Vault7: CIA Hacking Tools Revealed
Navigation: » Latest version
Reforge
Reforge Language Rough Definition
Variable Types
- int <variable_name> = <value>
- whole integers only
- name is restricted to A-Z, a-z, 0-9, and may contain an underscore
- str <variable_name> = "<value>"
- value must be quoted
- name is restricted to A-Z, a-z, 0-9, and may contain an underscore
- list <variable_name> = [<value1>, <value2>, ...]
- name is restricted to A-Z, a-z, 0-9, and may contain an underscore
- value list must be comma seperated
- value list must be wrapped in [ ]
- stream <variable_name> = <file_path>
- name is restricted to A-Z, a-z, 0-9, and may contain an underscore
- filepath must be a valid windows filepath
Commands
- delete - securely deletes a file
- del <path_to_file/filename.ext>
- input can be a raw string or variable of type str
- input must be a valid windows filepath
- del <path_to_file/filename.ext>
- pause - pause execution for a specified amount of time
- pause <time_in_seconds>
- input can be a raw number or a variable of type int
- time must be a whole integer and is specified in seconds
- pause <time_in_seconds>
- echo - echo a string out to a stream
- echo <string value> <stream>
- string value can be a raw string or a variable of type string
- stream must be a user defined stream type or a reserved stream type
- echo <string value> <stream>
- dirlist - performs a dir walk starting at a specified location
- dirlist <start path> <stream>
- start path must be a valid windows file path
- stream must be a user defined stream type or a reserved stream type
- dirlist <start path> <stream>
- combine - combine the second file into the first file
- combine <filepath/filename> <filepath/filename>
- filepaths must be valid windows filepaths
- combine <filepath/filename> <filepath/filename>
- pack - pack another executable into the reforge package and extract it to a specified location on target
- pack <filepath to execuable> <extract location>
- executable path can be a valid linux or windows filepath
- extract location must be a valid windows filepath
- both inputs can be a raw string or a variable
- pack <filepath to execuable> <extract location>
- proclist - get a process list
- proclist <stream>
- stream must be a user defined stream type or a reserved stream type
- proclist <stream>
- netstat - get a netstat
- netstat <stream>
- stream must be a user defined stream type or a reserved stream type
- netstat <stream>
- msgbox
- registry
- enzip
- run
- start
- for
- while
- if / if...else
Other
- Reserved streams
- stdin
- stdout
- stderr
- Reserved environment variables