Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET//ORCON//NOFORN
10.4.2 File System Commands
The task sub-shell provides the following commands that will add Assassin file
system commands to the task being created.
get [--offset OFFSET] [--bytes BYTES] PATH
Get a file from the target.
PATH
path of file to get from the target
--offset OFFSET
start reading <x> bytes into target file (default = 0)
--bytes BYTES
get <x> bytes from file; 0 == entire file (default = 0)
put [-m MODE] LOCAL_PATH REMOTE_PATH
Put a file on the target.
LOCAL_PATH
path of file to put on the target
REMOTE_PATH
path of location to put the file
-m MODE,
--mode MODE
behavior of put command (default = only_new)
always always put the file on the target, overwrite
only_new only put the file on the target if it does not yet
exist
append append to the end of the file if it exists, otherwise
create
file_walk [--depth DEPTH] [--check-date DATE] [--check-mode MODE]
[-c] [--offset OFFSET] [--bytes BYTES]
DIR_PATH [PATTERN]
Walk a target file system, optionally getting selected files.
DIR_PATH
path of file system location to walk
PATTERN
filename pattern to match (default = *)
--depth DEPTH
number of directory levels to travers (default = 3)
Note: A depth of 0 will only collect on the root level.
--check-date
DATE
check the modify timestamp against a date before collecting;
date format specified in ISO 8601 format (yyyy-mm-ddThh:mm:ss)
--check-mode
MODE
mode of checking the modify timestamp (default = greater)
greater match timestamps greater (later) than the check
date
less match timestamps less (earlier) than the check date
-c, --collect
collect the contents of files that are traversed
--offset OFFSET
start reading <x> bytes into target file (default = 0)
--bytes BYTES
get <x> bytes from file; 0 == entire file (default = 0)
96
SECRET//ORCON//NOFORN

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh