1 line
11 KiB
XML
1 line
11 KiB
XML
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="565px" height="511px" viewBox="-0.5 -0.5 565 511" content="<mxfile host="04n1rgtnob7ebrhhg57mh2mjuh68d4qe61ncs1a2e1n2no0ifp02" modified="2024-11-19T20:10:37.967Z" agent="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Code/1.95.2 Chrome/128.0.6613.186 Electron/32.2.1 Safari/537.36" etag="Ihm2bHcxsJ7nqdvbzjMT" version="12.2.4" pages="1"><diagram id="u2k1fO37xzy30OC7eFyB" name="Page-1">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</diagram></mxfile>" style="background-color: rgb(255, 255, 255);"><defs/><g><rect x="44" y="150" width="200" height="360" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/><rect x="124" y="160" width="40" height="20" fill="none" stroke="none" pointer-events="all"/><g transform="translate(127.5,163.5)"><foreignObject style="overflow:visible;" pointer-events="all" width="33" height="12"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 34px; white-space: nowrap; overflow-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;white-space:normal;">Target</div></div></foreignObject></g><rect x="54" y="220" width="180" height="50" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(117.5,238.5)"><foreignObject style="overflow:visible;" pointer-events="all" width="53" height="12"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 54px; white-space: nowrap; overflow-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;white-space:normal;">BootROM</div></div></foreignObject></g><path d="M 404 245 L 240.37 245" fill="none" stroke="#000000" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 235.12 245 L 242.12 241.5 L 240.37 245 L 242.12 248.5 Z" fill="#000000" stroke="#000000" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(238.5,239.5)"><foreignObject style="overflow:visible;" pointer-events="all" width="116" height="12"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;background-color:#ffffff;">1 Exploit with payload</div></div></foreignObject></g><rect x="404" y="150" width="160" height="360" fill="#d5e8d4" stroke="#82b366" pointer-events="all"/><rect x="404" y="225" width="160" height="40" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(451.5,238.5)"><foreignObject style="overflow:visible;" pointer-events="all" width="65" height="12"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 66px; white-space: nowrap; overflow-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;white-space:normal;">Exploit RCE</div></div></foreignObject></g><path d="M 404 295 L 374 295 L 374 370 L 240.37 370" fill="none" stroke="#000000" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 235.12 370 L 242.12 366.5 L 240.37 370 L 242.12 373.5 Z" fill="#000000" stroke="#000000" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(347.5,303.5)"><foreignObject style="overflow:visible;" pointer-events="all" width="57" height="27"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;background-color:#ffffff;">upload<br />bootloader</div></div></foreignObject></g><rect x="404" y="265" width="160" height="40" fill="#60a917" stroke="#2d7600" pointer-events="all"/><g transform="translate(432.5,278.5)"><foreignObject style="overflow:visible;" pointer-events="all" width="103" height="12"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(255, 255, 255); line-height: 1.2; vertical-align: top; width: 104px; white-space: nowrap; overflow-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;white-space:normal;">Interact with device</div></div></foreignObject></g><rect x="54" y="340" width="180" height="160" fill="#0050ef" stroke="#001dbc" pointer-events="all"/><g transform="translate(130.5,413.5)"><foreignObject style="overflow:visible;" pointer-events="all" width="27" height="12"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(255, 255, 255); line-height: 1.2; vertical-align: top; width: 28px; white-space: nowrap; overflow-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;white-space:normal;">RAM</div></div></foreignObject></g><path d="M 236.24 490 L 319 490 L 319 285 L 397.63 285" fill="none" stroke="#000000" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 242.12 487.67 L 235.12 490 L 242.12 492.33" fill="none" stroke="#000000" stroke-miterlimit="10" pointer-events="all"/><path d="M 402.88 285 L 395.88 288.5 L 397.63 285 L 395.88 281.5 Z" fill="#000000" stroke="#000000" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(264.5,340.5)"><foreignObject style="overflow:visible;" pointer-events="all" width="104" height="12"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;background-color:#ffffff;">3 gupje sends GiAs</div></div></foreignObject></g><rect x="54" y="480" width="180" height="20" fill="#e1d5e7" stroke="#9673a6" pointer-events="all"/><g transform="translate(127.5,483.5)"><foreignObject style="overflow:visible;" pointer-events="all" width="32" height="12"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 33px; white-space: nowrap; overflow-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;white-space:normal;">Gupje</div></div></foreignObject></g><rect x="54" y="350" width="180" height="40" fill="#1ba1e2" stroke="#006eaf" pointer-events="all"/><g transform="translate(91.5,363.5)"><foreignObject style="overflow:visible;" pointer-events="all" width="105" height="12"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(255, 255, 255); line-height: 1.2; vertical-align: top; width: 106px; white-space: nowrap; overflow-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;white-space:normal;">Patched Bootloader</div></div></foreignObject></g><path d="M 53 245 L 33 245 L 33 490 L 46.63 490" fill="none" stroke="#000000" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 51.88 490 L 44.88 493.5 L 46.63 490 L 44.88 486.5 Z" fill="#000000" stroke="#000000" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5,362.5)"><foreignObject style="overflow:visible;" pointer-events="all" width="67" height="11"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;background-color:#ffffff;">2 Jump(RCE)</div></div></foreignObject></g><rect x="44" y="10" width="290" height="150" fill="none" stroke="none" pointer-events="all"/><g transform="translate(48.5,-0.5)"><foreignObject style="overflow:visible;" pointer-events="all" width="280" height="143"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; overflow: hidden; max-height: 160px; max-width: 280px; width: 280px; white-space: normal; overflow-wrap: normal; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;white-space:normal;"><h1>Booting example</h1><p>An exploit is used to push a payload, gupje in this case, to the target device. Gupje responds to the host with b'GiAs', indicating that it is ready to receive commands. A patched bootloader is then send from the host and booted</p></div></div></foreignObject></g></g></svg> |