`id>/tmp/pwn_via_attachment.txt`