Recover VMware ESXi VMs after Babuk/.babyk ransomware. The encryptor only destroys the first 512 MiB per file, so 99%+ of each VMDK survives as plaintext. Analysis, IOCs, tools, runbook.
-
Updated
Aug 13, 2026 - Python
Recover VMware ESXi VMs after Babuk/.babyk ransomware. The encryptor only destroys the first 512 MiB per file, so 99%+ of each VMDK survives as plaintext. Analysis, IOCs, tools, runbook.
Implement software-defined data center architecture with VMware for private cloud hosting solutions
Deployment of a Load balanced application in VMware vSphere with Terraform, Vault, Packer, Docker, Jenkins, Ansible and Nginx.
Nested ESXi 8.0 lab on Nobara Linux — RHEL 10.1 and Windows Server 2022 VMs provisioned with bridged networking, dual VMFS datastores, and full documentation.
VMware ESXi, vSphere, PowerCLI, Ansible, virtualization, automation, configuration, and documentation.
Recover VMware VMs from a bare VMFS6 datastore drive: mount VMFS in WSL2 with vmfs6-fuse over usbipd, ddrescue the .vmdk disk images, restore on ESXi 8. Interactive copier with progress bars. Windows can't read VMFS - this does.
To associate your repository with the vmfs topic, visit your repo's landing page and select "manage topics."