Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.
SECRET STRAP 2 UK EYES ONLY
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\Standalone
DhcpAddres
By default the laptop will give itself 192.168.173.1 as an IP address and any device that connects and IP
address in the 192.168.173.0/24 address range. 192.168.173.1 (or the alternative value set in the
registry settings) should be set as the baseURL or UploadServerIP in the settings, depending on the
mode the implant is being deployed in.
6.2 Android – Configuration of a Wi-Fi hotspot
A Wi-Fi hotspot can also be configured on an Android phone in the following way:
Settings -> More ->Tethering & portable hotspot -> Portable Wi-Fi hotspot settings
When the Portable Wi-Fi hotspot is turned on the phone will give itself 192.168.43.1 as an IP address
and any device that connects an IP address in the 192.168.43.0/24 range. 192.168.43.1 should be set as
the baseURL in the settings, as the Android phone can only be used to receive file transfer from the
implant (audioRecordingMode = 2).
6.3 Router – Configuration of a Wi-Fi hotspot
Finally a Wi-Fi hotspot can be configured on a HUB or Router, and the receiving laptop/phone can also
be connected to the device. When deploying through this method please test the setup before
deployment to ensure IP addresses are configured correctly in the settings file. The set-up of Wi-Fi
routers is beyond the scope of this project.
PAGE 15 OF 31
SECRET STRAP 2 UK EYES ONLY