Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

UNCLASSIFIED//FOUO
Encryption
All data and communications must be encrypted. The simplest approach would be
to support AES 256 via crypto api and specifically binding directly to bcrypt.dll.
NOTE: bcrypt.dll does not exist on XP so this implementation would only work on >
XP platforms (shouldn’t be an issue).
Compression
This is more of an optional selection. By including this as a basic capability of the
engine, we would be able to compress content being processed by the transport
(exfil/loading). It may be easiest to use zlib or bzip.
Hashing
To obfuscate function names, each name will need to be hashed using adler32. This
code resides in the open source zlib library.
Coding Standard
C/C++: Tab size = 3 Insert spaces (no tabs)
Python: Tab Size = 4 Insert spaces (no tabs)
Visual Studio 2013 with PTVS(python plugin)
o Do not create directory for sln (in same directory with source)
o Do not create pre/post build tasks (use ant to describe build)
Python 3.4 x86\x64
Linux – Ubuntu?
Every module has a test harness (cppunit/googletest/custom)
Doxygen supported comments
Headers:
// ****************************************************************************
/// @file Engine.cpp
/// @brief This modules contains the engine code.
/// @date April 20, 2015
// ****************************************************************************
Functions:
// ****************************************************************************
/// @brief This function will hash the buffer.
/// @param [in] pBuffer - pointer to buffer to hash
/// @param [in] dBufferSize - size of the buffer
/// @return hash
// ***************************************************************************
Footers:
// ////////////////////////////////////////////////////////////////////////////
UNCLASSIFIED//FOUO

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh