Wrap an invocation of sudo, saving the input bytes including any passwords

sudowrapper.py

#!/usr/bin/env python
"""
Wrap an invocation of sudo, saving the input bytes including any passwords.
Write a repr of the input bytes to stdout, following any output from the
sudo command invocation.
"""

import io
import os
import pty
import sys

stdin_stash = io.BytesIO()

def stdin_read(fd):
    data = os.read(fd, 1024)
    stdin_stash.write(data)
    return data

exit_status = pty.spawn(
    ['sudo', '--reset-timestamp', *sys.argv[1:]],
    stdin_read=stdin_read,
)

sys.stdout.write(f'{stdin_stash.getvalue()!r}\n')
sys.stdout.flush()
sys.exit(exit_status)

$ ./sudowrapper.py echo foo
[sudo] password for alex: 
foo
b'1234 the same combination as my luggage\r'