Comment by Terr_

> This allowlisting approach is often defeated

See also: https://gtfobins.org/

> GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.