bad security of vmware guest isolation from host

1. without administrative privilege, only using guest os user password, we can copy any file from guest to host by

#startup win7.vmx first.
vmrun.exe -gu guest_os_user_name -gp guest_os_user_password copyFileFromGuestToHost "E:\vmimg\win7\win7.vmx" c:\windows\system32\notepad.exe e:\notepad.exe

2. example about communication between guest and host using vmware backdoor routines:
https://github.com/vmware/open-vm-tools/blob/master/open-vm-tools/services/plugins/dndcp

refer to:
n0nick

start tiny web server with current folder as http root path

httpd.py

1
2
3
4
5
6
7
8
9
10
from http.server import HTTPServer, SimpleHTTPRequestHandler
 
handler = SimpleHTTPRequestHandler
handler.extensions_map.update({
	".js": "application/javascript",
})
 
server_address = ("", 8008)
server = HTTPServer(server_address, handler)
server.serve_forever()

how to run

1
python3 ./httpd.py

unknown filesystem type 'vmhgfs'

because vmhgfs-fuse is not built,

1
apt install libfuse-dev

before compiling open-vm-tools.

following is the autorun scripts, e.g. open-vm-tools are installed in /home/work/vmware/open-vm-tools/open-vm-tools/installed.

  • /etc/xdg/autostart/vmware-user.desktop

    1
    2
    3
    4
    5
    6
    
    [Desktop Entry]
    Type=Application
    Encoding=UTF-8
    Exec=/home/work/vmware/open-vm-tools/open-vm-tools/installed/bin/vmware-user-suid-wrapper
    Name=VMware User Agent
    X-KDE-autostart-phase=1
  • /etc/rc.local

    1
    2
    3
    4
    5
    6
    7
    
    #!/bin/bash
    (
    cd /home/work/vmware/open-vm-tools/open-vm-tools/installed/bin/
    LD_LIBRARY_PATH=`pwd`/../lib:$LD_LIBRARY_PATH ./vmtoolsd &
    ./vmhgfs-fuse /mnt/hgfs/
    ./vmware-user
    )
1
2
chmod +x /etc/rc.local
reboot

日语词尾总结

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
さ		表程度		高さ、深さ、长さ
み		表样态		楽しみ、弱み、重み、おかしみ
あた(当)り	pre
ずつ		均摊
ごと(毎)
ごと(共)
あて(宛)	to
あま(余)り
おき(置)	每隔
かえる		very
かけ(掛)	刚开始、穿戴、顺便、付出、折扣、倍数、座位
かげん(加減)	恰好
がましい	like
がる		feel
ぐむ		长出、含有
き(気)		感觉、性质
け/げ(気)	样子、情况、感觉
ごし(越)	隔着、经过
ごし(腰)	态度、姿势
だらけ		full of
づき(付)
づめ(詰)	装满、拥挤、一直
ばむ		微有
ぶり/っぷり(振)	样子、情况,时间经过
ぶ(振)る	摆……架子
ぽい/っぽい	有……状态,有……倾向
まる		渐趋于某种状态
め(目)		表顺序
やか		表状态

refer to:
https://wenda.so.com/q/1389366964064632
今川日语

one principle not suit everywhere

When Dante enters Hell, Minos asks him, "Did Beatrice give you a smile when she came across you in the street?"

Dante replies, "No."

Minos shouts, "You're foolish, you and she are in two different parallel worlds, your zealousness is useless!"

Then Minos turns to Rhadamanthus, "Put the repairing task to him."

What's the task? For people in Nephalem hacked the message channel between Hell and Heaven, residents in Hell need a more secure channel reporting to Zeus.

Dante is very confident about the job, has done it in a week.

While Rhadamanthus runs through the source code Dante has just compiled and tested, Aeacus shakes his head violently, "Why do you not check the variables? You shouldn't call a memory operation function with null pointer parameters. Look here and there, so many 'free' routines you invoked didn't obey this law."

"Must check?" Dante says with contempt and looks to Rhadamanthus for a reply.

"Yes." replies Rhadamanthus without hesitation.

This drops Dante in a situation that he needs to check himself first. He returns to his computer and begins to google the libc specifications, but he stops, and appeals to Minos, "Boss, are they right?"

"Of course! Because it's too dangerous without check, are you intend on ruining the Hell?" as is the deciding vote from Minos.

git备忘录

1
2
3
4
5
git branch -a
git fetch
git checkout
git remote -v
git remote set-url origin https://github.com/euhat/EuhatExpert.git

copy and paste out of vmware centos failed

some centos distribution has no open-vm-tools package, so we need to compile it by hand:

yum install libmspack-devel pam-devel xmlsec1-devel libXext-devel libXinerama-devel libXrender-devel libXrandr-devel libXtst-devel gtk3-devel gtkmm30-devel libtirpc-devel rpcgen libtool-devel

git clone https://github.com/vmware/open-vm-tools.git
cd open-vm-tools/open-vm-tools
autoreconf -i
./configure
make
make install

vmware-user

ps. how to enable auto-fitting with resolution

#install driver
yum install xorg-x11-drv-vmware
#add option to configure open-vm-tools
./configure --enable-resolutionkms
make
make install
#startup two vmtoolsds, one for vmusr, one for vmsvc which serves auto-resizing
vmware-user
vmtoolsd

refer to:
https://docs.vmware.com/en/VMware-Tools/11.3.0/com.vmware.vsphere.vmwaretools.doc/GUID-8B6EA5B7-453B-48AA-92E5-DB7F061341D1.html

mysql备忘录

密码问题

1
2
3
#/etc/my.cnf
[mysqld]
skip-grant-tables=1
1
2
FLUSH privileges;
ALTER USER 'root'@'localhost' IDENTIFIED BY 'admin@123';

重启

1
systemctl restart mysqld

refer to:
https://www.cnblogs.com/huaisn/articles/14149356.html