Cuckoo3 is an open-source tool to test suspicious files or links in a controlled environment.

It will test them in a sandboxed platform emulator(s) and generate a report, showing what the files or websites did during the test.

⚠️ You can currently only set up Cuckoo3 on Linux(Ubuntu) machines with Python 3.10 and run Windows sandboxes.
Check our Cuckoo3 requirements for more information.

You can see it in action at our online Cuckoo3 Sandbox.
For more insight into our plans, check out our roadmap here.

To get started, we have created Quickstart script that installs and sets up everything you need to test out Cuckoo3.

Run the following command in your terminal and follow on screen prompts.

curl -sSf https://cuckoo-hatch.cert.ee/static/install/quickstart | sudo bash

Here is a short overview of what it will do:

• Create a new non sudo Cuckoo user.
• Install Cuckoo3 and VMCloak under that user.
• Download and prepare virtual machines.
• Configure Cuckoo.
• Installs UWSGI and Nginx.
• Serve the frontend using UWSGI and Nginx.

For the full list of things this script does, check out our Quickstart walkthrough.

• For more in-depth guides and references, please check out our documentation.

This is not a production ready solution just yet.
We highly advise you not to use it in production environment!