# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### BothanSpy

# Gyrfalcon 2.0 User Guide

26 November, 2013

- 1
- 2
…
- 8
- 9
- 10
- 11
- 12
…
- 26
- 27

Gyrfalcon 2.0 SECRET//NOFORN
suse-10.1-64bit {directory: SuSE Linux 10.1 64-bit}
client {application}
libgssapi.so.2.0.1 {library}
md5sum {text file}
ubuntu-11.10-32bit {directory: Ubuntu 11.10 32-bit}
client {application}
libgssapi.so.2.0.1 {library}
md5sum {text file}
ubuntu-11.10-64bit {directory: Ubuntu 11.10 64-bit}
client {application}
libgssapi.so.2.0.1 {library}
md5sum {text file}
<package-end – CD #1>
<package-root – CD #2 – CLASSIFIED>
genconfig.py {Python configuration generating script}
postproc.py {Python post processing script}
user_guide.pdf {This user guide}
<package-end – CD #2>
(S//NF) Use 32-bit binaries on 32-bit target platforms and 64-bit binaries on 64-bit target platforms.
You can use the command
“uname -m” to determine the target platform's architecture. If the return
from the command is “x86_64”, then the target platform is 64-bit. If the return from the command is
“i386” or “i686”, then the target platform is 32-bit.
(S//NF) Use only the binaries compiled for the specific target platform. Each Linux distribution
contains a text file somewhere on the file system identifying the specific distribution and its release
version. For example, Red Hat Enterprise Linux (RHEL) keeps the information in the “/etc/redhat-
release” file, and a simple “cat /etc/redhat-release” will print “Red Hat Enterprise Linux ...” to the
shell's output.
1. (U) CentOS – /etc/redhat-release
2. (U) Debian – /etc/debian_version
3. (U) Red Hat Enterprise Linux – /etc/redhat-release
4. (U) SuSE – /etc/SuSE-release
5. (U) Ubuntu – /etc/lsb-release
November 2013 SECRET//NOFORN//20381126 5

- 1
- 2
…
- 8
- 9
- 10
- 11
- 12
…
- 26
- 27