# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### AfterMidnight

# Assassin v1.3 Users Guide

11 June, 2013

- 1
- 2
…
- 96
- 97
- 98
- 99
- 100
…
- 191
- 192

SECRET//ORCON//NOFORN
10.4.1 File System Tasks
The following tasks are used to manipulate the filesystem of the implanted
target computer. Assassin provides tasks for uploading files to and downloading
files from a target, deleting files from the file system, and walking the directories
to survey and collect file data.
get <run_mode> <r_file> [offset=0] [bytes=0]
Get a file from the target.
run_mode
Code specifying the run mode, represented by combining the
following keys:
‘r’ - run the task on receipt
‘s’ - run the task on every Implant startup
‘p’ - push the task results to the LP immediately
r_file
Remote file to get
offset
Byte offset into file to begin collection (default = 0)
“Get from <x> bytes into file.”
bytes
Number of bytes to collect from file (default = 0,all)
“Get <x> bytes from file.”
put <run_mode> <l_file> <r_file> [mode=’always’]
Put a local file on the target.
run_mode
Code specifying the run mode, represented by combining the
following keys:
‘r’ - run the task on receipt
‘s’ - run the task on every Implant startup
‘p’ - push the task results to the LP immediately
l_file
Local file to put
r_file
Remote file location for put
mode
Mode for put operation, one of the following:
‘always’ - always put the file on the target, overwrite
(default)
‘only_new’ - only put the file on the target if it does not yet
exist
‘append’ - append to the end of the file if it exists,
otherwise create
file_walk <run_mode> <r_dir> <wildcard> <depth> [time_check=’no_check’] [date]
Walk the directories on the target, collecting information on files specified by
the provided parameters.
98
SECRET//ORCON//NOFORN

- 1
- 2
…
- 96
- 97
- 98
- 99
- 100
…
- 191
- 192