# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Archimedes

# Fulcrum User Manual v0.62

5 December, 2011

- 1
- 2
…
- 9
- 10
- 11
- 12
- 13
…
- 22
- 23

UNCLASSIFIED//LES
UNCLASSIFIED//LES Page11
5 CONFIGURATION
5.1 FULCRUM
TherearethreewaystoprovideconfigurationdatatoFulcrum:
1. Commandlineparameters
2. ConfigurationFile(f.cfg)
3. CompiledParameters
Fulcrumsearchesforconfigurationdatainthespecificorderabove,stoppingassoonasoneofthemis
located.Allrequiredconfigurationfieldsmustbepresentintheirentiretywithinthemethodused.If
theyarenot,thenFulcrumwillshutdown.Inotherwords,youcannotprovidesomeparametersvia
commandlineandothersviaconfigurationfileoranyothercombinationofmethods.Anyoptionalfield
thatisnotpresentinthemethodusedwillbeusedthebuiltindefaults.
5.1.1 COMMANDLINEPARAMETERS
FulcrumfirstlooksforthepresenceofcommandlineparameterswhenrunasanEXEorvia
rundll32.exe.Ifthereareanyparametersatall,thenFulcrumattemptstofulfillalloftherequired
configurationdatafromthecommandlineonly.Ifanyrequiredparameterismissing,theapplication
willexitwithanerrorcode.Nooptionalparameterscanbesuppliedviathecommandlineandallof
themarefulfilledusingtheapplicationdefaults.Theorderinwhichtheparametersareprovidedmust
beexactlyasshown.
Theusageofcommandlineparametersisthefollowing
[VictimMACAddress][HijackMACAddress][MillisecondsbetweenSpoofs][InjectedURL]

Forexample:
AA:AA:AA:AA:AA:AABB:BB:BB:BB:BB:BB1000http://test.com/cool.jpg

5.1.2 CONFIGURATIONFILE
NOTE:TheFulcrumconfigurationfileisencryptedwitha256bitsymmetrickeyusingtheAESalgorithm.
TheencryptionanddecryptionoftheconfigurationfileisdoneusingtheFU LCRUMENCRYPTERutility.
Ifnocommandlineparametersarepresent,Fulcrumwilllookforafilenamef.cfgresidinginthesame
directorythattheFulcrumbinary(f32.exe)islocated.Ifthisfileisfound,Fulcrumattemptstodecryptit
andacquirethenecessaryconfigurationdatafromit.Ifthereareproblemsaccessing,decrypting,or
parsingthisfileorifanyrequiredparameterismissing,thenFulcrumwillexitwithanerrorcode.
Optionalparametersmaybesuppliedintheconfigurationfileandwilloverridethebuiltindefaults.
Eachconfigurationparameterissuppliedintheform

- 1
- 2
…
- 9
- 10
- 11
- 12
- 13
…
- 22
- 23