# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Archimedes

# Fulcrum User Manual v0.62

5 December, 2011

- 1
- 2
…
- 15
- 16
- 17
- 18
- 19
…
- 22
- 23

UNCLASSIFIED//LES
UNCLASSIFIED//LES Page17
1. CopytheFULCRUMENCRYP TERbinary(FulcrumEncrypter32.exe)intothesamedirectoryasthe
configurationfile.
2. Openacommandprompt
3. Changedirectoriestothelocationofthef.cfgfile
4. Decrypttheconfigurationfilebytypingthefollowingcommandintothecommandprompt:
FulcrumEncrypter32.exe–df.cfgf.cfg.decr
7.1.5 DECRYPTINGTHELOGFILE(DEBUGBUILDSONLY)
Debugbuildswillgenerateencryptedlogfilesthatcontainusefulinformationfordevelopersand
testers.Toviewthecontentsofthelog,youmustfirstdecryptitusingthesuppliedFULCRUMENCRYPTER
utility.
1. CopytheFULCRUMENCRYP TERbinary(FulcrumEncrypter32.exe)intothesamedirectoryasthe
logfile.
2. Openacommandprompt
3. Changedirectoriestothelocationofthef.loglogfile.
4. Decryptthelogfilebytypingthefollowingcommandintothecommandprompt:
FulcrumEncrypter32.exe–df.logf.log.decr
7.1.6 RUNNINGFULCRUMASANEXEWITHA CONFIGURATIONFILE
1. PrepareaconfigurationfileasdescribedinSection7.1.1
2. EncryptaconfigurationfileasdescribedinSection7.1.3
3. CopytheFULCRUMexecutablebinary(f32.exeorf64.exe)intothesamedirectoryasthe
configurationfile.
4. DoubleclicktheFULCRUMbinary
7.1.7 RUNNINGFULCRUMASANEXEWITHCOMMANDLINEPARAMETERS
1. CopytheFULCRUMexecutablebinary(f32.exeorf64.exe)tothedesiredlocation.
2. Openacommandprompt
3. ChangedirectoriestothelocationoftheFU LCRUMbinary.
4. Executethebinarybytypingthefollowingcommandintothecommandprompt:
f32.exe[VictimMACAddress][HijackMACAddress][MillisecondsbetweenSpoofs][InjectedURL]
Forexample:
f32.exeAA:AA:AA:AA:AA:AABB:BB:BB:BB:BB:BB1000http://test.com/cool.jpg
7.1.8 RUNNINGFULCRUMASANEXEWITHCOMPILEDPARAMETERS
1. CopytheFULCRUMexecutablebinary(f32.exeorf64.exe)tothedesiredlocation.
2. DoubleclicktheFULCRUMbinary

- 1
- 2
…
- 15
- 16
- 17
- 18
- 19
…
- 22
- 23