# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Cherry Blossom

# CherryBlossom -- x86 Flytrap - Users Manual

28 February, 2011

- 1
- 2
…
- 13
- 14
- 15
- 16
- 17

SECRET//20350112
Cherry Bomb Program x86 Flytrap User’s Manual
5.6 (U) repeater.sh Operation
(U) For x86 Flytrap configuration for scenarios not supported by the ftlauncher.sh GUI of
section 5.5, the x86 Flytrap can be manually configured by editing the
“repeater.properties” file directly and running the “repeater.sh” script. The typical
scenario that requires manual configuration is the use of a non-wireless interface for
internet access.
(U) Section 4.3 (Use Case 3: Anonymous Open Wireless Network that Uses a Wired
Network Connection for Internet Access) of the “Quick Start Guide for x86 FT” describes
how to configure the x86 Flytrap for a scenario that uses a wired connection for internet
access.
(U) The repeater.properties file (located in ~ftuser/bin) has the following fields:
• repeater_mode = “bridge” or “router” (see section 5.5.1)
• debug_mode = 0 (off) or 1 (on). Note that the debug x86 Flytrap packages must
be installed as described in section 3 (Installation) of the “Quick Start Guide for
x86 FT”. In debug mode, more info is logged to the terminal.
• wifi_repeater_interface = name of the interface to use as the repeater (i.e., the
interface on which the simulated AP will be created). With hardware inserted, the
“lshw –c network” command can be used to map network hardware to interface
name.
• wifi_client_interface = name of the interface to use for internet connectivity.
Although the field has “wifi” in its name, this field can be set to any interface that
can gain internet access. For example, set to “eth0” on most x86 platforms to use
the wired ethernet interface for internet connectivity.
• bridge_ip_address = leave empty for all cases (bridge mode should always use
DHCP to retrieve an IP address).
• bridge_nameservers = leave empty for all cases (bridge mode should always
use DHCP to retrieve nameservers).
• bridge_ip_netmask = always set to 255.255.255.0.
• gateway_ip_address = IP address of the internet gateway. This value is
irrelevant if using DHCP for the repeater interface.
• lan_ip_address = IP address assigned to the repeater interface in router mode.
Suggested value is 10.127.254.1
• lan_ip_netmask = netmask assigned to the repeater interface in router mode.
Suggested value is 255.255.255.0.
• lan_dhcp_range = DHCP IP address range the x86 Flytrap DHCP service will
use for wireless clients in router mode. Suggested value is “10.127.254.2
10.127.254.254”. NOTE: surrounding quotes are required.
• DEFAULT_USER = ftuser (do not change)
• X86_DIR = /home/$DEFAULT_USER (do not change)
• WPA_SUPPLICANT_CONF = leave unset
• MM_ARGS = any additional arguments to pass to MissionManager can be
configure here. Be sure to surround value with quotes.
• beacon_address = IP address or domain name to which x86 Flytrap will beacon
SECRET//20350112
15

- 1
- 2
…
- 13
- 14
- 15
- 16
- 17