Wikileaks released Marble Framework, described as:
Today, March 31st 2017, WikiLeaks releases Vault 7 “Marble” — 676 source code files for the CIA’s secret anti-forensic Marble Framework. Marble is used to hamper forensic investigators and anti-virus companies from attributing viruses, trojans and hacking attacks to the CIA.
…
Effective leaking doesn’t seem to have recommended itself to Wikileaks.
Marble-Framework-ls-lRS-devworks.txt, is an ls -lRS listing of the devworks directory.
After looking for duplicate files and starting this post, I discovered entirely duplicated directories:
Compare:
devutils/marbletester/props with devutils/marble/props.
devutils/marbletester/props/internal with devutils/marble/props/internal
devutils/marbleextensionbuilds/Marble/Deobfuscators with devutils/marble/Shared/Deobfuscators
That totals to 182 entirely duplicated files.
In Marble-Framework-ls-lRS-devworks-annotated.txt I separated files on the basis of file size. Groups of duplicate files are separated from other files with a blank line and headed by the number of duplicate copies.
I marked only exact file size matches as duplicates, even though files close in size could be the result of insignificant whitespace.
After removing the entirely duplicated directories, there remain 199 duplicate files.
With 182 files in entirely duplicated directories and 199 remaining duplicates brings us to a grand total of 381 duplicate files.
Or the quicker way to say it: Vault 7 Marble — 295 unique source code files for the CIA’s secret anti-forensic Marble Framework.
Wikileaks may be leaking the material just as it was received. But that’s very poor use of your time and resources.
Leak publishers should polish leaks until they have a fire-hardened point.