Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET//NOFORN
________________________________________________________________________
Action / Help Text Notes
5
Beacon - Jitter as a percentage of Interval
0..100 (number)
default:[5]
new value:
The default jitter used to randomize the beacon time
based on a percentage of the interval time. (NOTE:
0 disables jitter)
Percentage (0..100)
6
Beacon - Boot Delay in seconds (number)
default:[60]
new value:
The default boot delay for the implant. The amount
of time to wait after a reboot.
Time in seconds
7
Beacon - Hibernation Delay in seconds
(number)
default:[60]
new value:
The default hibernation delay for the implant. The
amount of time to wait before the first beacon will
be processed.
Time in seconds
8
Beacon - Tasking Delay in seconds (number)
default:[60]
new value:
The default tasking delay for all commands
processed.
Time in seconds
9
Beacon - Domains (LP Server DNS hostname or
IP Addresses separated by a comma)
default:[None]
new value:
abc.com
The default domain name (hostname or IP address)
of the Listening Post to be used for beaconing.
Time in seconds
10
Beacon - Port (number)
default:[443]
new value:
The default port number used to beacon from the
target.
Port number(0..65535)
11
Beacon - Proxy Port NOTE:0=disable (number)
default:[0]
new value:
The default proxy port for processing beacons on
the target.
Port number(0..65535)
12
Beacon - User Agent String (string)
default:[Mozilla/5.0 (Windows NT 6.3;
Trident/7.0; rv:11.0)]
new value:
The default user agent string placed in the header
when processing beacons on the target.
String
13
Beacon - URL Path for LP (string)
default:[/]
new value:
The default URL path on the server that is used for
processing beacons on the target.
WARNING: This value MUST be in the
DATA_URLS field in the config.json file on the
LP.
String
14
Beacon - Accept Header (string)
default:[text/html,application/
xhtml+xml,application/
xml;q=0.9,*/*;q=0.8]
new value:
The default accept header in the packet when
processing beacons on the target.
String
15
Beacon - Accept Language Header (string)
default:[en-US,en;q=0.5]
new value:
The default accept language header in the packet
when processing beacons on the target.
String
SECRET//NOFORN 17

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh