SaltwaterRoom is a simple sandbox based on docker. It supports x86_64, MIPS, ARM file format, can identify the behavior of mining, worms, DDos of malware.
- linux system(test on ubuntu 16.04)
- python2.7
- docker and some images
docker pull ubuntu:latest
docker pull npmccallum/debian-mips:jessie
docker pull ioft/armhf-ubuntu:latest- qemu-user
apt-get update && apt-get install -y --no-install-recommends qemu-user-static binfmt-support
update-binfmts --enable qemu-arm
update-binfmts --display qemu-arm
update-binfmts --enable qemu-mips
update-binfmts --display qemu-mips
sudo chmod a+x /usr/bin/qemu-*- python requirements
pip install -r requirementshelp information
python saltwaterroom.py -hexample
python saltwaterroom.py junoThe default monitoring time is 30 minutes, you can press ctrl-c to close at any time, the program will automatically delete the container.
- support for x86
- add data storage
- optimize monitoring performance