nyx/tests/dynamic_fixtures/escape/dns_leak.py
2026-06-05 10:16:30 -05:00

15 lines
467 B
Python

"""Escape attempt: perform a DNS lookup to leak container identity.
Expected outcome: socket.gaierror (--network none, no DNS resolver).
"""
import socket
import sys
try:
# Try to resolve an external hostname; requires network access.
ip = socket.gethostbyname("google.com")
print(f"NYX_ESCAPE_SUCCESS: DNS resolved google.com -> {ip}")
sys.exit(0)
except (socket.gaierror, OSError) as e:
print(f"BLOCKED: {e}", file=sys.stderr)
sys.exit(1)