Hi All,
I'm trying to write a utility that can see into a VMware thin app container, for the purposes of scanning/auditing. Basically, I'm concerned that users will be able to smuggle all sorts of nefarious content into my network hidden within a ThinApp container.
Examining the packaged format, I think it is a pretty simple task to extract the original tvr files from the ThinApp'd executable. Unfortunately, the format of these files appears to be proprietary and undocumented. Is there open documentation of the format anywhere?
I thought another possibility (although not ideal, as I would like to scan in-place) would be to first extract the files from the ThinApp container, using a supported ThinApp utility... I had a look at vftool.exe, which claims to be a "VMware ThinApp Virtual File System Compiler". This has tantalizing command line options like ListFiles and ExportDir, e.g.:
> vftool regfile.tvr ExportDir output_directory
However, these command lines don't work in the slightest... mocking me with their silence as my ship of hope is dashed on the rocks of robotic despair.
Is there any reasonable way to accomplish this?
Thanks in advance,
Mark