# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Cherry Blossom

# Nightshade -- Users Manual

1 November, 2007

- 1
- 2
- 3
- 4

• Wirelessly connect to the network device. Start -> Control Panel ->
Network Connections -> Wireless Network Connection (or similar). Then
select the wireless network of interest and click the Connect button. If this
network is encrypted, Windows will prompt for the WPA or WEP key.
• Once connected to the wireless network of interest, open an explorer
window and navigate to the Tomato Release directory. For example, if you
unzipped Nightshade in the “C:\foobar” directory, in the address bar type:
C:\foobar\Nightshade\Tomato\Release
• To run Tomato, double-click the appropriate batch (.bat) file (see section
4.1.4 for a discussion of which batch file may be appropriate):
o TomatoGetPassword.bat fetches the password
o TomatoGetPasswordAndReboot.bat fetches the password and
reboots the device
o TomatoGetPasswordAndOpenShell.bat fetches the password
and opens a telnet-like interactive shell to the device
o TomatoHelp.bat prints help for Tomato, including device coverage
The batch files are simply for convenience. Alternatively, you can
open a command prompt (Start->Run, type “cmd”, and click “OK”),
change to the Tomato Release directory (cd
C:\foobar\Nightshade\Tomato\Release), and type “Tomato.bat help”
for more Tomato information, including device coverage.
4.1.4 USAGE CONSIDERATIONS
This section discusses usage considerations when using the Tomato tool – i.e.,
what are the consequences of each Tomato action (get password, get password
and reboot, get password and open shell), and under what circumstances might
that action be appropriate.
As Tomato finishes its last operation, the UPnP service on the network device
will terminate. So, running:
Windows: “TomatoGetPassword.bat”
Linux “Tomato.sh pass”
will fetch the password, and in doing so terminate the UPnP service.
Running:
Windows: “TomatoGetPasswordAndReboot.bat”
Linux: “Tomato.sh passr”
will fetch the password and reboot the device. Once rebooted, the device will
again be running the UPnP service.

- 1
- 2
- 3
- 4