从 Python 查看 vmdk 文件?
有没有办法从 Python 查看 vmdk 文件的内容,并能够从中读取文件? (我不需要写信给它)。如果没有,是否有任何方法可以在主机上安装 vmdk 文件,或者通常有任何其他方法可以查看 vmdk 文件而不将其附加到虚拟机并运行它?
Is there any way to view the contents of a vmdk file from Python, and to be able to read files from it? (I have no need to write to it). If not, is there any way to mount a vmdk file on a host machine, or generally any other way to look at a vmdk file without attaching it to a VM and running it?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
您可以使用磁盘装载实用程序将 VMDK 装载为本地磁盘。
You can mount a VMDK as a local disk with Disk Mount Utility.
如果您希望导入模块以通过 python 渗透 vmdk 数据,您可能需要查看 ctypes-vddk。您可以在这里找到该模块; http://code.google.com/p/ctypes-vddk/
就个人而言,如果您希望利用 VDDK API(通过 C++),则可以使用虚拟磁盘开发套件 5.5 及其相应的 API。实际的编程指南也可以在这里找到:hxxp://pubs.vmware.com/vsphere-55/topic/com.vmware.ICbase/PDF/vddk55_programming.pdf。此外,还有一个实现此功能的工具,可以在这里找到: http://sourceforge.net/projects/vfae /。最后,有一篇关于使用 VDDK 进行 VMDK 取证分析的文章:hxxp://crucialsecurityblog.harris.com/2012/01/18/how-can-vmwares-virtual-disk-development-kit-help-法医检查员/
享受...
You may want to take a look at ctypes-vddk if you are looking to import modules for exfiltration of vmdk data through python. You can find the module here; http://code.google.com/p/ctypes-vddk/
Personally, if you are looking to leverage the VDDK API (via C++), you can use Virtual Disk Development Kit 5.5 and its corresponding API. The actually programming guide can also be found here: hxxp://pubs.vmware.com/vsphere-55/topic/com.vmware.ICbase/PDF/vddk55_programming.pdf. Additionally, there is a tool that implemented this which can be found here: http://sourceforge.net/projects/vfae/. Lastly, there was a writeup on the use of VDDK with regard to VMDK forensic analysis: hxxp://crucialsecurityblog.harris.com/2012/01/18/how-can-vmwares-virtual-disk-development-kit-help-the-forensic-examiner/
enjoy...