summaryrefslogtreecommitdiff
path: root/openssh-exploitation.svg
diff options
context:
space:
mode:
authorW. Kosior <koszko@koszko.org>2024-06-01 20:58:27 +0200
committerW. Kosior <koszko@koszko.org>2024-06-01 20:58:27 +0200
commit16a6332f32b7560ec254fe67b13a7ae0151b8479 (patch)
tree3ee532df5bde5217899ea761c27d9a8f260674b4 /openssh-exploitation.svg
downloadAGH-xz-backdoor-presentation-16a6332f32b7560ec254fe67b13a7ae0151b8479.tar.gz
AGH-xz-backdoor-presentation-16a6332f32b7560ec254fe67b13a7ae0151b8479.zip
Initial commit.
Diffstat (limited to 'openssh-exploitation.svg')
-rw-r--r--openssh-exploitation.svg370
1 files changed, 370 insertions, 0 deletions
diff --git a/openssh-exploitation.svg b/openssh-exploitation.svg
new file mode 100644
index 0000000..2fd8c77
--- /dev/null
+++ b/openssh-exploitation.svg
@@ -0,0 +1,370 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ width="512mm"
+ height="317mm"
+ viewBox="0 0 512 317"
+ version="1.1"
+ id="svg5"
+ xml:space="preserve"
+ inkscape:version="1.2.1 (9c6d41e410, 2022-07-14)"
+ sodipodi:docname="openssh-exploitation.svg"
+ xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+ xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:svg="http://www.w3.org/2000/svg"><sodipodi:namedview
+ id="namedview7"
+ pagecolor="#ffffff"
+ bordercolor="#000000"
+ borderopacity="0.25"
+ inkscape:showpageshadow="2"
+ inkscape:pageopacity="0.0"
+ inkscape:pagecheckerboard="0"
+ inkscape:deskcolor="#d1d1d1"
+ inkscape:document-units="mm"
+ showgrid="false"
+ inkscape:zoom="0.2543757"
+ inkscape:cx="937.58954"
+ inkscape:cy="393.11931"
+ inkscape:window-width="1280"
+ inkscape:window-height="749"
+ inkscape:window-x="0"
+ inkscape:window-y="27"
+ inkscape:window-maximized="1"
+ inkscape:current-layer="layer1" /><defs
+ id="defs2"><rect
+ x="594.41961"
+ y="76.212493"
+ width="225.85845"
+ height="85.328673"
+ id="rect1731" /><style
+ id="style660">.cls-1{fill:#1d1d1b;}.cls-2{fill:#e9500e;}.cls-3{fill:#fff;}</style><rect
+ x="594.41962"
+ y="76.212494"
+ width="225.85844"
+ height="85.328674"
+ id="rect1731-3" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="225.85844"
+ height="85.328674"
+ id="rect1731-6" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="225.85844"
+ height="85.328674"
+ id="rect1731-3-2" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="225.85844"
+ height="85.328674"
+ id="rect1731-6-4" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="225.85844"
+ height="85.328674"
+ id="rect1731-3-2-7" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="225.85844"
+ height="85.328674"
+ id="rect1731-6-0" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="225.85844"
+ height="85.328674"
+ id="rect1731-3-2-7-6" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="225.85844"
+ height="85.328674"
+ id="rect1731-3-2-7-6-5" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="290.96802"
+ height="92.390544"
+ id="rect1731-3-7" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="290.96802"
+ height="92.390541"
+ id="rect1731-3-7-3" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="297.74271"
+ height="81.458672"
+ id="rect1731-7" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="343.67673"
+ height="88.639885"
+ id="rect1731-3-7-3-8" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="554.11241"
+ height="82.553127"
+ id="rect1731-3-7-3-8-9" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="623.74931"
+ height="101.88514"
+ id="rect12664" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="316.03414"
+ height="85.900819"
+ id="rect1731-3-2-7-6-5-0" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="343.67673"
+ height="88.639885"
