Pandora-box

Introduction

As the use of USB disks are still prevalent, so has the risk of malware infection through these devices. Malware can easily spread from one computer to another through USB disks, making it a critical threat to information security. This is where our USB scanning device comes in.

Pandora-box is designed to detect and remove malware from USB disks. The software is based on Pandora from CIRCL and is distributed under GPL, making it freely accessible to security professionals.

The software uses advanced scanning techniques to identify and remove malware from USB disks. It performs a comprehensive scan of the disk, analyzing each file for any signs of malicious activity. If it detects any malware, Pandora-box will quarantine the infected files and remove them from the disk.

Featues

Pandora-Box is a USB scaning station based on Pandora, a malware analysis tool.

Pandora-box uses :

• ClamAV : an open-source antivirus engine for detecting trojans, viruses, malware & other malicious threats.
• Comodo Antivirus : the free version of Comodo Antivirus.
• Hashlookup : a public API to lookup hash values against known database of files.
• Yara Rules : the YARA signature and IOC database used by LOKI and THOR Lite scanners.

Other tools may be used by configuring Pandora antivirus-workers.

It runs on Ubuntu 22.04 server LTS.

Interface

It has a graphical user interface :

and a text user interface for advanced users :

Roadmap

If you want to contribute, we have a roadmap.

Installation

The installation and configuration procedure is documented.

License

Pandora-box is an open source software distributed under GPL.