Vault7: CIA Hacking Tools Revealed
Navigation: » Latest version
Data Transfer
SECRET//NOFORN
Stash Repository: Data Transfer
Interface Description:
Currenty this interface exposes only the following functions:
virtual DataTransErr DumpData(WCHAR *wcPath, LPBYTE lpbData, DWORD dwDataLen, DWORD dwProgramId, DWORD dwFlags) = 0;
wcPath: The path to where the data should be written. Named pipe, file, etc.
lpbData: The data to be written.
dwDataLen: The lenght of the data to be written.
dwProgramId: The unique identifier of the program. This is needed to determine ownership of data chunks.
dwFlags: Any flags needed for the writing of the data. For example, file attributes.
Returns a DataTransError which is described in the Error Code Descriptions section.
virtual DataTransErr ReadData(WCHAR *wcPath, LPBYTE &lpbData, DWORD &dwDataLen, DWORD dwProgramId) = 0;wcPath: The path the data should be read from. Named pipe, file, etc.
lpbData: The buffer that will hold the returned data.
dwDataLen: The length of the returned data.
dwProgramId: The unique identifier of the program. This is needed to determine ownership of data chunks.
Returns a DataTransError which is described in the Error Code Descriptions section.
Library Conventions:
Naming convention of classes in the Data Transfer library:
- Prefix DT (Data Transfer)
- Medium of transfer (file, covert storage, pipe, etc)
- _ Crypt specifying tool/technique, abbreviated to 2-3 letters (EZC = EZCHEESE, Rap = Raptor, etc)
Example:
DTNtfsAds_BK
DT = Data Transfer
NtfsAds = NTFSNTMicrosoft operating system filesystem (Windows) Alternate Data Streams
_BK = Brutal Kangaroo (made for Brutal Kangaroo)
Data Transfer Member List:
Transferring Data Using NTFSNT filesystem (Windows) Alternate Data Streams (DTNtfsAds_BK - Brutal Kangaroo)
Data Transfer Via Data File (DTFile_GLPH - GLYPH)
Transfer Data By Appending To An Existing File (DTFile_PICT - PICTOGRAM)
Error Code Descriptions: List error codes with descriptions. Use either a bulleted list or the code block macro. Remember, error codes must be compatible with the SUCCEEDED() and FAILED() macros.
- Error Codes List
Code Sample Using The Library Interface:
SECRET//NOFORN