Base
Hardened build
minimal ports, security patches applied at build time
MWDB Core on Ubuntu 24.04 LTS
Azure
Security
Malware sample repository and analysis sharing platform with tagging, search and group based access.
Overview
MWDB Core is the open source malware repository developed by CERT Polska and the engine behind the mwdb.cert.pl service. It stores files, extracted static configurations and text blobs as content addressed objects, links them with parent and child relations, and lets analysts enrich every object with tags, attributes and comments. A Lucene style query language searches across hashes, names, tags, attributes and configuration fields, and a capability based permission model with users, groups and sharing rules controls exactly who can see and do what. Everything is available through the web UI and a documented REST API, so automated pipelines and analysts work against the same database.
Why the cloudimg image
The cloudimg image is a complete single node deployment: the API under gunicorn, the web application served by nginx over TLS, PostgreSQL as the object database and Redis as the rate limiting backend, all bound to loopback except the single HTTPS front door. Every secret is generated on your own virtual machine at first boot, including the database password, the application secret key that signs every session and API key, the TLS certificate and a unique administrator password, and the administrator account itself is created for the first time on your VM. Self registration is disabled and the image ships completely empty: no sample, plugin, rule set or signature database of any kind is present. The base is fully patched and paired with a deployment guide, and every image is backed by 24/7 cloudimg support.
Common uses
- Running a private malware sample repository for a SOC, CERT or research team
- Sharing samples, configs and analysis notes with partner organisations under group based access
- Feeding automated analysis pipelines through the REST API and mwdblib
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
2F
2FAuth on Ubuntu 24.04 LTS
Security
2FAuth is a free, open source, self hosted web app for managing your two factor authentication accounts.
Ad
acme-dns on Ubuntu 24.04 LTS
Security
The image installs acme-dns 2.0.2 from the official upstream release (github.com/acme-dns/acme-dns, the project formerly...
addy.io on Ubuntu 24.04
Security
Mail sent to an alias is forwarded to your real inbox, and you can reply from the alias so the other side never learns w...
AliasVault on Ubuntu 24.04
Security
AliasVault is an open source, end to end encrypted password manager combined with a private email alias service that you...
Apache SpamAssassin
Security
This image runs Apache SpamAssassin, the long established open source anti spam platform, fully configured and security ...
Apache Syncope on Ubuntu 24.04
Security
Apache Syncope is an open source identity management and identity governance platform.