Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.
Elsa User Manual.doc
27
SECRET//NOFORN
> note
p
ad outdir
\
e
lsa
g
.data
Figure 25 - (S) Example of decrypting an ELSA encrypted archive
(S) The operator uses notepad to view the contents of the output xml file.
<?xml version="1.0" encoding="UTF-8"?>
<Log>
<client>0x2234</client>
<wifi-ap-list>
<wifi-ap-entry>
<timestamp format="UTC">Wed Jun 13 14:42:27 2012</timestamp>
<flags>0x0</flags>
<count>12</count>
<wifi-ap>
<ssid>BREAD SHOP</ssid>
<mac>00:03:52:AB:F4:20</mac>
<rssi>-29</rssi>
</wifi-ap>
<wifi-ap>
<ssid>CableCo</ssid>
<mac>00:04:E2:C6:3B:DA</mac>
<rssi>-77</rssi>
</wifi-ap>
<wifi-ap>
<ssid>grace</ssid>
<mac>00:13:10:C3:26:24</mac>
<rssi>-73</rssi>
</wifi-ap>
<wifi-ap>
<ssid></ssid>
<mac>00:14:D1:AE:D3:EC</mac>
<rssi>-81</rssi>
</wifi-ap>
<wifi-ap>
<ssid></ssid>
<mac>00:14:D1:AE:D3:FC</mac>
<rssi>-81</rssi>
</wifi-ap>
<wifi-ap>
<ssid>09BX03031164</ssid>
<mac>00:23:97:33:5D:F1</mac>
<rssi>-79</rssi>
</wifi-ap>
<wifi-ap>
<ssid>09FY11030962</ssid>
<mac>00:23:97:C0:9E:11</mac>
<rssi>-81</rssi>
</wifi-ap>
<wifi-ap>
<ssid>dlink</ssid>
<mac>1C:AF:F7:DB:0B:B7</mac>
<rssi>-83</rssi>
</wifi-ap>
<wifi-ap>
<ssid>Belkin46</ssid>
<mac>68:7F:74:74:34:2B</mac>
<rssi>-77</rssi>
</wifi-ap>
<wifi-ap>
<ssid></ssid>
<mac>BC:AE:C5:C7:A6:77</mac>
<rssi>-79</rssi>