+ id="rect12705" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="343.67673"
+ height="88.639885"
+ id="rect12705-7" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="554.11243"
+ height="82.553123"
+ id="rect1731-3-7-3-8-9-2" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="554.11243"
+ height="82.553123"
+ id="rect1731-3-7-3-8-9-2-6" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="554.11243"
+ height="82.553123"
+ id="rect1731-3-7-3-8-9-5" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="554.11243"
+ height="82.553123"
+ id="rect1731-3-7-3-8-9-2-1" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="554.11243"
+ height="82.553123"
+ id="rect13338" /><rect
+ x="594.41962"
+ y="76.212494"
+ width="343.67673"
+ height="88.639885"
+ id="rect1731-3-7-3-8-7" /></defs><g
+ inkscape:label="Layer 1"
+ inkscape:groupmode="layer"
+ id="layer1"
+ style="display:inline"><rect
+ style="display:inline;fill:none;fill-opacity:1;stroke:#555555;stroke-width:1.254;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ id="rect481-8"
+ width="90.571365"
+ height="50.243099"
+ x="291.44278"
+ y="201.52681" /><text
+ xml:space="preserve"
+ transform="matrix(0.26458333,0,0,0.26458333,158.12187,24.228759)"
+ id="text1729-6-4-0-9"
+ style="font-size:32px;font-family:System-ui;-inkscape-font-specification:'System-ui, Normal';text-align:center;writing-mode:lr-tb;white-space:pre;shape-inside:url(#rect1731-3-7-3-8);shape-padding:0.0501619;display:inline;fill:#222222;fill-opacity:1;stroke:none;stroke-width:4.73953;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ x="0"
+ y="0"><tspan
+ x="617.57129"
+ y="104.57422"
+ id="tspan15764"><tspan
+ style="font-style:italic"
+ id="tspan15762">compromised host</tspan></tspan></text><text
+ xml:space="preserve"
+ transform="matrix(0.26458333,0,0,0.26458333,205.84008,57.27357)"
+ id="text1729-6-4-0-9-7"
+ style="font-size:32px;font-family:System-ui;-inkscape-font-specification:'System-ui, Normal';text-align:center;writing-mode:lr-tb;white-space:pre;shape-inside:url(#rect1731-3-7-3-8-7);shape-padding:0.0501619;display:inline;fill:#222222;fill-opacity:1;stroke:none;stroke-width:4.73953;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ x="0"
+ y="0"><tspan
+ x="605.52441"
+ y="104.57422"
+ id="tspan15768"><tspan
+ style="font-style:italic"
+ id="tspan15766">malicious command</tspan></tspan></text><text
+ xml:space="preserve"
+ transform="matrix(0.26458333,0,0,0.26458333,-58.429513,92.816852)"
+ id="text1729-6-4-0-9-5"
+ style="font-size:32px;font-family:System-ui;-inkscape-font-specification:'System-ui, Normal';text-align:center;writing-mode:lr-tb;white-space:pre;shape-inside:url(#rect1731-3-7-3-8-9);shape-padding:0.0501619;display:inline;fill:#222222;fill-opacity:1;stroke:none;stroke-width:4.73953;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ x="0"
+ y="0"><tspan
+ x="623.0625"
+ y="104.57422"
+ id="tspan15770">connect, negotiate parameters</tspan></text><text
+ xml:space="preserve"
+ transform="matrix(0.26458333,0,0,0.26458333,105.05145,215.19061)"
+ id="text1729-6-4-0-9-5-9"
+ style="font-size:32px;font-family:System-ui;-inkscape-font-specification:'System-ui, Normal';text-align:center;writing-mode:lr-tb;white-space:pre;shape-inside:url(#rect1731-3-7-3-8-9-5);shape-padding:0.0501619;display:inline;fill:#222222;fill-opacity:1;stroke:none;stroke-width:4.73953;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ x="0"
+ y="0"><tspan
+ x="746.00781"
+ y="104.57422"
+ id="tspan15772">extract payload</tspan></text><text
+ xml:space="preserve"
+ transform="matrix(0.26458333,0,0,0.26458333,76.398223,119.75141)"
+ id="text1729-6-4-0-9-5-2"
