# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Weeping Angel

# Extending - User Guide

28 February, 2014

- 1
- 2
…
- 20
- 21
- 22
- 23
- 24
…
- 30
- 31

SECRET STRAP 2 UK EYES ONLY
8.3 Live Audio Exfiltration and Listening
8.3.1 Introduction
Audio can also be streamed “Live” to a listening application over a Wi-Fi hotspot. Live Listen Streaming is
enabled when the “audioRecordingMode” setting is set to 3.The hotspot that EXTENDING will use for
exfiltration is configured in the Settings file and controlled by the “uploadServerIP” and
“uploadServerPort” Settings.
The Live Listener runs as a Windows Command Line application on the platform presenting itself as Wi-
Fi Hotspot. For information on the EXTENDING Wi-Fi Hotspot see section ‘’Setting up the Wi-Fi
Hotspot”.
The Live Listener’s primary function is to receive and decode incoming packets from the EXTENDING
TV application and play the decrypted audio though the platform’s sound card / headphones. Received
data is also saved to file in a “./store” folder to allow playback at a later date. The data files are stored in
the same encrypted format as the data is received over Wi-Fi.
A Public RSA key is stored within the TV application configuration file. In order to decode the received
data the corresponding Private RSA key must be present in the same folder as the Live Listener
application. This is the private_key.pem generated in the Public Key Generation section. The Private key
file must be stored as ‘key.prv’. The presence of the private key and storage of the data files upon the
same platform requires that the necessary security protocols be followed.
8.3.2 Live Listener Command Line Options
ECDLIVE.exe –p {port no.} [-d] [-r] [-f] [-l [-usb] [-b]
Options:
-p - port number, set this to the same value as stored in the TV application configuration file
‘uploadServerPort’ typically 8080.
-d - do not store live play data to file
-r - replay audio stored in files from previous live listen session
-f - save live listener data to file without playing through the sound card
-l - set audio latency (1 - 10), depending upon the quality of the wifi connection, higher
latency may improve the listening experience by reducing the ‘stuttering’ effect of dropped packets.
By default the latency is set to ‘3’.
-usb - playback files downloaded either via USB during close access to the TV, or by connection
to a mobile webserver. The files must be stored in the ‘./store’ folder of the Live Listener platform.
-b - set the playback bitrate. By default the Speex decoder produces an audio stream of
32,000bps. By changing this value playback may be sped up / slowed down. However, this is
without any pitch correction.
Example Commands:
Listen to live in coming audio, and save data to file…
ECDLIVE.exe –p 8080
Replay stored audio from previous live listen session…
ECDLIVE.exe –r
Replay audio from USB or files downloaded via the webserver…
ECDLIVE.exe –usb
8.3.3 Live Listener Output
PAGE 22 OF 31
SECRET STRAP 2 UK EYES ONLY

- 1
- 2
…
- 20
- 21
- 22
- 23
- 24
…
- 30
- 31