bad security of vmware guest isolation from host

作者

1. without administrative privilege, only using guest os user password, we can copy any file from guest to host by

#startup win7.vmx first.
vmrun.exe -gu guest_os_user_name -gp guest_os_user_password copyFileFromGuestToHost "E:\vmimg\win7\win7.vmx" c:\windows\system32\notepad.exe e:\notepad.exe

2. example about communication between guest and host using vmware backdoor routines:
https://github.com/vmware/open-vm-tools/blob/master/open-vm-tools/services/plugins/dndcp

refer to:
n0nick

start tiny web server with current folder as http root path

作者

httpd.py

1
2
3
4
5
6
7
8
9
10

from http.server import HTTPServer, SimpleHTTPRequestHandler
 
handler = SimpleHTTPRequestHandler
handler.extensions_map.update({
	".js": "application/javascript",
})
 
server_address = ("", 8008)
server = HTTPServer(server_address, handler)
server.serve_forever()

how to run

1

python3 ./httpd.py

unknown filesystem type 'vmhgfs'

作者

because vmhgfs-fuse is not built,

1

apt install libfuse-dev

before compiling open-vm-tools.

following is the autorun scripts, e.g. open-vm-tools are installed in /home/work/vmware/open-vm-tools/open-vm-tools/installed.

  • /etc/xdg/autostart/vmware-user.desktop

    1
2
3
4
5
6

    [Desktop Entry]
Type=Application
Encoding=UTF-8
Exec=/home/work/vmware/open-vm-tools/open-vm-tools/installed/bin/vmware-user-suid-wrapper
Name=VMware User Agent
X-KDE-autostart-phase=1
  • /etc/rc.local

    1
2
3
4
5
6
7

    #!/bin/bash
(
cd /home/work/vmware/open-vm-tools/open-vm-tools/installed/bin/
LD_LIBRARY_PATH=`pwd`/../lib:$LD_LIBRARY_PATH ./vmtoolsd &
./vmhgfs-fuse /mnt/hgfs/
./vmware-user
)
1
2

chmod +x /etc/rc.local
reboot

日语词尾总结

作者 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

さ		表程度		高さ、深さ、长さ
み		表样态		楽しみ、弱み、重み、おかしみ
あた(当)り	pre
ずつ		均摊
ごと(毎)
ごと(共)
あて(宛)	to
あま(余)り
おき(置)	每隔
かえる		very
かけ(掛)	刚开始、穿戴、顺便、付出、折扣、倍数、座位
かげん(加減)	恰好
がましい	like
がる		feel
ぐむ		长出、含有
き(気)		感觉、性质
け/げ(気)	样子、情况、感觉
ごし(越)	隔着、经过
ごし(腰)	态度、姿势
だらけ		full of
づき(付)
づめ(詰)	装满、拥挤、一直
ばむ		微有
ぶり/っぷり(振)	样子、情况，时间经过
ぶ(振)る	摆……架子
ぽい/っぽい	有……状态，有……倾向
まる		渐趋于某种状态
め(目)		表顺序
やか		表状态

refer to:
https://wenda.so.com/q/1389366964064632
今川日语

one principle not suit everywhere

作者

When Dante enters Hell, Minos asks him, "Did Beatrice give you a smile when she came across you in the street?"

Dante replies, "No."

Minos shouts, "You're foolish, you and she are in two different parallel worlds, your zealousness is useless!"

Then Minos turns to Rhadamanthus, "Put the repairing task to him."

What's the task? For people in Nephalem hacked the message channel between Hell and Heaven, residents in Hell need a more secure channel reporting to Zeus.

Dante is very confident about the job, has done it in a week.

While Rhadamanthus runs through the source code Dante has just compiled and tested, Aeacus shakes his head violently, "Why do you not check the variables? You shouldn't call a memory operation function with null pointer variables. Look here and there, so many 'free' routines you invoked didn't obey this law."

"Must check?" Dante says with contempt and looks to Rhadamanthus for a reply.

"Yes." Rhadamanthus replies without hesitation.

This drops Dante in a situation that he needs to check himself first. He returns to his computer and begins to google the libc specifications, but he stops, and appeals to Minos, "Boss, are they right?"

