# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Dark Matter

# Sonic Screwdriver

29 November, 2012

- 1
- 2
…
- 6
- 7
- 8

(S//NF) By default, the DerStarke builder will define the volume name and file path of implant with the
same values as listed in Section 3.2. This means no other configuration will be needed when executing
Sonic Screwdriver and DerStarke together.
(S//NF) To install DerStarke:
1. (S//NF) Plug in the USB thumb stick or CD/DVD with the DerStarke installer.
2. (U) Hold down the power button for 10 secs until the machine starts to boot. If sound was
enabled, a loud bong will be audible. If sound was disabled, a white screen will be the only
indicator.
a. Holding the power button will boot the machine into a flash recovery mode that is
required to install DerStarke. An error message will result if the power button is not
held down for 10 sec.
3. (U) Hold down the OPTION key in order see all the boot options
4. (S//NF) If a list of boot options appears, a firmware password was not enabled. Choose ‘EFI
Boot’ with the USB or CD icon (depending which media DerStarke was built to). This will
complete DerStarke installation.
5. (U) If a prompt for a password appears, a firmware password was enabled.
a. (U) Please note that the prompt should be similar to Figure 1.2. If the screen looks more
complex, there is a probability that the OPTION key did not register fast enough, and
the target machine booted into either an OSX or a FileVault2 password screen.
6. (S//NF) Power down the system, and reboot with the implanted ethernet adapter and the
DerStarke media inserted. Do not forget to hold down the power button for 10 secs. Holding
down the OPTION key is not required when the implanted ethernet adapter is plugged in.
a. (S//NF) DerStarke installation should automatically without any key press interactions.
If it does not, it is possible that Mac and USB stick might required a unplug and re-plug
in as mentioned in Section 4.1.
b. (S//NF) Repeat steps 1-3, but now hold the OPTION key while booting up. Once the
firmware password screen boots, unplug the boot media device and plug it in again. It
should then automatically get loaded.
[End of User’s Guide]
SECRET//NOFORN
Sonic Screwdriver User’s Guide – Nov 2012 8
SECRET//NOFORN

- 1
- 2
…
- 6
- 7
- 8