Monday, November 2, 2015

Viper framework install steps

NOTE: This blog has been merged with WordPress. You will be redirected to this article on the WordPress site in 10 seconds...

If you want to go there now, click here - https://hazmalware.wordpress.com/2015/11/02/viper-framework-install-steps/



Viper framework install steps

I got many of these steps from Kev's blog here - https://techanarchy.net/lab/viper/ - but had to make a few changes to suite my needs.

Ubuntu OS
sudo apt-get update
sudo apt-get upgrade
sudo apt-get install build-essential python-dev python-pip git automake libtool libimage-exiftool-perl swig libssl-dev
sudo pip install SQLAlchemy PrettyTable python-magic
#allow retrieval of files through tor
sudo apt-get install python-socksipy
wget https://github.com/plusvic/yara/archive/v3.4.0.tar.gz
tar xvzf v3.4.0.tar.gz
cd yara-3.4.0
sudo bash build.sh
sudo make install
cd yara-python
sudo python setup.py install
wget http://sourceforge.net/projects/ssdeep/files/ssdeep-2.13/ssdeep-2.13.tar.gz/download
mv download ssdeep.tar.gz
tar xvzf ssdeep.tar.gz
cd ssdeep-2.13/
./configure
make
sudo make install
sudo pip install pydeep
wget https://github.com/androguard/androguard/archive/v2.0.tar.gz
tar xvzf v2.0.tar.gz
cd androguard-2.0
sudo python setup.py build
sudo python setup.py install
wget https://github.com/smarnach/pyexiftool/archive/v0.2.0.tar.gz
cd pyexiftool-0.2.0/
sudo python setup.py build
sudo python setup.py install
sudo mkdir /opt/viper
cd /opt/viper
sudo git clone https://github.com/botherder/viper .
sudo pip install -r requirements.txt 
Downloading/unpacking pype32 (from -r requirements.txt (line 25))
Could not find a version that satisfies the requirement pype32 (from -r requirements.txt (line 25)) (from versions: 0.1-alpha4)
Some externally hosted files were ignored (use --allow-external to allow).
sudo pip install --pre pype32
sudo pip install -r requirements.txt
sudo ./viper.py 
lab@viper:/opt/viper$ sudo ./viper.py
         _
        (_)
   _   _ _ ____  _____  ____
  | | | | |  _ \| ___ |/ ___)
   \ V /| | |_| | ____| |
    \_/ |_|  __/|_____)_| v1.3-dev
          |_|

You have 0 files in your default repository
exit
sudo ./web.py -H <ipaddress> -p 8080