# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### AfterMidnight

# Assassin v1.1 Users Guide

1 March, 2012

- 1
- 2
…
- 94
- 95
- 96
- 97
- 98
…
- 186
- 187

SECRET//ORCON//NOFORN
4.1 File System Tasks
The following tasks are used to manipulate the file system of the implanted
target computer. Assassin provides tasks for uploading files to and downloading
files from a target, deleting files from the file system, and walking the directories
to survey and collect file data.
get <run_mode> <r_file> [offset=0] [bytes=0]
Get a file from the target.
run_mode
Code specifying the run mode, represented by combining the
following keys:
‘r’ - run the task on receipt
‘s’ - run the task on every Implant startup
‘p’ - push the task results to the LP immediately
r_file
Remote file to get
offset
Byte offset into file to begin collection (default = 0)
“Get from <x> bytes into file.”
bytes
Number of bytes to collect from file (default = 0,all)
“Get <x> bytes from file.”
put <run_mode> <l_file> <r_file> [mode=’always’]
Put a local file on the target.
run_mode
Code specifying the run mode, represented by combining the
following keys:
‘r’ - run the task on receipt
‘s’ - run the task on every Implant startup
‘p’ - push the task results to the LP immediately
l_file
Local file to put
r_file
Remote file location for put
mode
Mode for put operation, one of the following:
‘always’ - always put the file on the target, overwrite
(default)
‘only_new’ - only put the file on the target if it does not yet
exist
‘append’ - append to the end of the file if it exists,
otherwise create
file_walk <run_mode> <r_dir> <wildcard> <depth> [time_check=’no_check’] [date]
Walk the directories on the target, collecting information on files specified by
the provided parameters.
96
SECRET//ORCON//NOFORN

- 1
- 2
…
- 94
- 95
- 96
- 97
- 98
…
- 186
- 187