sandbox-cli 0.2.31__tar.gz → 0.2.33__tar.gz

{sandbox_cli-0.2.31 → sandbox_cli-0.2.33}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sandbox-cli
-Version: 0.2.31
+Version: 0.2.33
 Summary: Command line tool for interaction with sandboxes
 Project-URL: Homepage, https://github.com/Security-Experts-Community/sandbox-cli
 Project-URL: Documentation, https://security-experts-community.github.io/sandbox-cli

{sandbox_cli-0.2.31 → sandbox_cli-0.2.33}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "sandbox-cli"
-version = "0.2.31"
+version = "0.2.33"
 description = "Command line tool for interaction with sandboxes"
 readme = "README.md"
 requires-python = ">=3.11"

{sandbox_cli-0.2.31 → sandbox_cli-0.2.33}/sandbox_cli/cli/scanner/__init__.py

@@ -118,6 +118,14 @@ async def re_scan(
             negative="",
         ),
     ] = False,
+    timeout: Annotated[
+        int,
+        Parameter(
+            name=["--timeout", "-t"],
+            help="Response waiting time (increase this value if large traces are scanned)",
+            validator=validators.Number(gt=0, lt=3600),
+        ),
+    ] = 300,
 ) -> None:
     """
     Send traces to re-scan.
@@ -146,6 +154,7 @@ async def re_scan(
         unpack=unpack,
         debug=debug,
         open_browser=open_browser,
+        timeout=timeout,
     )
 
 
@@ -586,6 +595,15 @@ async def scan_new(
             negative="",
         ),
     ] = None,
+    outbound_connections: Annotated[
+        list[str] | None,
+        Parameter(
+            name=["--outbound-connections", "-oc"],
+            help="Whitelist of IP addresses to which connections from a VM are allowed (backconnect)",
+            group="Sandbox Options",
+            negative="",
+        ),
+    ] = None,
     all: Annotated[
         bool,
         Parameter(
@@ -725,4 +743,5 @@ async def scan_new(
         procdumps=procdumps,
         decompress=decompress,
         open_browser=open_browser,
+        outbound_connections=outbound_connections,
     )

{sandbox_cli-0.2.31 → sandbox_cli-0.2.33}/sandbox_cli/utils/scanner/advanced.py

@@ -81,6 +81,7 @@ async def _prepare_sandbox_new_scan(
     disable_clicker: bool,
     skip_sample_run: bool,
     vnc_mode: VNCMode,
+    outbound_connections: list[str] | None,
 ) -> tuple[Sandbox, SandboxOptionsAdvanced, set[VMImage | str]]:
     sandbox = Sandbox(key=sandbox_key)
 
@@ -161,6 +162,7 @@ async def _prepare_sandbox_new_scan(
         sandbox_options.custom_command = custom_command
 
     # add extra options
+    sandbox_options.debug_options["allowed_outbound_connections"] = outbound_connections or []
     sandbox_options.procdump_new_processes_on_finish = not no_procdumps_on_finish
     sandbox_options.bootkitmon = bootkitmon
     sandbox_options.analysis_duration_bootkitmon = bootkitmon_duration
@@ -206,6 +208,7 @@ async def scan_internal_advanced(
     procdumps: bool,
     decompress: bool,
     open_browser: bool,
+    outbound_connections: list[str] | None,
 ) -> None:
     key = get_key_by_name(key_name)
     sandbox_sem = asyncio.Semaphore(value=key.max_workers)
@@ -355,6 +358,7 @@ async def scan_internal_advanced(
             disable_clicker,
             skip_sample_run,
             vnc_mode,
+            outbound_connections,
         )
         max_image_length = max(len(x) for x in images)
         for i, image_id in enumerate(images):

{sandbox_cli-0.2.31 → sandbox_cli-0.2.33}/sandbox_cli/utils/scanner/rescan.py

@@ -98,6 +98,7 @@ async def rescan_internal(
     unpack: bool,
     debug: bool,
     open_browser: bool,
+    timeout: int,
 ) -> None:
     key = get_key_by_name(key_name)
     sandbox_sem = asyncio.Semaphore(value=key.max_workers)
@@ -128,19 +129,13 @@ async def rescan_internal(
         async with sandbox_sem:
             task_id = progress.add_task(description="Creating task", idx=idx, url="...")
 
-            wait_time = (
-                round(sandbox_options.sandbox.analysis_duration * 1.5)
-                if sandbox_options.sandbox.analysis_duration > 70
-                else 70
-            )
-
             try:
                 rescan_result = await sandbox.create_rescan(
                     drakvuf_trace,
                     tcpdump_pcap,
                     options=sandbox_options,
                     rules=None,
-                    read_timeout=wait_time,
+                    read_timeout=timeout,
                 )
             except SandboxUploadException as e:
                 console.error(f"[yellow]{trace}[/] • an error occurred when uploading a file to the server • {e}")
@@ -162,7 +157,7 @@ async def rescan_internal(
                 description=f"Waiting for full report for [yellow]{trace.name}[/]",
                 url=formatted_link,
             )
-            if not (awaited_report := await sandbox.wait_for_report(rescan_result, wait_time)):
+            if not (awaited_report := await sandbox.wait_for_report(rescan_result, timeout)):
                 console.error(f"Rescan failed for [yellow]{trace.name}[/] • {formatted_link} • {rescan_result}")
                 progress.remove_task(task_id)
                 return