.. / tcpdump

These require some traffic to be actually captured. Also note that the subprocess is immediately sent to the background.


It can be used to break out from restricted environments by running non-interactive system commands.


It runs in privileged context and may be used to access the file system, escalate or maintain access with elevated privileges if enabled on sudo.