# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Archimedes

# Fulcrum User Manual v0.61

15 November, 2011

- 1
- 2
…
- 9
- 10
- 11
- 12
- 13
…
- 22
- 23

UNCLASSIFIED//LES
UNCLASSIFIED//LES Page11
5 CONFIGURATION
5.1 FULCRUM
Therearethreewaystoprovidecon figurationdatatoFulcrum:
1. Command‐lineparameters
2. ConfigurationFile(f.cfg)
3. CompiledParameters
Fulcrumsearchesforconfiguration datainthespecificorderabove,stoppingassoonasoneofthemis
located.Allrequiredconfig urationfieldsmustbepresentintheirentiretywithinthemethod used.If
theyarenot,thenFulcrumwillshutd own.Inotherwords,youcannotprovidesomeparameter svia
command‐lineandothersviaconfigurationfileoranyothercombinationofmethods.Anyoptionalfield
thatisnotpresentinthemethodusedwillbeusedthebuilt‐in defaults.
5.1.1 COMMAND‐LINEPARAMETERS
Fulcrumfirstlooksforthepresence ofcommand‐lineparameterswhenrunasanEXEorvia
rundll32.exe.Ifthereareanyparame tersatall,thenFulcrumattemptstofulfillalloftherequired
configurationdatafromthecommand‐lineonly.Ifanyrequiredparameterismissing,theapplication
willexitwithanerrorcode.Nooptio nalparameterscanbesuppliedviathecommand‐lineandallof
themarefulfilledusingtheapplicationdefaults.Theorderinwhichtheparametersareprovidedmust
be exactly as shown.
Theusageofcommand‐lineparamete rsisthefollowing
[VictimMACAddress][HijackMACAddress][MillisecondsbetweenSpoofs][InjectedURL]
Forexample:
AA:AA:AA:AA:AA:AABB:BB:BB:BB:BB:BB1000http://test.com/cool.jpg
5.1.2 CONFIGURATIONFILE
NOTE:TheFulcrumconfigurationfileisencryptedwitha256‐bi tsymmetrickeyusingtheAESalgorithm.
Theencryptionanddecryptionoftheconfigurationfileisdoneusingthe
FULCRUMENCRYPTERutility.
Ifnocommand‐lineparametersarepresent, Fulcrumwilllookforafilenamef.cfgresidinginthesame
directorythattheFulcrumbinary(f32.exe)islocated.Ifthisfileisf ound,Fulcrumattemptstodecryptit
andacquirethenecessaryconfigurationdatafromit.Ifthereareproblemsaccessing,decry pting,or
parsingthisfileorifanyrequiredparameterismissing,thenFulcrumwillexitwithanerrorcode.

- 1
- 2
…
- 9
- 10
- 11
- 12
- 13
…
- 22
- 23