drakplayground: Transfer files from guest os to host. about drakvuf-sandbox

[psrok1]

It is not offered by current version of drakplayground, but you can hack current methods to get the injector instance and call read_file:

*** Welcome to drakrun playground ***
Your VM is now ready and running with internet connection.
You can connect to it using VNC (password can be found in /etc/drakrun/scripts/cfg.template)
Run help() to list available commands.

[2023-09-20 11:46:59,901][DEBUG] Using selector: EpollSelector
In [1]: copy
Out[1]: <bound method DrakmonShell.copy of <drakrun.playground.DrakmonShell object at 0x7f6a52bd8130>>

In [2]: copy.__self__.injector
Out[2]: <drakrun.injector.Injector at 0x7f6a52bd80a0>

In [3]: copy.__self__.injector.read_file("C:\\Windows\\system32\\ntdll.dll", "./ntdll.dll")
Out[3]: CompletedProcess(args=['injector', '-o', 'json', '-d', 'vm-0', '-r', PosixPath('/var/lib/drakrun/profiles/kernel.json'), '-i', '1800', '-k', '0x187000', '-m', 'readfile', '--timeout', '55', '-e', 'C:\\Windows\\system32\\ntdll.dll', '-B', './ntdll.dll'], returncode=0, stdout=b'{"Plugin": "inject", "TimeStamp": "1695203326.029329", "Method": "ReadFile", "Status": "Success", "ProcessName": "C:\\\\Windows\\\\system32\\\\ntdll.dll", "Arguments": "", "InjectedPid": 0, "InjectedTid": 0}\n', stderr=b'DRAKVUF injector v1.1-git20230913113759+b38d7ed-1 Copyright (C) 2014-2023 Tamas K Lengyel\n')

I will leave the issue open as it is good feature request, I'm also missing that option.

[tfrist]

Great idea.
I wrote a method in playground.py as below:

def copy1(self, remote, local): ####################################################
    remote = Path(remote)       
    self.injector.read_file(self.desktop / remote.name, local)

and added it in main() as:

with DrakmonShell(args.vm_id, args.dns) as shell, graceful_exit(
    start_dnsmasq(args.vm_id, args.dns)
):
    helpers = {
        "help": shell.help,
        "copy": shell.copy,
        "copy1":shell.copy1, #################################
        "mount": shell.mount,
        "drakvuf": shell.drakvuf,
        "vm": shell.vm,
        "run": shell.run,
    }

Finally, I can copy file from guest using copy1(), like copy1("log.txt", "/home/log.txt"). and it worked as expected!
Thanks.