pfSense Reviews

Cuckoo Sandbox Reviews

pfSense mentions (10)

• Need some help on setting up home network

  Https://pfsense.org (netgate hardware is used in businesses). Source: over 1 year ago

• Is pfsense.org down, or is it just me?

  I am having trouble seeing available packages, updating pkg, or getting a response from pfsense.org. Is anyone else seeing this or am I going to spend the rest of my day chasing bugs? Source: over 1 year ago

• Help with VLAN

  From the PIA Client to pfsense.org PING pfsense.org (208.123.73.69) from 10.6.112.128: 56 data bytes 64 bytes from 208.123.73.69: icmp_seq=0 ttl=49 time=49.455 ms 64 bytes from 208.123.73.69: icmp_seq=1 ttl=49 time=51.927 ms 64 bytes from 208.123.73.69: icmp_seq=2 ttl=49 time=49.333 ms 64 bytes from 208.123.73.69: icmp_seq=3 ttl=49 time=49.133 ms 64 bytes from 208.123.73.69: icmp_seq=4 ttl=49 time=49.027 ms ... Source: over 1 year ago

• Can Surveillance Station record offsite cameras ?

  The above setup is critical to a reliable system. I'd use enterprise quality routers for a store and home connection. I personally use https://pfsense.org but there are many to choose from and several open source. Source: almost 2 years ago

• Exposing Synology to web: best/practical practices?

  What I would do is put that thing in DMZ and install a good router behind it like https://www.pfsense.org. No affiliation, just been my router for many years. There's also it's sibling https://opnsense.org. There are many, just get a enterprise quality router. Source: almost 2 years ago

Cuckoo Sandbox mentions (18)

• How to analyze malicious PDF?

  You can detonate it into a VM running an instance of Cuckoo Sandbox. If you want to go the extra mile, you can dump the memory of said VM and analyse it with Volatility Framework. Also, if you want to quickly identify behavioural patterns in executable code, you can use Mandiant's CAPA tool (though idk if it works on .pdfs). Source: about 1 year ago

• "PDF".exe pwns my user, but how exactly?

  You should save a copy of the .exe, copy it into a VM running Cuckoo and get a report on exactly what the .exe does. Without this automated dissection, people are making educated guesses. They're probably right, but why not be certain? There is an online version too - https://cuckoosandbox.org. Source: about 1 year ago

• Exist a way, that can tell X file that I want to download not contain any malicious file?

  You could use a service like cuckoo to check links/files. Source: over 1 year ago

• Best practices for malware analysis and securing the environment you're testing in.

  I made my own lab in college using a series of VM's, A windows 10 machine that was packed with analysis tools, a kali listening machine (running inetsim or fakenet, I can't remember.) and I had remnux on another machine (which I ended up not really making use of, but it was there.) I used virtualbox and ran these VM's in an internal network, no internet access. Disabled all clipboard and file sharing after... Source: over 1 year ago

• Sandbox?

  Another option if you want to self-host is https://cuckoosandbox.org/ . Of note, it's currently an unmaintained project so issues may not receive support, but it is free. Source: over 1 year ago