Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

TestCommandEngine
This is a project that will load the engine and command .dlls in memory
for testing. The ant script will automate processing of preset commands.
This should be an easier way to debug engine/command interactions. All
comms are done via local files. Uninstall is simply setevent.
HOW TO USE TestCommandEngine
build target\engine
build target\command
ant testscriptx86
use visual studio to debug TestCommandEngine
Working Directory: D:\...\TestCommandEngine\Win32\Debug
ISSUES
testcommandengine
1) add parsing to the script (this now works)
testcommand
1) only tests unpack and exec
2) fails to close the package so new Athena_Package_Open fail
3) unpack fails (buffersize < minheadersize)
4) needs to support x86 & x64
command
1) manager.cpp line 447 - not cleaning up pResponse or respparam on
failure from CreateThread
2) manifest is still being included
3) added TestCommand build to sln and build.xml
4) must have __try/__except in every threadmain
5) not properly tracking send response thread - ThreadSendResponse
you have an active thread count but no list of thread to kill
6) are all the state files removed during uninstall?
parser:
**parser/parser_util/response.py line 508 - decode failed - "%08X" % number
tasker:
1) set command not working
2) what are the pickle files used to process? cmd_generate.py lin 191
3) return an error if the command is not built
4) tasker need to include the SET type in the packet so executor.cpp line 828
can call the correct varblock function
Athena_Config_Set_Buffer or Athena_Config_Set_Value
Engine:
State file not maintaining state after shutdown – delete issue

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh