Vault7: CIA Hacking Tools Revealed
Navigation: » Latest version
DerStarke 2.0
('toc' missing)
Building DerStarke (Developer)
Top-Level Builder (build.py)
build.py is intended to be a top-level builder that combines bokor (OSXApple operating system kernel injection), darkmatter (EFIExtensible Firmware Interface persistence), and a sample OSXApple operating system bundle. It can be used to create a fully configurable DerStarke release or used to setup a building environment for darkmatter testing/development. Note that there is a debug.plist and release.plist that has default values for a fully debug or release options. Feel free to use these files, but it is not recommended to modify them in that other files used them to make release builds (make_release.sh). If you need to tweak specific options, use preconfig.plist, or rename to anything you like.
Options
-
-c <FILE>, --config=<FILE>- (required) configuration plist that defines the build parameters
- See preconfig.plist for example... some notable options:
- CMOS Debug
- Used by darkmatter when serial or screen printing is not available. This is used in all darkmatter PEIPre-EFI Initialization drivers and parts of S3Sleep.efi when it is waking up from the S3 sleep. It is not recommended to turn this on unless you are debugging those specific drivers.
- CMOS Debug
- -d, --darkmatterbuild
- (optional) Will only setup an environment to start building within externals/darkmatter. Will build kernel implant with options in the config plist and a sample bundle and place them in the proper darkmatter locations. See section 'Building Inside externals/darkmatter' for me information.
- -n, --noninteractive
- (optional) Will not prompt user
- -p, --package_only
- (optional) This flag will create a full release of DerStarke, but will not build bokor or darkmatter. It uses previously generated binaries. This flag is very using if you are making modifications to the configuration pyz (derstarke_builder.pyz), and don't want to rebuild bokor/darkmatter.
Building Inside externals/darkmatter