sandbox-cli 0.2.31__tar.gz → 0.2.32__tar.gz

{sandbox_cli-0.2.31 → sandbox_cli-0.2.32}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sandbox-cli
-Version: 0.2.31
+Version: 0.2.32
 Summary: Command line tool for interaction with sandboxes
 Project-URL: Homepage, https://github.com/Security-Experts-Community/sandbox-cli
 Project-URL: Documentation, https://security-experts-community.github.io/sandbox-cli

{sandbox_cli-0.2.31 → sandbox_cli-0.2.32}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "sandbox-cli"
-version = "0.2.31"
+version = "0.2.32"
 description = "Command line tool for interaction with sandboxes"
 readme = "README.md"
 requires-python = ">=3.11"

{sandbox_cli-0.2.31 → sandbox_cli-0.2.32}/sandbox_cli/cli/scanner/__init__.py

@@ -586,6 +586,15 @@ async def scan_new(
             negative="",
         ),
     ] = None,
+    outbound_connections: Annotated[
+        list[str] | None,
+        Parameter(
+            name=["--outbound-connections", "-oc"],
+            help="Whitelist of IP addresses to which connections from a VM are allowed (backconnect)",
+            group="Sandbox Options",
+            negative="",
+        ),
+    ] = None,
     all: Annotated[
         bool,
         Parameter(
@@ -725,4 +734,5 @@ async def scan_new(
         procdumps=procdumps,
         decompress=decompress,
         open_browser=open_browser,
+        outbound_connections=outbound_connections,
     )

{sandbox_cli-0.2.31 → sandbox_cli-0.2.32}/sandbox_cli/utils/scanner/advanced.py

@@ -81,6 +81,7 @@ async def _prepare_sandbox_new_scan(
     disable_clicker: bool,
     skip_sample_run: bool,
     vnc_mode: VNCMode,
+    outbound_connections: list[str] | None,
 ) -> tuple[Sandbox, SandboxOptionsAdvanced, set[VMImage | str]]:
     sandbox = Sandbox(key=sandbox_key)
 
@@ -161,6 +162,7 @@ async def _prepare_sandbox_new_scan(
         sandbox_options.custom_command = custom_command
 
     # add extra options
+    sandbox_options.debug_options["allowed_outbound_connections"] = outbound_connections or []
     sandbox_options.procdump_new_processes_on_finish = not no_procdumps_on_finish
     sandbox_options.bootkitmon = bootkitmon
     sandbox_options.analysis_duration_bootkitmon = bootkitmon_duration
@@ -206,6 +208,7 @@ async def scan_internal_advanced(
     procdumps: bool,
     decompress: bool,
     open_browser: bool,
+    outbound_connections: list[str] | None,
 ) -> None:
     key = get_key_by_name(key_name)
     sandbox_sem = asyncio.Semaphore(value=key.max_workers)
@@ -355,6 +358,7 @@ async def scan_internal_advanced(
             disable_clicker,
             skip_sample_run,
             vnc_mode,
+            outbound_connections,
         )
         max_image_length = max(len(x) for x in images)
         for i, image_id in enumerate(images):