sandbox-cli 0.2.41__tar.gz → 0.2.43__tar.gz

{sandbox_cli-0.2.41 → sandbox_cli-0.2.43}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sandbox-cli
-Version: 0.2.41
+Version: 0.2.43
 Summary: Command line tool for interaction with sandboxes
 Project-URL: Homepage, https://github.com/Security-Experts-Community/sandbox-cli
 Project-URL: Documentation, https://security-experts-community.github.io/sandbox-cli
@@ -12,10 +12,10 @@ License-File: LICENSE
 License-File: NOTICE
 Requires-Python: >=3.11
 Requires-Dist: aiofiles>=24.1.0
-Requires-Dist: asyncssh>=2.21.0
+Requires-Dist: asyncssh>=2.21.1
 Requires-Dist: colorama>=0.4.6
-Requires-Dist: cryptography>=45.0.4
-Requires-Dist: cyclopts>=3.22.5
+Requires-Dist: cryptography>=46.0.2
+Requires-Dist: cyclopts>=4.2.5
 Requires-Dist: docker>=7.1.0
 Requires-Dist: ptsandbox>=5.0.6
 Requires-Dist: pyzipper>=0.3.6

{sandbox_cli-0.2.41 → sandbox_cli-0.2.43}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "sandbox-cli"
-version = "0.2.41"
+version = "0.2.43"
 description = "Command line tool for interaction with sandboxes"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -9,10 +9,10 @@ license-files = ["LICENSE", "NOTICE"]
 authors = [{ name = "Alexey Kolesnikov" }]
 dependencies = [
   "aiofiles>=24.1.0",
-  "asyncssh>=2.21.0",
+  "asyncssh>=2.21.1",
   "colorama>=0.4.6",
-  "cryptography>=45.0.4",
-  "cyclopts>=3.22.5",
+  "cryptography>=46.0.2",
+  "cyclopts>=4.2.5",
   "docker>=7.1.0",
   "ptsandbox>=5.0.6",
   "pyzipper>=0.3.6",

{sandbox_cli-0.2.41 → sandbox_cli-0.2.43}/sandbox_cli/cli/__init__.py

@@ -10,7 +10,8 @@ from sandbox_cli.cli.unpack import unpack_logs
 from sandbox_cli.console import console
 from sandbox_cli.internal.config import configpath, settings
 
-init() # colorama stuff for working on windows
+init()  # colorama stuff for working on windows
+
 
 def get_version() -> str:
     import importlib.metadata
@@ -32,6 +33,8 @@ app = App(
     console=console,
 )
 
+app.register_install_completion_command(add_to_startup=False)
+
 app.command(name=["conv", "unpack"])(unpack_logs)
 app.command(name="report")(generate_report)
 app.command(name="browser")(open_browser)

{sandbox_cli-0.2.41 → sandbox_cli-0.2.43}/sandbox_cli/cli/reporter.py

@@ -69,7 +69,7 @@ def generate_report(
     data: list[TableData] = []
     match mode:
         case "md":
-            delimeter = " "
+            delimeter = "<br/>"
         case _:
             delimeter = "\n"
 
@@ -130,7 +130,8 @@ def generate_report(
                     "static": delimeter.join(extract_static(report)),
                     "memory": delimeter.join(extract_memory(report)),
                     "network": delimeter.join(extract_network_from_trace(corr_trace)),
-                    "sandbox": f"[link={link}]{link}[/link]",
+                    # "sandbox": f"[link={link}]{link}[/link]",
+                    "sandbox": link,
                 }
             )
 
@@ -142,7 +143,7 @@ def generate_report(
             | --- | --- | --- | --- | --- | --- | --- |"""
             ).strip()
 
-            md_report_base = "|{sample}|{image}|{verdict}|{static}|{memory}|{network}|"
+            md_report_base = "|{sample}|{image}|{verdict}|{static}|{memory}|{network}|{sandbox}|"
             table_md = md_report_head + "\n"
             table_md += "\n".join(md_report_base.format(**d) for d in data)
             print(table_md)
@@ -157,6 +158,7 @@ def generate_report(
             table.add_column("Sandbox", overflow="fold")
 
             for d in data:
+                sandbox = f"[link={d['sandbox']}]{d['sandbox']}[/link]"
                 table.add_row(
                     d["sample"],
                     d["image"],
@@ -164,7 +166,8 @@ def generate_report(
                     d["static"],
                     d["memory"],
                     d["network"],
-                    d["sandbox"],
+                    # special case for sandbox link
+                    sandbox,
                 )
             console.print(table)
         case _:

{sandbox_cli-0.2.41 → sandbox_cli-0.2.43}/sandbox_cli/utils/downloader/__init__.py

@@ -22,6 +22,17 @@ from sandbox_cli.console import console
 
 semaphore = asyncio.Semaphore(value=16)
 
+# At first glance, it's counter-intuitive, but ArtifactType can contain not only predefined fields in it, but also newly added.
+# This usually happens when a new feature is released in the sandbox.
+_KNOWN_ARTIFACT_TYPES = {
+    ArtifactType.ARCHIVE,
+    ArtifactType.COMPRESSED,
+    ArtifactType.EMAIL,
+    ArtifactType.FILE,
+    ArtifactType.PROCESS_DUMP,
+    ArtifactType.URL,
+}
+
 
 async def _save_artifact(
     scan_id: UUID,
@@ -202,6 +213,13 @@ async def download(
                             decompress=decompress,
                         )
 
+                    if all and artifact.type not in _KNOWN_ARTIFACT_TYPES:
+                        add_task(
+                            output / "other",
+                            artifact.file_info.sha256,
+                            artifact.file_info.file_uri,
+                        )
+
     if not tasks:
         console.info(f"Nothing to download from {report.scan_id}")
 

{sandbox_cli-0.2.41 → sandbox_cli-0.2.43}/sandbox_cli/utils/unpack/plugins/correlation.py

@@ -35,16 +35,16 @@ class CorrelatedRules(BasePlugin):
                         pass
 
         if len(malware) > 0:
-            with open(f"{file}.malware", "w", encoding="utf-8") as fd:
+            with open(base_path / "malware.log", "w", encoding="utf-8") as fd:
                 for line in malware:
                     fd.write(line)
 
         for key, lines in silent.items():
-            with open(f"{file}.silent.{key}", "w", encoding="utf-8") as fd:
+            with open(base_path / f"{key}.silent.log", "w", encoding="utf-8") as fd:
                 for line in lines:
                     fd.write(line)
 
         for key, lines in suspicious.items():
-            with open(f"{file}.suspicious.{key}", "w", encoding="utf-8") as fd:
+            with open(base_path / f"{key}.suspicious.log", "w", encoding="utf-8") as fd:
                 for line in lines:
                     fd.write(line)

{sandbox_cli-0.2.41 → sandbox_cli-0.2.43}/sandbox_cli/utils/unpack/plugins/sort_by_plugins.py

@@ -23,6 +23,6 @@ class SortByPlugins(BasePlugin):
                 plugins[data["plugin"]].append(line)
 
         for plugin, lines in plugins.items():
-            with open(f"{file}.{plugin}", "w", encoding="utf-8") as fd:
+            with open(base_path / f"{plugin}.log", "w", encoding="utf-8") as fd:
                 for line in lines:
                     fd.write(line)