# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Archimedes

# Fulcrum User Manual v0.62

5 December, 2011

- 1
- 2
- 3
- 4
- 5
- 6
…
- 22
- 23

UNCLASSIFIED//LES
UNCLASSIFIED//LES Page4
2 INTRODUCTION
Fulcrumisaproactivecapabilitywhichfacilitatestheuseofacontrolledmachinetopivottoanother
uncompromisedtargetmachinethatisonthesameremoteLAN.Theapplicationwillperformamanin
themiddleattackonthetargetcomputer.Theapplicationwillthenmonitorthetargetmachine’sHTTP
trafficandredirectthetargettotheprovidedURLwhentheproperconditionsaremet.
Tobeclear,Fulcrumisnotisanexploitoraworm.Itwillnotgainarbitrarycodeexecutiononaremote
machinenorwillitperformprivilegeescalationonthepivotmachine.Itwillnotcrashapplicationsor
operatingsystemsonthepivotortargetmachines.Fulcrumwillnotreplicateitselforautomatically
targetmachinesonaLANnorwillitworkacrossarouterboundary.
Simplyput,Fulcrumwilldirectatargetmachine’sHTTPclienttraffictotheURLoftheattacker’schoice.
2.1 PURPOSE
ThisistheUser’sManualfortheinitialproductionrelease,Version0.6,oftheFulcrumproduct.The
purposeofthisdocumentistoguideendusersonalltechnicalmannerssurroundingtheproperuseof
theFulcrumproduct.Thisguideincludesstepbysteptutorials,informationonsupported
environments,referenceinformation,andknownissues.
2.2 INTENDEDAUDIENCE
ThisdocumentisintendedprimarilyfortheendusersoftheFulcrumproductandtoalesserextentthe
testersanddevelopers.
2.3 TERMINOLOGY
 PivotMachine–ThemachinewhereFulcrumwillrun.
 TargetMachine–ThemachinethatFulcrumwilltargetwithitsmaninthemiddleandHTTP
trafficinjectioncapabilities.
 DeploymentPreparationMachine–ThemachinewhereFulcrumispreparedandconfigured
fordeployment.
2.4 PRODUCTCOMPONENTS
Theproductconsistsofthreeseparatebinaries:FULCRUM,FULCRUMSHUTDOWN,and
FULCRUM ENCRYPTER.
TheFULCRUMbinaryistheprimaryapplicationoftheproduct.ItisdeployedtothePivotMachineand
isresponsibleforperformingtheactualpivotingtechnique.
FULCRUM SHUTDOWNisahelperutilitywhichcanbedeployedtothePivotMachineinorderto
explicitlyinitiateashutdownoftheFULCRUMapplication.

- 1
- 2
- 3
- 4
- 5
- 6
…
- 22
- 23