# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Archimedes

# Fulcrum User Manual v0.61

15 November, 2011

- 1
- 2
- 3
- 4
- 5
- 6
…
- 22
- 23

UNCLASSIFIED//LES
UNCLASSIFIED//LES Page4
2 INTRODUCTION
Fulcrumisapro‐activeca pabilitywhichfacilitatestheuseofacontrolledmachinetopivottoano ther
uncompromisedtargetmachinethatisonthesameremoteLAN.Theapplicationwillperformaman‐in‐
the‐middleattackonthetargetcomputer.Theapplicationwillthe nmonitorthetargetmachinesHTTP
trafficandredirectthetargettotheprovidedURLwhentheproperconditionsaremet.
Tobeclear,Fulcrumisnotisanexploitoraworm.Itwillnotgainarbitrarycodeexecutiononaremote
machinenorwillitperformprivilegeescalationonthepivotmachine.Itwillnotcrashapplicationsor
operatingsystemsonthepivotortargetmachines.Fulcrumwillno treplicateitselforautomatically
target machines on a LAN nor will it work across a router boundary.
Simplyput,FulcrumwilldirectatargetmachinesHTTPclienttraffictotheURLoftheattackerschoice.
2.1 PURPOSE
ThisistheUsersManualfortheinitialproductionrelease,Version0.6,oftheFulcrumproduct.The
purposeofthisdocumentistoguideend‐usersonalltechnicalmannerssurroundingtheproperuseof
theFulcrumproduct.Thisguide includesstep‐by‐steptutorials, informationonsupported
environments,referenceinformation,andknownissues.
2.2 INTENDEDAUDIENCE
ThisdocumentisintendedprimarilyfortheendusersoftheFulcrumprod uctandtoalesserextentthe
testersanddevelopers.
2.3 TERMINOLOGY
 PivotMachineThe machinewhereFulcrumwillrun.
 TargetMachineThemachinethatFulcrumwilltargetwithitsman‐in‐the‐middlea ndH TTP
trafficinjectioncapabilities.
 DeploymentPreparationMachineThemachinewhereFulcrumispreparedandconfigured
fordeployment.
2.4 PRODUCTCOMPONENTS
Theproductconsistsofthreeseparatebinaries:FULCR UM ,FULCRUMSHUTDOWN,and
FULCRUMENCRYPTER.
The
F ULCRUMbinaryistheprimaryapplicationoftheproduct.Itisdeployedt othePivotMachineand
isresponsibleforperformingtheactualpivotingtechnique.

- 1
- 2
- 3
- 4
- 5
- 6
…
- 22
- 23