WikiLeaks - Vault 7: Projects

# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Hive

# Developers Guide (Figures)

- 1
- 2
- 3

SECRET//NOFORN
Raw TCP/UDP Trigger
Hive 2.6
SECRET//NOFORN
CRC
Random
Data
CRC
Random Data of length
CRC % 200
PAD1
START
PAD
8 bytes
124 Bytes Minimum / 468 Bytes Maximum
Integer
N x 127
Encoded
Trigger
Payload
PAD2
Random Data of length
CRC % 146
8 920 0 – 199 Bytes 2 Bytes 2 Bytes 12 Bytes 0 – 145 Bytes8 Bytes 8 Bytes
The twelve byte trigger payload is encoded by computing an offset of CRC % 72 into the CRC random data field and XORing each of the twelve following bytes
with the corresponding byte of the twelve-byte trigger payload.
0 1 2 4 5 6 7 8 9 10 113
XOR
key
Connect-back
IP address
Port
Number
CRCRandom Data

- 1
- 2
- 3