WikiLeaks - Vault 7: Projects

# Vault 7: Projects

### Dark Matter

# Sonic Screwdriver

29 November, 2012

- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8

o
(S//NF) Once an adapter has been implanted, it will not be possible to restore it factory
default. Sonic Screwdriver uses a commercially available flashing tool form Broadcom
to flash the firmware of the adapter. Since this tool does not have a read functionality, a
pristine bootrom was never obtained.
2. (U) Tool Requirements
2.1. (S) Target Computer
o
(U) Any Mac laptop or desktop with Thunderbolt port, see Figure 2.1.

The following are a list of models that have been tested with Sonic Screwdriver:
•
MBA5,1 (Mid 2012 - 11”)
•
MBA5,2 (Mid 2012 - 13”)
•
MBA4,1 (Mid 2011 - 11”)
•
MBA4,2 (Mid 2011 - 13”)
•
MBP10,1 (Mid 2012 - 15” Retina)
•
MBP10,2 (Late 2012 - 13” Retina)
•
MBP9,1 (Mid 2012 - 15”)
•
MBP9,2 (Mid 2012 - 13”)
•
MBP8,1 (Late 2011 - 13”)
•
MBP8,2 (Late 2011 - 15”)
2.2. (U) Requirements for Building
o
MacBook Air 5,1 or 5,2 (Mid 2012 - 11” or 13”)
o
External USB DVD/CD-Rom drive to boot the installer.
o
Apple Thunderbolt-to-Ethernet Adapter
(U) Figure 2.1: Thunderbolt port
SECRET//NOFORN
Sonic Screwdriver User’s Guide – Nov 2012 5
SECRET//NOFORN

- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8