diff --git a/_gtfobins/journalctl.md b/_gtfobins/journalctl.md
new file mode 100644
index 0000000..c3d7014
--- /dev/null
+++ b/_gtfobins/journalctl.md
@@ -0,0 +1,12 @@
+---
+description: This might not work if run by unprivileged users depending on the system configuration.
+functions:
+  execute-interactive:
+    - code: |
+        journalctl
+        !/bin/sh
+  sudo-enabled:
+    - code: |
+        sudo journalctl
+        !/bin/sh
+---