Name		Name	Last commit message	Last commit date
parent directory ..
.gitignore		.gitignore
Makefile		Makefile
README.md		README.md
exechijack.bpf.c		exechijack.bpf.c
exechijack.h		exechijack.h
open_modify.bpf.c		open_modify.bpf.c
open_modify.h		open_modify.h
victim.cpp		victim.cpp

README.md

ebpf modify syscall parameters

modify open filename

make
./victim

sudo ./ecli run package.json -- --rewrite --target_pid=$(pidof victim)

modify exec commands

TODO

reference

https://github.com/pathtofile/bad-bpf/blob/main/src/exechijack.bpf.c