+ style="font-size:32px;font-family:System-ui;-inkscape-font-specification:'System-ui, Normal';text-align:center;writing-mode:lr-tb;white-space:pre;shape-inside:url(#rect1731-3-7-3-8-9-2);shape-padding:0.0501619;display:inline;fill:#222222;fill-opacity:1;stroke:none;stroke-width:4.73953;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ x="0"
+ y="0"><tspan
+ x="843.98438"
+ y="104.57422"
+ id="tspan15774">call</tspan></text><text
+ xml:space="preserve"
+ transform="matrix(0,0.26458333,-0.26458333,0,399.82987,-52.045466)"
+ id="text1729-6-4-0-9-5-2-1"
+ style="font-size:32px;font-family:System-ui;-inkscape-font-specification:'System-ui, Normal';text-align:center;writing-mode:lr-tb;white-space:pre;shape-inside:url(#rect1731-3-7-3-8-9-2-6);shape-padding:0.0501619;display:inline;fill:#222222;fill-opacity:1;stroke:none;stroke-width:4.73953;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ x="0"
+ y="0"><tspan
+ x="832.49219"
+ y="104.57422"
+ id="tspan15776">hook</tspan></text><g
+ id="g12773"
+ transform="translate(-11.112501,-16.404171)"><path
+ style="fill:none;fill-opacity:1;stroke:#222222;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ d="m 110.0998,142.20185 161.1814,1.6e-4"
+ id="path2219-7-0-66"
+ sodipodi:nodetypes="cc" /><path
+ style="fill:none;fill-opacity:1;stroke:#222222;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ d="m 267.26903,139.20199 4.39165,3.00002 -4.39165,3.00002"
+ id="path2569-9-3-4"
+ sodipodi:nodetypes="ccc" /></g><g
+ id="g12773-7"
+ style="display:inline"
+ transform="translate(184.75566,10.710354)"><path
+ style="fill:none;fill-opacity:1;stroke:#222222;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ d="m 110.0998,142.20185 25.72715,1.6e-4"
+ id="path2219-7-0-66-2"
+ sodipodi:nodetypes="cc" /><path
+ style="fill:none;fill-opacity:1;stroke:#222222;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ d="m 131.81478,139.20199 4.39165,3.00002 -4.39165,3.00002"
+ id="path2569-9-3-4-7"
+ sodipodi:nodetypes="ccc" /></g><g
+ id="g12773-7-6"
+ style="display:inline"
+ transform="rotate(90,219.04702,290.04761)"><path
+ style="fill:none;fill-opacity:1;stroke:#222222;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ d="m 96.341399,142.20185 24.139611,1.6e-4"
+ id="path2219-7-0-66-2-1"
+ sodipodi:nodetypes="cc" /><path
+ style="fill:none;fill-opacity:1;stroke:#222222;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ d="m 116.46884,139.20199 4.39165,3.00002 -4.39165,3.00002"
+ id="path2569-9-3-4-7-0"
+ sodipodi:nodetypes="ccc" /></g><g
+ id="g12773-7-6-1"
+ style="display:inline"
+ transform="matrix(0,-1,-1,0,589.20509,337.77076)"><path
+ style="fill:none;fill-opacity:1;stroke:#222222;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ d="m 231.60603,145.90618 -134.205931,-1.6e-4 v 50.1213"
+ id="path2219-7-0-66-2-1-7"
+ sodipodi:nodetypes="ccc" /><path
+ style="fill:none;fill-opacity:1;stroke:#222222;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ d="m 227.59386,142.90616 4.39165,3.00002 -4.39165,3.00002"
+ id="path2569-9-3-4-7-0-7"
+ sodipodi:nodetypes="ccc" /></g><g
+ id="g12777"
+ transform="translate(-11.112501,-16.404171)"><path
+ style="fill:none;fill-opacity:1;stroke:#222222;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ d="m 110.0998,168.66035 161.1814,1.6e-4"
+ id="path12612"
+ sodipodi:nodetypes="cc" /><path
+ style="fill:none;fill-opacity:1;stroke:#222222;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ d="m 267.26903,165.66049 4.39165,3.00002 -4.39165,3.00002"
+ id="path12614"
+ sodipodi:nodetypes="ccc" /></g><text
+ xml:space="preserve"
+ transform="matrix(0.26458333,0,0,0.26458333,170.96136,128.96053)"
+ id="text1729-6-7-3-2-4-4"
