WikiLeaks - Vault 7: Projects

# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Archimedes

# Archimedes 1.0 User Guide

18 December, 2012

- 1
- 2
- 3
- 4
- 5

SECRET//NOFORN

SECRET//NOFORN

(S//NF)Notethatthed eliveryincludesbothdebugandreleasebuildsofeachbinary.Thedebugbuildscontain
additionalinstru mentationthatcanbehelpfulinpinpointingerrorsandunexpectedbehaviorandwillgenerate
loginformationthatcanbeusedtotracetheprogram’sexecution.Debugversion sshouldnotbedeployedona
machinethatwedonothavephysicalcontrolover–theadditionalinformationinthemmakesthesoftware
particularlyvulnerableto reverseengineeringandanalysis.Debugversionsofthetoolshouldbeusedin
controlledtestenvironmentsonly.
(U) NEWOPTIONS
(S)ROUTEVERIFICATION CHECK
(S//NF)Priortoperforminganinjectiona ttack,theoriginaltoolperformsa“RoutingVerification”stepthatwould 
oftenresultinah andlederrorthatcausedth eprogramtoterminate.Itisbelie vedthatthefailuremaybecaused
bynetworkcardincompatibilityortheLANinfrastructure.Anexampleoftheerrori sshownbelow.

(S//NF)Archimedesaddsth eoptiontodisablethischeckandcontinuewithnormaltooloperation.Testinghas
shownthatthiscanenableArchimedestosuccessfullyperformtheattackinenvironmentswherethetoo lwould
previouslyerrorand exit.
(S//NF)Thisnewoption isarequiredparameterinthecon figurationfileandisprovidedas:
VERIFY_ROUTE=TRUE
or
VERIFY_ROUTE=FALSE
(S//NF)ThevalueTRUEresultsintheoriginalroutingcheckbeingperformed.ThevalueFALSEdisablestherouting
check.
(S)INJECTIONMETHOD
(S//NF)TheINJECTION_METHODisspecifiedintheArchimedesconfigurationfile.Inadditiontothemethods
supportedbyFulcrum0.6.1,Archimedesaddssupportforthe“HIDDEN_IFRAME”option.Thismethodwill
producethefollowingHTML:
<html>
<head>
<title></title>
<style type="text/css">
html, body
{
overflow: hidden;
margin: auto;

- 1
- 2
- 3
- 4
- 5