upvote
> did not have egress to the Internet. It did have curl and Python, but not much else.

So trade exfiltration via curl with exfiltration via DNS lookup?

reply
Exfiltrate what? It's an empty container.
reply
There do exist container escaping exploits.
reply
At that point, you'd be relying on a bug in curl / Python / sh, not the bot!
reply
You do everything in a one-liner :)
reply