Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

UNCLASSIFIED
Cherry Bomb Program Cherry Blossom Internal Test Procedures
Pass/Fail: the test passes if, when the IB Suicide Time expires, MissionManager
self-terminates, cannot be restarted (telnet to the Flytrap and use ps to verify mm
is not running, then start mm, and verify it exits immediately), and cannot be
restarted after a device hard reset (certain devices don’t support this).
NOTE: to restore the Flytrap after a suicide event, telnet to the Flytrap and run
“mm –x”
4.1.7 Power-Cycle Beacon Test
Description: Tests Power-Cycle Beacon functionality.
Setup: Create a Mission (using CherryWeb) with the following parameters and
Assign it to the Flytrap:
Beacon Interval=60 seconds
Traffic Requirement=HIGH
Traffic Requirement Timeout=300 seconds
Fast/Slow Retry=10 seconds / 30 seconds
Power-Cycle Wait=200 seconds
Port Scanning=”Scan All Ports”
Protocol Scanning=”Scan All Protocols”
Ontime Commit Interval=1800 seconds
Suicide Time=14400 seconds
TW's: same 3 Beacon Address/Ports as in the Flytrap firmware (see section 4.1)
Connect the Flytrap to the internet (i.e., plug the Flytrap’s WAN into our public
network and have it fetch an IP address via DHCP).
Run: Have the Flytrap beacon (may need to pass Traffic Requirement test) and
successfully receive the Mission above. Power-cycle the Flytrap, and from the
Client Computer, begin a large download from the internet (to satisfy the
Mission’s Traffic Requirement). Wait for the Power-Cycle Beacon.
Pass/Fail: the test passes if, after a power-cycle, the Flytrap sends its first
(power-cycle) beacon at the proper time (roughly 200 – 210 seconds after
powering on -- different devices have different processors and different services
starting in different order, so power-cycle beacon time can vary by 10 or so
seconds from device to device).
4.1.8 Periodic Beacon (PB) Interval Test
Description: Tests Periodic Beacon (PB) Interval functionality.
Setup: same as 4.1.7
UNCLASSIFIED
18

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh