# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Archimedes

# Archimedes 1.0 User Guide

18 December, 2012

- 1
- 2
- 3
- 4
- 5

SECRET//NOFORN

SECRET//NOFORN

(S)ARCHIMEDES1.0
(S//NF)ArchimedesisanupdatetoFulcrum0.6.1.ThenameArchimede sisusedthroughoutthisdocumentto
refertothetoolinitscurrentstateandisnotexclusivetothemodificationsmadeunderthiseffort.
(S//NF)Archimedesisu sedtoredirectLANtrafficfromatarget’scomputerthrougha nattackercontrolled
computerbeforeitispassedtothegateway.Thisenablesthetooltoinjectaforgedwebserverrespon sethatwill
redirectthetarget’swebbrowsertoanarbitrarylocation.Thistechniqueistypicallyusedtoredirectthetargetto 
anexploitationserverwhileprovidingtheappearanceofanormalbrowsingsession.Formoretoolinformation
pleaserefertotheoriginalFulcrum0.6.1docum entation.
(S//NF)Archimedes1.0makesthefollowingmodificationstotheFulcrumtool:
1. Supportdisablingtherouteverificationcheckthatoccurspriortoexploitation
2. AddsupportforanewHTTPinjectionmethodbasedonusingahiddenIFRAME
3. ModifytheDLLstosupporttheFireandForgetspecification(version2)
4. Provideamethodofgracefullyshuttingdownthetoolondemand
5. Removesthemostalertingstringsfromthereleasebinaries
FILEINFORMATION
(S)Thefollowingbin ariesaredeliveredinArchimedes1.0.
File Size MD5
Release Versions -- --
F32.DLL 1,042,944 ce585f279514fdd02ca54f7fd2e962dd
FS32.DLL 43,008 08b013922d6647177ba77821393ba436
F32.EXE 1,041,920 18ea6bd2c3a7883db5fdc7eca696655d
FS32.EXE 42,496 adef7ff9f2fd394165976609fb2dc50f
F64.DLL 1,037,824 7f8a02f794912fdce17ee3ec3b9dcd34
FS64.DLL 41,984 93bced47b6ef3ff7cd8bbaf2a502492a
F64.EXE 1,036,800 cf3df5706422d7d0714646037f6ae454
FS64.EXE 40,960 1c5310dfdec22e21f559810bedcab797
FulcrumEncrypter32.exe 79,360 86670b1dd817697f643ecec539e9a5b6
FulcrumEncrypter64.exe 83,456 8473d8a2db408201f7a7777d0d5f1c06
Debug Versions -- --
F32d.DLL 1,578,496 508de80523988cd1927aae209ffc31d7
FS32d.DLL 452,608 8fc416b3801ba44272646f69d7983782
F32d.EXE 1,769,984 af140de2c2c5cdf5a9f98a64768b929c
FS32d.EXE 451,584 46ec259197ba068c60f2d69827734759
F64d.DLL 1,725,440 698fe48c36e86f6845557fbb567643e6
FS64d.DLL 549,376 3ffec76726acab546bb77e9b2549f86a
F64d.EXE 1,903,104 d54600bda4157930203dc815b29eafaa
FS64d.EXE 548,352 8c050b24366439b3371a0ce8ba7b7377
FulcrumEncrypter32d.exe 603,136 c916372289efb92b513bc04beab9b218
FulcrumEncrypter64d.exe 740,864 3c7e9e7c2b943dc1099b112a0ddcb8b0

- 1
- 2
- 3
- 4
- 5