add example of 34

src/34-syscall/README.md

@@ -0,0 +1,20 @@
+# ebpf modify syscall parameters
+
+## modify open filename
+
+```bash
+make
+./victim
+```
+
+```bash
+sudo ./ecli run package.json -- --rewrite --target_pid=$(pidof victim)
+```
+
+## modify exec commands
+
+TODO
+
+## reference
+
+- <https://github.com/pathtofile/bad-bpf/blob/main/src/exechijack.bpf.c>