+ style="font-size:28px;font-family:System-ui;-inkscape-font-specification:'System-ui, Normal';text-align:center;writing-mode:lr-tb;white-space:pre;shape-inside:url(#rect1731-3-2-7-6-5-0);shape-padding:0.0501619;display:inline;fill:#222222;fill-opacity:1;stroke:none;stroke-width:4.73953;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"><tspan
+ x="603.3252"
+ y="101.03516"
+ id="tspan15778">RSA_public_decrypt()</tspan></text><rect
+ style="display:inline;fill:none;fill-opacity:1;stroke:#888888;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:2.508, 1.254;stroke-dashoffset:0;stroke-opacity:1"
+ id="rect5643-4-6"
+ width="225.39975"
+ height="241.84584"
+ x="250.133"
+ y="36.326378" /><g
+ inkscape:label="Laag 1"
+ id="layer1-0"
+ transform="matrix(0.28222222,0,0,0.28222222,24.712356,-127.03211)"><path
+ style="opacity:1;fill:#030904;fill-opacity:1;fill-rule:nonzero;stroke:#000000;stroke-width:0.505076;stroke-opacity:1"
+ d="m 76.42344,1042.717 c -2.2224,-0.2267 -4.7225,-0.6821 -5.5559,-1.012 -0.8334,-0.3299 -9.3384,-2.8569 -18.9001,-5.6157 -9.5617,-2.7588 -17.4523,-5.0834 -17.5347,-5.1657 -0.2391,-0.2392 2.2788,-42.51159 2.8639,-48.08136 2.2676,-21.58406 6.0483,-32.16101 14.8649,-41.58634 7.5909,-8.11487 14.9224,-11.77177 27.5448,-13.73911 5.5107,-0.85889 39.4433,-1.23111 47.6206,-0.52237 13.0001,1.12673 21.3056,3.10399 29.1231,6.93322 3.9457,1.93271 5.526,3.0883 9.1422,6.68524 9.4197,9.36932 13.7657,22.358 15.8544,47.38281 1.1656,13.96551 2.4884,42.59711 1.9903,43.07931 -0.9176,0.8884 -17.7367,5.5971 -23.3654,6.5414 -20.4406,3.4292 -70.2575,6.467 -83.6481,5.1006 z"
+ id="path4293-4"
+ inkscape:connector-curvature="0" /><g
+ id="g3778"
+ transform="translate(7.4403592)"><ellipse
+ ry="38.327599"
+ rx="40.658642"
+ cy="883.10352"
+ cx="101.54045"
+ id="path4295-9"
+ style="opacity:1;fill:#000700;fill-opacity:1;fill-rule:nonzero;stroke:#000000;stroke-opacity:1" /><path
+ inkscape:connector-curvature="0"
+ style="fill:#333333;stroke:#333333;stroke-width:1.59399"
+ d="m 130.73533,872.51459 c -0.9566,-0.15105 -2.03668,-0.13405 -3.25283,0.0977 -8.99572,1.71324 -29.227838,2.15908 -42.286852,0.92757 -8.050764,-0.75923 -15.27019,-0.81869 -16.010046,-0.14638 -1.698308,1.54319 1.927225,13.98829 5.133383,17.62372 5.614387,6.3659 21.426346,1.41674 23.735532,-7.42052 1.279165,-4.89559 5.164193,-5.13535 6.404013,-0.39055 0.50957,1.95034 2.46168,5.11381 4.32017,7.02997 6.44972,6.64977 22.25802,3.1658 22.97314,-5.0772 0.25274,-2.91307 0.53177,-3.93423 2.1855,-7.56697 1.17761,-2.58669 -0.33218,-4.62404 -3.20201,-5.0772 z m -0.35577,1.5134 c 0.2948,-0.1249 0.72172,-0.0703 1.16899,0.19527 0.89452,0.53103 1.62641,1.28096 1.62641,1.65986 0,0.3789 -0.73189,0.68347 -1.62641,0.68347 -0.89453,0 -1.62642,-0.74993 -1.62642,-1.65986 0,-0.45496 0.16265,-0.75387 0.45743,-0.87874 z m -2.94787,7.95752 c 0.27289,0.10947 0.28495,0.38715 0,0.82992 -0.5465,0.84938 -1.64879,1.56222 -2.49046,1.56222 -2.33944,0 -1.85209,-1.1095 0.96568,-2.14804 0.72368,-0.26676 1.25187,-0.35358 1.52478,-0.2441 z m -16.92492,5.56539 c 0.0111,-0.11905 0.48467,0.22154 1.3723,0.97638 1.18402,1.00764 3.13816,1.4796 4.371,1.02521 1.23266,-0.45447 2.28714,-0.47843 2.28714,-0.0488 0,2.2426 -4.96781,2.13597 -6.7598,-0.1464 -0.85477,-1.08896 -1.28235,-1.68725 -1.27064,-1.8063 z"
+ id="path3687" /><path
+ inkscape:connector-curvature="0"
+ style="fill:#333333;stroke:#333333;stroke-width:1.59399"
