For example: https://paragonie.com/blog/2015/09/comprehensive-guide-url-p...
What do you need to do before you can sniff a loopback interface?
You can run as a regular user (or even sandboxed) and connect to the interface without authentication.
