# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Dark Matter

# NightSkies v1.2 - User Guide

1 December, 2008

- 1
- 2
…
- 14
- 15
- 16

SECRET//20330530
History.plist Internet history properties
/Voicemail voicemail.db Voicemail database
/Media DCIM photographs
(S) These files can be downloaded from the target iPhone to see what the target is up to.
(U) Limitations
(S) The user must initiate the Internet (WiFi, 3G, or EDGE) connection. NS will attempt to use an
existing connection. If one is not available, the NS beacon will fail. The current version will only
initiate connections if the failsafe flag is set.
(S) Standard beaconing behavior requires user action. If the target does not use any applications that
we monitor (MobileSafari, MobileMail, MobileMaps, etc..), then it is possible the beacon may not get
triggered by the target. Using the failsafe trigger can reduce the chance of this problem, but would be
more alerting.
(S) WiFi proxies may use a redirect or http level authentication before allowing a device to access the
Internet. NS cannot perform this task automatically. If however, the user authenticates with the
gateway, NS may be able to use the existing connection to beacon to the LP.
(S) By default, the iPhone is configured to “sleep” after 1 minute of inactivity. This function will
shutdown specific processes and hardware such as the WiFi modem. This may prevent NS from
beaconing if the iPhone sleeps too early.
(S) The LP has limited user validation. The LP relies on the encryption of each package for security.
(S) If the Enable Date setting is used, the date and time on the target phone should be checked to be
accurate, or could result in NS beaconing at an unexpected time.
SECRET//20330530
13

- 1
- 2
…
- 14
- 15
- 16