Update of requirements.txt about peekabooav HOT 4 CLOSED

As it happens, I had this prepared exactly the same way already. Testing for problems/regressions now.

from peekabooav.

I noticed that requests stays at 2.13.0 even though we require 2.19.1 exactly or greater. In my testing environment pip install -r requirements.txt throws:

cuckoo 2.0.6.2 has requirement chardet==2.3.0, but you'll have chardet 3.0.4 which is incompatible.
cuckoo 2.0.6.2 has requirement requests[security]==2.13.0; sys_platform == "linux2", but you'll have requests 2.20.1 which is incompatible.

Investigating.

from peekabooav.

Cuckoo has pinned almost all of its dependencies as per cuckoosandbox/cuckoo#602. At least requests and yara overlap. requests is pinned to a way older version by cuckoo than our minimum - which still seems to work though. Possible solutions:

• take pains to keep Peekaboo compatible to the same versions as (potentially various) Cuckoo versions
• install Cuckoo and Peekaboo in separate virtualenvs/pipenvs/... where they can have different module versions installed
• run them in Docker containers (REST API mode only)
• "We know what we're doing"-mode: Ignore Cuckoo (and perhaps Peekaboo) version requirements, e.g. by using Linux distribution packages and circumventing Cuckoo's setup.py and Peekaboo's requirements.txt.

from peekabooav.

With scVENUS/Peekaboo-Installer#12 I now get the following versions:

PeekabooAV# /opt/peekaboo/bin/pip list | grep $(cut -d \> -f1 requirements.txt | tr '\n' '|' | sed -e "s,|$,,g" -e "s,|,\\\\|,g")
enum34           1.1.6     
oletools         0.53.1    
python-magic     0.4.15    
requests         2.20.1    
sdnotify         0.3.2     
Twisted          18.9.0    
yara-python      3.8.1     

Meanwhile, cuckoo uses those:

PeekabooAV# /opt/cuckoo/bin/pip list | grep $(cut -d \> -f1 requirements.txt | tr '\n' '|' | sed -e "s,|$,,g" -e "s,|,\\\\|,g")
enum34            1.1.6      
oletools          0.51       
python-magic      0.4.12     
requests          2.13.0     
yara-python       3.6.3      

from peekabooav.