Research: Running vulnhub boxes in the cloud

[iokiwi]

Vulnhub boxes are downloaded as Virtual Box ova's.

Should be able to grab the disk file and convert to raw using qemu image-convert. Simon has some docs and limited experience with this.

Then should be able to upload the volume as an image.

Only question is whether it needs cloud-init in order to be run on the cloud.

Simon's assumption bus that it would need cloud-init in order to run properly.

Need to verify this as it's an important detail which will dictate how we set other things up

[iokiwi]

[WIP] Try and upload mrRobot vulnhub vm to cloud as an image

# Unpack ova
# https://opentox.github.io/installation/2012/08/02/converting-ova-images-to-kvm
tar -xvf mrRobot.ova

# Convert vmdk to raw disk
# https://docs.openstack.org/image-guide/convert-images.html
qemu-img convert -f vmdk -O raw mrRobot-disk1.vmdk mrRobot.raw

# Create image
openstack image create \
  --container-format bare \
  --disk-format raw \
  --private \
  --file mrRobot.raw \
  mrRobot

[iokiwi]

Success!

http://103.197.62.216/