# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Dark Matter

# NightSkies v1.2 - User Guide

1 December, 2008

- 1
- 2
…
- 4
- 5
- 6
- 7
- 8
…
- 15
- 16

SECRET//20330530
• testfile_config: configuration file used by pkgcreator (described in further
detail later)
(S) Post Processing
1. responseprocessor: process (decrypt & decompress) packages received from the
LP.
(S) NS is delivered as a “tarball” archive. Directory structure:
• docs: deployment documentation
• lp: files needed by pkgcreator
• resources: various binaries required for installation
(U) Configuration and Installation
Note: Configuration requires OS X 10.5.
(S) Installation
Create a working directory and unzip the tarball. All commands should be executed under a single
user.
1. cp nsdeploy-release.tar.gz .
2. mkdir work
3. cd work
4. tar zxvf ../nsdeploy-release.tar.gz
Generate configuration and tasking (See pkgcreator section below):
5. python ./pkgcreator.py
Note: after creating and generating the configuration, go into the folder with
the ID you have chosen.
Build the custom IPSW firmware file used to flash the iPhone.
6. cd <clientid folder>
7. ./buildxpwn.sh (this step will take 2-5 minutes and may prompt for root
password)
Step 7 will generate a custom IPSW firmware file. Use this file to proceed.
Install the custom IPSW firmware on the iPhone.
8. Launch Activity Monitor (Applications/Utilities) and Force Quit “iTunesHelper”
9. Connect the iPhone to a USB port
Note: Phone may turn on if it was off. This is fine.
10. Put Phone in Device Firmware Update (DFU) mode (read carefully):
a. Press and hold the HOME and POWER button until the phone shuts off. One
second after the phone has blanked the screen (approximately 9 seconds),
release the power button (top button) while continuing to hold the home
button for 10 seconds.
SECRET//20330530
3

- 1
- 2
…
- 4
- 5
- 6
- 7
- 8
…
- 15
- 16