Vault 7: CIA Hacking Tools Revealed

New (and very fun) hacking tool discovered/ leaked by Wikileaks. The CIA must be pissed knowing it's one of their own. Wonder what the agency has looked like the last several months?

Weeping Angel

Discovered delete and download keyfiles are sensitive to any newline characters.

Found configuration file and setting that manages automatic updates.

Added feature to periodically re-acquire alsa (audio) device while in Fake-Off mode.

Suppress LEDs to improve look of Fake-Off mode.

Ported and modified TinyShell to provide shell, command execution, file transfer. This version is known as pshell since it's shell functionality is really a wrapper around popen() calls to emulate shell like functionality.

Added feature to prevent updates (an iptables rule -- ported iptables application to this platform).

Received sanitized source code from UK with comms and encryption removed.

Tested on firmware versions 1111, 1112, and 1116 and characterized various recording qualities (wrt file size) and noise cancellation.

Fake-off mode, that's my favorite. This one seems to favor Samsung devices such as TV's as well.

Streaming audio
Video capture / Video snapshots

Ohh, so do any of you have Samsung devices and has there been a firmware/ software update recently or any other poor performance?

Did you know these tools got "hacked", and are in the wild now?

How convenient, then its not CIA doing this kinda # no more... its just script kiddies?

STUXNET .. oh damn. Who was behind that?

Spying on Linux computers

Gladly Linux fixed the hole within days. You cant say that about Micro$oft Windoze. They make holes on purpose.

originally posted by: toysforadults
New (and very fun) hacking tool discovered/ leaked by Wikileaks. The CIA must be pissed knowing it's one of their own. Wonder what the agency has looked like the last several months?

Weeping Angel

Discovered delete and download keyfiles are sensitive to any newline characters.

Found configuration file and setting that manages automatic updates.

Added feature to periodically re-acquire alsa (audio) device while in Fake-Off mode.

Suppress LEDs to improve look of Fake-Off mode.

Ported and modified TinyShell to provide shell, command execution, file transfer. This version is known as pshell since it's shell functionality is really a wrapper around popen() calls to emulate shell like functionality.

Added feature to prevent updates (an iptables rule -- ported iptables application to this platform).

Received sanitized source code from UK with comms and encryption removed.

Tested on firmware versions 1111, 1112, and 1116 and characterized various recording qualities (wrt file size) and noise cancellation.

Fake-off mode, that's my favorite. This one seems to favor Samsung devices such as TV's as well.

Streaming audio
Video capture / Video snapshots

Ohh, so do any of you have Samsung devices and has there been a firmware/ software update recently or any other poor performance?

My Samsung phone wanted a firmware upgrade recently. Can't say there is anything different even for strange messages that appear in Linkedin messages and Emails from people I know. They are usually of the theme of either: this part of the world is bad (eg. Germany is full of Turks, Moving to New York is working for the Jews, apply to us again in a country that blocks age discrimination, why don't you move into management). The person that the message came from denies sending that message.

We've armed villains of James Bond-ish proportions. Or, the right blackmail material and some pissed off at the world 14-yr old becomes King of Everything.

Sheesh. Our "foreign policy experts" are ike "The Three Stooges Do Rome." Do I hear a fiddle and smell smoke? Curly's in fat lady garb warming up.

originally posted by: kloejen
Did you know these tools got "hacked", and are in the wild now?

How convenient, then its not CIA doing this kinda # no more... its just script kiddies?

STUXNET .. oh damn. Who was behind that?

Spying on Linux computers

Gladly Linux fixed the hole within days. You cant say that about Micro$oft Windoze. They make holes on purpose.

Yeah but let's be honest does anyone have your MAC/NAT/IP/port address and why?

originally posted by: toysforadults

Yeah but let's be honest does anyone have your MAC/NAT/IP/port address and why?

All that can be changed in a sec, whats your point ?

a reply to: toysforadults

"Weeping Angel" links not working.

Says "__._’s server DNS address could not be found. DNS_PROBE_FINISHED_NXDOMAIN"