bpf-developer-tutorial/src/34-syscall/README.md

ebpf modify syscall parameters

modify open filename

make
./victim

sudo ./ecli run package.json -- --rewrite --target_pid=$(pidof victim)

modify exec commands

TODO

reference

• https://github.com/pathtofile/bad-bpf/blob/main/src/exechijack.bpf.c