Home

~,,~

脚本

列表：

abiword agave alacarte alsa-utils asunder
brasero bzip2
codecs
easytag emesene enca encfs !epiphany esekeyd evince exaile
fakeroot file-roller flashplugin freemind fuse fuseiso
gcalctool gcolor2 gconf-edi× gd gedit gimp gksu gnome-power-manager gnome-subtitles gnu-netcat gnumeric gthumb gtk-recordmydesktop gtkpod gvim gzip
hdparm htop
jdk jre
keepassx
lftp lm_sensors lsof
mplayer
notecase ntfs-3g ntfsprogs nvclock
openssh openssl opera-snapshot
p7zip p7zip pacman-color parcellite pmount poedit privoxy
qtcurve-gtk2 qtcurve-kde3 qtcurve-kde4
roxterm
sancho-gtk scim scim-pinyin scim-tables screen sdparm shackshag slim smplayer smplayer-themes stardict
×
unrar unzip
vim
weechat
xclip xcompmgr xcursor-vanilla-dmz xcursor-vanilla-dmz-aa !xosd xsel
zenity

$ qemu-img convert win.vmdk -O win-raw.bin

$ export LD_LIBRARY_PATH=”/opt/virtualbox”

$ vditool DD win.vdi win-raw.bin

$ vditool SHRINK win.vdi

$ vditool DUMP NTFS.vdi
vditool    Copyright (c) 2004-2005 InnoTek Systemberatung GmbH.

Dumping VDI image file=”NTFS.vdi” into the log file…
Log created: 2008-06-26T07:23:24.202875000Z
Executable: /public/bin/vditool
Arg[0]: vditool
Arg[1]: DUMP
Arg[2]: NTFS.vdi
— Dumping VDI Disk, Images=1
Dumping VDI image “NTFS.vdi” mode=r/o fOpen=1 File=00000003
Header: Version=00010001 Type=2 Flags=0 Size=2147483648
Header: cbBlock=1048576 cbBlockExtra=0 cBlocks=2048 cBlocksAllocated=2048
Header: offBlocks=512 offData=8704
Header: Geometry: C/H/S=520/128/63 cbSec×=512
Header: uuidCreation={2f6d1089-800d-4489-e596-646722a2f13d}
Header: uuidModification={19664572-879b-459f-539e-b52a2af62469}
Header: uuidParent={00000000-0000-0000-0000-000000000000}
Header: uuidParentModification={00000000-0000-0000-0000-000000000000}
Image:  fFlags=00000000 offStartBlocks=512 offStartData=8704
Image:  uBlockMask=000FFFFF uShiftIndex2Offset=20 uShiftOffset2Index=20 offStartBlockData=0
The operation completed successfully!

Type=1 ：动态大小 (不能挂载)

Type=2：固定大小(可以挂载)

offData=8704：数据区偏移

跳过MBR，数据从 8704+63*512 = 40960 开始

$ sudo mount -t ntfs-3g -o rw,noatime,noexec,loop,offset=40960 NTFS.vdi /mnt/ef

挂载的是实际的“磁盘”，不包含快照。

$ cat ~/.mozilla/firefox/Default/user.js
user_pref(”network.protocol-handler.external.ed2k”, true);