Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.
SECRET//NOFORN
SECRET//NOFORN
(U)TROUBLESHOOTING
(S//NF)ArchimedesandFulcrumonlyinjectintoHTTPrequeststhatreferencetherootofthedocumentdirectory.
Forexample,http://www.test.com/butnothttp://www.test.com/subdir/index.html.
(S//NF)Archimedesr eliesonitsresponsepacketbeatingtherespon sepacketfromtheH TTPserver.InLANtesting
environments,thisisdiff iculttoachievewithoutartificiallyintroducinglat encybetweenthevictimandtheHTTP
server.
(S//NF)Ifthevictim’sMACaddressisnotinthepivot’scache,itwillscanforthevictimmachinebeforeperforming
theinjection.Thiscantakeseveralminutes(orcanbeeliminatedb ypingingthevictim).