Capev2 Install Instructions

It was a bitch to try and get this to work and even now it requires more fiddling with to make it functional. BUT this is what I had to do to at least make it kinda work.

sudo -i
apt-get update && apt-get upgrade -y

sudo apt install xfce4 xfce4-terminal
-- reboot

startxfce4

sudo apt-get install firefox

Copy raw code from "https://github.com/kevoreilly/CAPEv2/blob/master/installer/cape2.sh"
sudo nano capev2.sh "paste shit"
sudo chmod +xr capev2.sh

Copy raw code from "https://raw.githubusercontent.com/doomedraven/Tools/master/Virtualization/kvm-qemu.sh"
sudo nano kvm-qemu.sh "paste shit"
sudo chmod +xr kvm-qemu.sh
sudo nano kvm-qemu.sh
find all instances of "" and replace with some kind of hardware identifer from "https://github.com/linuxhw/ACPI"
Can be found under the term "signature" an example one I chose from EVGA was "DBG2"

Run the following but replace with your username on the host
$ sudo ./kvm-qemu.sh all | tee kvm-qemu.log
REBOOT YOU BASTARD

Run the following but replace with your username on the host
sudo ./kvm-qemu.sh virtmanager | tee kvm-qemu-virt-manager.log
REBOOT YOU BASTARD

sudo ./cape2.sh all | tee cape.log
REBOOT YOU BASTARD

cd /opt/CAPEv2
sudo keyring --disable
sudo poetry install
REBOOT YOU BASTARD

cd /opt/CAPEv2
poetry show
poetry env list
sudo poetry update

Run "sudo -u postgres -H sh -c "psql -d \"cape\" -c \"ALTER DATABASE cape OWNER TO cape;\"""
`this fixes the error "lib.cuckoo.common.exceptions.CuckooDatabaseError: Unable to create or connect to database: (psycopg2.errors.InsufficientPrivilege) permission denied for schema public" with postgressql

cd /opt/CAPEv2/config
sudo nano cuckoo.conf
change resultserver to of host (run ip a)
sudo systemctl daemon-reload

sudo nano routing.conf
Edit the tor line and set it to "no"
This can be changed down the road once things are functional.

start virt-manager in the gui and connect via ssh to the local server. The following instructions will help your bitch ass
ssh-gen -t rsa
ssh-copy-id -i ~/.ssh/idrsa.pub YOURUSERNAME@IPADDRESSOFTHESERVER
if shit does not work try and fix perms
chmod 700 /home/user
name/.ssh && chmod 600 /home/username/.ssh/authorizedkeys
chown -R username:username /home/username/.ssh

Apparently you need to run this
sudo apt install qemu-kvm

Get the windows 10 box up and running
https://www.doomedraven.com/2020/04/how-to-create-virtual-machine-with-virt.html

hint, copy and paste the ISO into /var/lib/libvirt/images to be able to use the fucking thing

Once you get windows 10 or whatever installed

Follow this crap
https://capev2.readthedocs.io/en/latest/installation/guest/requirements.html

edit /opt/CAPEv2/conf/cuckoo.conf
change the reporting server to the unbuntu server that is running cape

edit /opt/CAPEv2/conf/kvm.conf
change the first lines and add the right KVM hostnames and what not

install mongo DB
sudo wget http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl1.1_1.1.1f-1ubuntu2_amd64.deb
sudo dpkg -i libssl1.11.1.1f-1ubuntu2amd64.deb
sudo apt-get install -y mongodb-org
sudo reboot now

to get tcpdump working, change configurations inside of routing.conf and edit the line "tcpdump = /usr/sbin/tcpdump" to tcpdump = /usr/bin/tcpdump inside of auxerility to get it to work
https://github.com/cuckoosandbox/cuckoo/issues/2229


You'll only receive email when they publish something new.

More from dfitswell
All posts