# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Archimedes

# Fulcrum User Manual v0.62

5 December, 2011

- 1
- 2
…
- 12
- 13
- 14
- 15
- 16
…
- 22
- 23

UNCLASSIFIED//LES
UNCLASSIFIED//LES Page14
6 THEENDTOENDPROCESS
TheprincipalbywhichFulcrumworksisfairlystraightforwardandwe’vetriedtokeepthetediumin
usingtheproducttoaminimum.Therearehowever,afewstepsyoushouldfollowwhenusingthe
product.Alittlehomeworkupfrontgoesalongwaytoensuringthegreatestchanceofsuccessand
avoidinganymistakes(YouDOwantthistowork,right?).
6.1.1 PREPARATION
SoyouarejustitchingtouseFulcrumagainstthistargetofyoursandyou’rereadytodivein!Hangon
therepartner.Firstweneedtogatherthefollowinginformationbeforewecanbuildadeployment
package:
1. TheMACaddressoftheLANsideinterfaceofthegateway
2. TheMACaddressofthetargetmachine
3. TheURLtoinjectintotheHTTPresponse
4. TheInjectionmethodoftheHTTPresponse
5. Thecharactersetofthepivotmachine
6. Anyuseragentstringwhitelistentries
7. Anyuseragentstringblacklistentries
8. Anytargetcontenttypemodifications
9. Whetherthepivotmachineisalaptoporadesktop
10. TheOSversionofthepivotmachine
11. ThebitnessoftheprocessFulcrumwillrunin
12. TheprivilegeleveloftheprocessFulcrumwillrunin
13. WhatPSPsarepresentonthepivotmachine
14. HowtheFulcrumfileswillbedeliveredtothepivotmachine
15. WheretheFulcrumfileswillbedeployedtoonthepivotmachine’sfilesystem
16. WhenFulcrumshouldbedeliveredtothepivotmachine
17. HowFulcrumwillbestartedonthepivotmachine
18. WhenFulcrumshouldbestarted
19. IfFulcrumshouldbeautomaticallyrestarted
20. WhenFulcrumshouldbeshutdown
21. WhenFulcrumshouldberemoved
6.1.2 PACKAGING
OK,soyou’vecollectedalltheinformationyouneeded.Fantastic!Patyourselfontheback,grabafresh
caffeinatedbeverageofyourchoiceandthenlet’sgetdowntoit.
Ready?Nowweneedtopackageuptheapplicationsandconfigurationdata.Thisinvolves:
1. Choosingwhatruntimeexecutionmodetouse(i.e.EXE,rundll32.exe,orLoadLibrary)
2. Choosingwhatconfigurationmethodtouse(i.e.commandlineparameters,configurationfile,
orcompiledparameters)
3. Selectingtheproperbinariesbasedontherequiredbitness

- 1
- 2
…
- 12
- 13
- 14
- 15
- 16
…
- 22
- 23