# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Grasshopper

# Grasshopper-v1_1-AdminGuide

1 December, 2013

- 1
- 2
…
- 13
- 14
- 15
- 16
- 17
…
- 106
- 107

SECRET//ORCON//NOFORN
1.4.2 XOR
The XOR obfuscation technique is a common technique used to mask strings and
binary formats. The technique generatesrandom 4 byte block which is then
XOR’d with the module data. In testing, PSPs deem larger binaries as suspicious
and it raises the Grasshopper binary’s profile. It is recommended that this
technique should only be used for small data files or configurations. For all other
files use the reorder obfuscation technique which is described above. To use this
method, set the “Obfuscate” tag to type “xor”. An example of this is shown
below:
<Obfuscate type=’xor’/>
In the example above, the module will be set to use xor obfuscation.
15
SECRET//ORCON//NOFORN

- 1
- 2
…
- 13
- 14
- 15
- 16
- 17
…
- 106
- 107