Vault7: CIA Hacking Tools Revealed
Navigation: » Latest version
Queue Proxy
Purpose
The Queue Proxy program, qproxy, provides command line access to the queue implementation on the C2. The user interface (UIUser Interface) and the transport use this program.
Usage
Command Line
qproxy -q <que_id> <command> [flags] [parameters]
Returns
OS Return Codes
These are incomplete, actual numbers to be refined and may./will change during development
0 - done
1 - queue does not exist
2 - missing parameters
3 - queue not locked
4 - invalid task id
Stdout
Output of list command which varies by -v parameter.
Notes
- Only one positional parameter (aka command) per execution
- Operating system numeric return code code
- From and to parameters may be either task ids or numeric slot positions (except for delete command, which must be task id)
- To get a status update from LPListening Post use a commit with no changes (e.g. use --force --clear commit)
Examples
qproxy -q boss0042 append --immediate -f dirwalk.bin // appends dirwalk.bin to existing changes on queue boss0042, commits changes, fails if not locked
qproxy -q boss0042 lock // acquires lock as current user-id, fails if already locked by other user
qproxy -q boss0042 --force --clear // forces a lock, clears all non-committed changes
qproxy -q boss0042 list -v working // prints list of current (low) queue with proposed (non-committed) changes
qproxy -q boss0042 ingest --file update.tar // processes command in update.tar file (usually queue update from LPListening Post), then deletes file
Breakdown
command = <task_cmd | queue_cmd > task_cmd = append | prepend | move | insert | delete queue_cmd = queue_system | queue_local queue_local = pop | lock | unlock | list | ingest queue_system = commit | create | remove
append - append task file specified by -f to queue
prepend - prepend task file specified by -f to queue (i.e. put in first slot)
move - move task from position specified by --from to position specified by --to
insert - insert task file specified by -f to queue position specified by --to
delete - delete task specified by queue position --from
pop - undo last change made to queue
lock - lock queue for use by current user, required to make changes
unlock - release queue so other users may access queue for changes
list - write various aspects of queue (specified by -v) to standard otu
ingest - process commands and data in tar file (specified by -f) Usually queue update from LP
commit - bundle all changes into tar file and send to LP, clear change file locally
create - create files and directory structure for a new, empty queue specified by -q parameter
remove - delete files and and directory structure for the queue specified by -q parameter
flags = flag [flags] flag = --immediate // lock, primitive_base, commit, unlock
--force // lock, force if necessary
--clear // clear all uncommitted changes
parameters = parameter [parameters] parameter = -q --queue <que_id> -f --file <task_file | tar_file> // required for (append, prepend, and insert) | ingest --from <slot | id > // required for move --to <slot | id> // required for insert and move -v --view < low | working | changes | high | user | timer > // default = working
low - last know state of low (LPListening Post) queue
working - low queue with current changes applied
changes - set of current changes in order of application
high - low queue with all changes, committed and current, applied in order
user - user name of last user of locked queue
timer - number of seconds since last queue update from LPListening Post was processed
id - alphanumeric, fails on conversion to number slot - digits only / numeric que_id - alphanumeric, at least 5 alphanumeric (fisrt 4 are parent id) task_file - file name of file to be copied into queue tar_file - file name of tar file to be processed / ingested