true I can't start it up without Internet rooter running?
I put all config to 'none' and off in the cuckoo.conf, and auxiliary.conf->tor to no, but I get this when running cuckoo.py :
CuckooStartupError: The network interface that has been configured as tor line is not available.

[Kuzuto]

Ah .. Even Inetsim & Tor is set to "off" in cuckoo.py, the script still looks if the interface i valid.
Is it possible to skip the interface check, if you set it to "off" ?

[enzok]

I added a check for the enabled value in the conf file. Pull request submitted.

[kevoreilly]

Merged pull request - let me know if this fixes up all the issues!

[Kuzuto]

For me it all worked now 👍

[wizkidnc]

I am good too. Thanks!

…

-Markis Vines

On Jun 4, 2018, at 11:14 AM, Lennart Friberg ***@***.***> wrote: For me it all worked now 👍 — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.

[kevoreilly]

Thanks for the help with this one guys. Closing 👍