sandbox-cli 0.2.30__tar.gz → 0.2.32__tar.gz

{sandbox_cli-0.2.30 → sandbox_cli-0.2.32}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sandbox-cli
-Version: 0.2.30
+Version: 0.2.32
 Summary: Command line tool for interaction with sandboxes
 Project-URL: Homepage, https://github.com/Security-Experts-Community/sandbox-cli
 Project-URL: Documentation, https://security-experts-community.github.io/sandbox-cli
@@ -14,9 +14,9 @@ Requires-Python: >=3.11
 Requires-Dist: aiofiles>=24.1.0
 Requires-Dist: asyncssh>=2.20.0
 Requires-Dist: cryptography>=44.0.2
-Requires-Dist: cyclopts>=3.12.0
+Requires-Dist: cyclopts>=3.16.0
 Requires-Dist: docker>=7.1.0
-Requires-Dist: ptsandbox>=5.0.0
+Requires-Dist: ptsandbox>=5.0.4
 Requires-Dist: pyzipper>=0.3.6
 Requires-Dist: rich>=14.0.0
 Requires-Dist: zstandard>=0.23.0

{sandbox_cli-0.2.30 → sandbox_cli-0.2.32}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "sandbox-cli"
-version = "0.2.30"
+version = "0.2.32"
 description = "Command line tool for interaction with sandboxes"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -11,9 +11,9 @@ dependencies = [
   "aiofiles>=24.1.0",
   "asyncssh>=2.20.0",
   "cryptography>=44.0.2",
-  "cyclopts>=3.12.0",
+  "cyclopts>=3.16.0",
   "docker>=7.1.0",
-  "ptsandbox>=5.0.0",
+  "ptsandbox>=5.0.4",
   "pyzipper>=0.3.6",
   "rich>=14.0.0",
   "zstandard>=0.23.0",

{sandbox_cli-0.2.30 → sandbox_cli-0.2.32}/sandbox_cli/cli/scanner/__init__.py

@@ -514,11 +514,11 @@ async def scan_new(
             group="Sandbox Options",
         ),
     ] = 3,
-    procdump_new_processes_on_finish: Annotated[
+    no_procdumps_on_finish: Annotated[
         bool,
         Parameter(
-            name=["--procdump-new-processes-on-finish", "-P"],
-            help="Collect dumps for all created and not finished processes",
+            name=["--no-procdumps-on-finish", "-P"],
+            help="Disable dumps for all created and not finished processes",
             group="Sandbox Options",
             negative="",
         ),
@@ -586,6 +586,15 @@ async def scan_new(
             negative="",
         ),
     ] = None,
+    outbound_connections: Annotated[
+        list[str] | None,
+        Parameter(
+            name=["--outbound-connections", "-oc"],
+            help="Whitelist of IP addresses to which connections from a VM are allowed (backconnect)",
+            group="Sandbox Options",
+            negative="",
+        ),
+    ] = None,
     all: Annotated[
         bool,
         Parameter(
@@ -708,7 +717,7 @@ async def scan_new(
         fake_name=fake_name,
         unpack=unpack,
         priority=priority,
-        procdump_new_processes_on_finish=procdump_new_processes_on_finish,
+        no_procdumps_on_finish=no_procdumps_on_finish,
         bootkitmon=bootkitmon,
         bootkitmon_duration=bootkitmon_duration,
         mitm_disabled=mitm_disabled,
@@ -725,4 +734,5 @@ async def scan_new(
         procdumps=procdumps,
         decompress=decompress,
         open_browser=open_browser,
+        outbound_connections=outbound_connections,
     )

{sandbox_cli-0.2.30 → sandbox_cli-0.2.32}/sandbox_cli/utils/scanner/advanced.py

@@ -74,13 +74,14 @@ async def _prepare_sandbox_new_scan(
     syscall_hooks: Path | None,
     dll_hooks_dir: Path | None,
     custom_command: str | None,
-    procdump_new_processes_on_finish: bool,
+    no_procdumps_on_finish: bool,
     bootkitmon: bool,
     bootkitmon_duration: int,
     mitm_disabled: bool,
     disable_clicker: bool,
     skip_sample_run: bool,
     vnc_mode: VNCMode,
+    outbound_connections: list[str] | None,
 ) -> tuple[Sandbox, SandboxOptionsAdvanced, set[VMImage | str]]:
     sandbox = Sandbox(key=sandbox_key)
 
@@ -161,7 +162,8 @@ async def _prepare_sandbox_new_scan(
         sandbox_options.custom_command = custom_command
 
     # add extra options
-    sandbox_options.procdump_new_processes_on_finish = procdump_new_processes_on_finish
+    sandbox_options.debug_options["allowed_outbound_connections"] = outbound_connections or []
+    sandbox_options.procdump_new_processes_on_finish = not no_procdumps_on_finish
     sandbox_options.bootkitmon = bootkitmon
     sandbox_options.analysis_duration_bootkitmon = bootkitmon_duration
     sandbox_options.mitm_enabled = not mitm_disabled
@@ -189,7 +191,7 @@ async def scan_internal_advanced(
     fake_name: str | None,
     unpack: bool,
     priority: int,
-    procdump_new_processes_on_finish: bool,
+    no_procdumps_on_finish: bool,
     bootkitmon: bool,
     bootkitmon_duration: int,
     mitm_disabled: bool,
@@ -206,6 +208,7 @@ async def scan_internal_advanced(
     procdumps: bool,
     decompress: bool,
     open_browser: bool,
+    outbound_connections: list[str] | None,
 ) -> None:
     key = get_key_by_name(key_name)
     sandbox_sem = asyncio.Semaphore(value=key.max_workers)
@@ -348,13 +351,14 @@ async def scan_internal_advanced(
             syscall_hooks,
             dll_hooks_dir,
             custom_command,
-            procdump_new_processes_on_finish,
+            no_procdumps_on_finish,
             bootkitmon,
             bootkitmon_duration,
             mitm_disabled,
             disable_clicker,
             skip_sample_run,
             vnc_mode,
+            outbound_connections,
         )
         max_image_length = max(len(x) for x in images)
         for i, image_id in enumerate(images):