VMXray
1 like768 views
This document describes VMXRay, a tool that allows users to inspect the contents of virtual machine (VM) files without needing to boot the VM. VMXRay runs entirely within the browser and does not send any data to a server. It uses a Linux virtual machine to run filesystem forensics tools that provide a directory and file listing of the selected VM file. Supported file types include VMDK, VDI, and QCOW2 disk images, as well as ISO and filesystems like FAT, NTFS, and ext2/3. It can also introspect Windows VMs by reading the registry.
VMXray
- 1. What’s inside my VM?
- 2. Concerns Toomany VMs, purpose often forgotten VMs are binary files Content of VMs not visible using file explorer Need to “boot” the VM to look inside it
- 3. Go to VMXray.com Select the VM file you want to inspect Browser shows a file explorer view for the content of the VM Text,HTML and images can be previewed Selected files can be extracted to the desktop
- 4. No data from your disk is sent over the network It does not look into your file system, other than the specific VM file you selected for X-Ray It does not store the X-Ray’ed data anywhere VMXRay magic happens completely inside your browser and data never leaves your machine!
- 5. A Linux virtual machine runs inside your browser A filesystem forensics tool is run on the Linux virtual machine to provide directory and file data There is no server-side processing, everything happens within the browser For details, look at vmxray.com/faq.html
- 6. VMWare disk image (.vmdk file) Multi-file vmdks supported VirtualBox disk image (.vdi file) QEMU/KVM disk image (.qcow2 file) File systems (FAT, ext2, ext3, NTFS) residing in the above images CD image (.iso file)
- 7. Introspection of Windows VMs Reading and displaying key information from the registry of the VM Service pack level, owner and organization Ability to X-Ray modern Linux VMs LVM and ext4 support