# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Cherry Blossom

# Flytrap -- Exploit Enhancements (dev notes)

1 December, 2007

- 1
- 2
…
- 13
- 14
- 15
- 16
- 17
- 18

target prot opt source destination
Chain logaccept (0 references)
target prot opt source destination
LOG all -- 0.0.0.0/0 0.0.0.0/0 state NEW LOG flags 7
level 4 prefix `ACCEPT '
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
Chain logdrop (0 references)
target prot opt source destination
LOG all -- 0.0.0.0/0 0.0.0.0/0 state NEW LOG flags 7
level 4 prefix `DROP '
DROP all -- 0.0.0.0/0 0.0.0.0/0
Chain logreject (0 references)
target prot opt source destination
LOG all -- 0.0.0.0/0 0.0.0.0/0 LOG flags 7 level 4
prefix `WEBDROP '
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp reject-with tcp-
reset
Chain trigger_out (1 references)
target prot opt source destination
1-2-08 test results:
Post test dump of iptables on marg:
-bash-3.1# iptables -t nat -L -n -v
Chain PREROUTING (policy ACCEPT 423K packets, 35M bytes)
pkts bytes target prot opt in out source destination
20 1200 LOG all -- * * 0.0.0.0/0 10.1.2.3
LOG flags 0 level 7 prefix `cb'
2 120 DNAT tcp -- * * 0.0.0.0/0 10.1.2.3
to:192.168.1.128
Chain POSTROUTING (policy ACCEPT 17230 packets, 1035K bytes)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 10.1.2.3
LOG flags 0 level 7 prefix `cb'
38 2270 SNAT all -- * tun0 192.168.1.128 0.0.0.0/0
to:10.129.129.1
2 120 SNAT all -- * eth1 10.129.66.1 0.0.0.0/0
to:192.168.1.12
Chain OUTPUT (policy ACCEPT 17446 packets, 1051K bytes)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 10.1.2.3
LOG flags 0 level 7 prefix `cb'
-bash-3.1# iptables -t filter -L -n -v

- 1
- 2
…
- 13
- 14
- 15
- 16
- 17
- 18