"Of course! Because it's too dangerous without check, are you intend on ruining the Hell?" as is the deciding vote from Minos.

git备忘录

作者 
1
2
3
4
5

git branch -a
git fetch
git checkout
git remote -v
git remote set-url origin https://github.com/euhat/EuhatExpert.git

copy and paste out of vmware centos failed

作者

some centos distribution has no open-vm-tools package, so we need to compile it by hand:

yum install libmspack-devel pam-devel xmlsec1-devel libXext-devel libXinerama-devel libXrender-devel libXrandr-devel libXtst-devel gtk3-devel gtkmm30-devel libtirpc-devel rpcgen libtool-devel

git clone https://github.com/vmware/open-vm-tools.git
cd open-vm-tools/open-vm-tools
autoreconf -i
./configure
make
make install

vmware-user

ps. how to enable auto-fitting with resolution

#install driver
yum install xorg-x11-drv-vmware
#add option to configure open-vm-tools
./configure --enable-resolutionkms
make
make install
#startup two vmtoolsds, one for vmusr, one for vmsvc which serves auto-resizing
vmware-user
vmtoolsd

refer to:
https://docs.vmware.com/en/VMware-Tools/11.3.0/com.vmware.vsphere.vmwaretools.doc/GUID-8B6EA5B7-453B-48AA-92E5-DB7F061341D1.html

mysql备忘录

作者

密码问题

1
2
3

#/etc/my.cnf
[mysqld]
skip-grant-tables=1
1
2

FLUSH privileges;
ALTER USER 'root'@'localhost' IDENTIFIED BY 'admin@123';

重启

1

systemctl restart mysqld

refer to:
https://www.cnblogs.com/huaisn/articles/14149356.html

comparing ubuntu with centos in package management

作者

yum

1
2
3
4
5
6
7
8
9

# find which package the cmd 'a.out' belongs to
yum provides */bin/a.out
# check if 'wget' package is installed
yum list installed | grep wget
# download 'wget' package to /tmp/rpm/
yum install yum-plugin-downloadonly
yum download --downloaddir=/tmp/rpm/ --downloadonly wget
# list all files in 'wget' package
rpm -qlp /tmp/rpm/wget*.rpm

apt

1
2
3
4
5
6

# find which package 'Python.h' belongs to
apt install apt-file
apt-file update
apt-file search Python.h
# list all files in 'wget' package
dpkg -L wget

package names

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

  ubuntu			  centos
ssh				openssh-clients
udev				systemd-udev
libc6-dev			glibc-devel
libglib2.0-dev			glib2-devel
libffi-dev			libffi-devel
libncurses5			ncurses
libncurses5-dev			ncurses-devel
libsqlite3-dev			sqlite-devel
libnet1-dev			libnet-devel
libreadline6			readline
bridge-utils			bridge-utils
libpcre3-dev			pcre-devel
libyaml-dev			libyaml-devel
libmagic-dev			file-devel
liblua5.1-0-dev			lua-devel
libssl-dev			openssl-devel
zlib1g-dev			zlib-devel
lm-sensors			lm_sensors
ifenslave			iputils
ntpdate				ntp
redis-server			redis
libperl-dev			perl-devel
libjpeg-turbo8-dev		libjpeg-turbo-devel
libfreetype6-dev		freetype-devel
iproute2			iproute
iputils-ping			iputils
ifupdown			NetworkManager
net-tools			net-tools
libpython3.8-dev		python3-devel
mysql-server			mysql5-server
libmysqlclient-dev		mysql5-devel
tofrodos			dos2unix
qemu-user-static
initramfs-tools
gcc-5-plugin-dev
build-essential
libprelude-dev
libzmq3-dev
libhtp-dev
fbset				maybe in xorg-x11-server

deprecated in ubuntu

1
2

sysv-rc-conf
libjpeg-dev # why?

refer to:
https://blog.csdn.net/mimosa2008/article/details/102833837
https://forums.centos.org/viewtopic.php?t=14711
https://blog.csdn.net/xldwhj/article/details/72831674
https://www.cnblogs.com/orcl-2018/p/13276558.html
https://blog.csdn.net/HAOMCU/article/details/7268687