dtrace-infiltrate

OpenSSHd Backdoor
Almost no system calls occur during the
auth stage since the data is already
buffered.
Reading source code, found authctxt struct
containing “success” attribute which would be
useful.
Spoke to Lurene about the problem she
suggested copying the private key back to
the client.