Vault7: CIA Hacking Tools Revealed
Navigation: » Latest version
Owner: User #14587667
DUT6 - RB800 - v1.2.0 Notes
IP: 172.20.100.38/30
VLAN: 620 (TOR6 gi1/0/14)
ROS: 6.23
Console Server Rack 6 Port 6
LAN VLAN: 621 (TOR6 gi1/0/15)
Tool Versions Used:
ChimayRed 4.6.1
TshPatcher 1.0.4
Perseus 1.2.0
Generate Perseus (from ICON3):
cd /usr/bin/perseus_v1.2.0
PERSEUS_BIN=perseus_1.2.0.4_routeros6_${TARGET_ARCH}.zip
sudo python bin/${PERSEUS_BIN} -f /flash/rw/hidden -f /flash/etc/rc.d/run.d/S99mcc -f /flash/etc/rc.d/run.d/S99tsh -d /flash/rw/hidden -p /flash/rw/tmp/tshd -S /flash/rw/hidden/startup -s 2 -r /flash/rw/hidden/dont_panic -P /ram/zero deploy_$PERSEUS_DEPLOY_VER
Operator Notes:
- The "-m" option has been removed.
- The "-z" option has been replaced by "-P".
The “-P” option is the location that the removal program should be written to when the removal procedure must be invoked. This path should be in a ramdisk.
- example: -P /ram/zero
Test timeline
10/20/2015
- Configured WANWide Area Network and LANLocal Area Network interfaces. Created ubuntu VMVirtual Machine #8 ot use as LANB host.
- Updated network diagram.
- Deployed Perseus 1.2.0
- Threw ChimayRed and uploaded tsh,
10/23/2015
- PS-25
- Spoke with User #77150 about the issue. User #77151 was able to replicate it, but User #77150 could not replicate. User #77152 is coming by DD2 for a meeting this afternoon and will bring the RB800 back with her for User #77150 to investigate. The RB is currently in the erroneous state.