+ d="m 82.862454,817.98357 c -1.465468,0.0262 -2.815166,0.42883 -4.421823,1.17166 -4.742144,2.19245 -6.992053,7.33091 -10.825845,24.84896 l -2.642926,11.96071 -8.132086,1.07401 c -8.213577,1.08505 -11.618398,4.12063 -8.284569,7.32288 0.936171,0.89914 7.4246,2.17626 14.434456,2.88034 13.225544,1.32838 77.116579,0.57421 86.200129,-1.02521 5.41857,-0.95409 8.52665,-5.00845 5.28584,-6.93233 -1.03927,-0.61699 -5.39774,-1.55653 -9.65684,-2.09922 -6.82396,-0.8695 -7.84307,-1.514 -8.5387,-5.27247 -2.76214,-14.92591 -6.5251,-27.95859 -8.79281,-30.36553 -2.32561,-2.46839 -4.50558,-2.68406 -18.44968,-1.80631 -10.24642,0.645 -17.712484,0.41651 -21.14342,-0.73229 -2.0257,-0.6783 -3.566259,-1.05124 -5.031726,-1.0252 z"
+ id="path3689" /></g><path
+ style="color:#000000;display:inline;overflow:visible;visibility:visible;fill:#e6e6e6;stroke:#e6e6e6;stroke-width:2.09475px;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1;marker:none;enable-background:accumulate"
+ d="m 97.347665,926.25297 6.937745,8.47742 -10.902154,82.89031 13.875464,12.2451 14.86658,-12.7161 -7.92883,-81.94835 8.91994,-8.47742 z"
+ id="path3693"
+ inkscape:connector-curvature="0" /></g><text
+ xml:space="preserve"
+ transform="matrix(0.26458333,0,0,0.26458333,-67.018529,119.55149)"
+ id="text12662"
+ style="font-size:32px;font-family:System-ui;-inkscape-font-specification:'System-ui, Normal';text-align:center;writing-mode:lr-tb;white-space:pre;shape-inside:url(#rect12664);shape-padding:0.0501619;display:inline;fill:#222222;fill-opacity:1;stroke:none;stroke-width:4.73953;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ x="0"
+ y="0"><tspan
+ x="674.66211"
+ y="104.57422"
+ id="tspan15780">send RSA &quot;key&quot; with payload</tspan></text><rect
+ style="display:inline;fill:none;fill-opacity:1;stroke:#555555;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1"
+ id="rect12699"
+ width="136.14146"
+ height="150.34041"
+ x="279.60477"
+ y="106.27856" /><rect
+ style="display:inline;fill:none;fill-opacity:1;stroke:#555555;stroke-width:1.254;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1"
+ id="rect12699-9"
+ width="102.9357"
+ height="24.302307"
+ x="357.17514"
+ y="70.477783" /><text
+ xml:space="preserve"
+ transform="matrix(0.26458333,0,0,0.26458333,143.88624,94.789312)"
+ id="text12703"
+ style="font-size:32px;font-family:System-ui;-inkscape-font-specification:'System-ui, Normal';text-align:center;writing-mode:lr-tb;white-space:pre;shape-inside:url(#rect12705);shape-padding:0.0501619;display:inline;fill:#222222;fill-opacity:1;stroke:none;stroke-width:4.73953;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ x="0"
+ y="0"><tspan
+ x="624.8291"
+ y="104.57422"
+ id="tspan15784"><tspan
+ style="font-style:italic"
+ id="tspan15782">OpenSSH process</tspan></tspan></text><text
+ xml:space="preserve"
+ transform="matrix(0.26458333,0,0,0.26458333,133.3349,188.58656)"
+ id="text12703-1"
+ style="font-size:32px;font-family:System-ui;-inkscape-font-specification:'System-ui, Normal';text-align:center;writing-mode:lr-tb;white-space:pre;shape-inside:url(#rect12705-7);shape-padding:0.0501619;display:inline;fill:#222222;fill-opacity:1;stroke:none;stroke-width:4.73953;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ x="0"
+ y="0"><tspan
+ x="708.97754"
+ y="104.57422"
+ id="tspan15788"><tspan
+ style="font-style:italic"
+ id="tspan15786">liblzma</tspan></tspan></text><text
+ xml:space="preserve"
+ transform="matrix(0,-0.26458333,0.26458333,0,408.74909,421.97431)"
+ id="text13336"
+ style="font-size:32px;font-family:System-ui;-inkscape-font-specification:'System-ui, Normal';text-align:center;writing-mode:lr-tb;white-space:pre;shape-inside:url(#rect13338);shape-padding:0.0501619;display:inline;fill:#222222;fill-opacity:1;stroke:none;stroke-width:4.73953;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:2.3;stroke-dasharray:none;stroke-opacity:1"
+ x="0"
+ y="0"><tspan
+ x="739.32812"
+ y="104.57422"
+ id="tspan15790">execute payload</tspan></text></g></svg>