Argument injection via sftp
sftp sftp Sandbox: execFile · Timeout: 30s
security.execution.command Can be used to execute any command or file on a system, but without stdin/stdout/stderr.
sftp -D"touch /tmp/korewashere" GTFOArgs entry for sftp. This binary can be used to inject arguments for execution, file operations, or other capabilities.