Sandboxie Plus (open source fork of Sandboxie)

[harlan4096]

Sandboxie Plus 1.12.9 / Classic 5.67.9:

Homepage
Changelog
Download Page
Download | 32-Bit Classic
Download | 64-Bit Classic
Download | 32-Bit Plus
Download | 64-Bit Plus

[harlan4096]

This release advances the 1.13.x build line from its experimental pre release stage to stable release, it adds significant enhancements to the hooking mechanism associated with SCM-related functions, which enhances compatibility with newer versions of Windows. The revised hooking mechanism now supports API call tracing without the necessity for LogAPI.dll.

Additionally, this update introduces a feature aimed at increasing the privacy of encrypted boxes. When the option IsProtectScreen=y is set, windows of processes operating within boxes with this option enabled will be obscured during screenshot capture or recording, enhancing user privacy.

The release also enhances the compatibility of privacy-focused boxes with Windows Explorer, resolving issues related to the Recycle Bin. To this end a new default compatibility template has been introduced, which uses a new functionality of the wildcard pattern mechanism. Now the "**" pattern is supported, which acts as a placeholder for an arbitrary string without including the backslash ("") character, thus allowing users to apply wildcards to exactly one directory level, unlike the single asterisk ("*") which applies to multiple levels.

The update also introduces compatibility with Windows 11 insider builds up to 26080.

And modifies how the driver manages offset-dependent kernel object changes, the new method now enables loading an offset configuration directly from the registry, allowing offsets to be updated without the need to rebuild the driver.

To increase system stability, Sandboxie will cease using outdated known offsets for new, unrecognized kernel builds. This change applies except in cases where the PC is part of the Windows Insider Program.

In such instances, instead of using outdated offsets, the software will disable token-based security isolation and will display the warning SBIE1207, indicating that it has reverted to an less secure fallback mode of operation.

While this build has been tested and appears functional, users may encounter minor issues in certain edge cases.

Download: https://github.com/sandboxie-plus/Sandbo...ag/v1.13.3
Full Changelog: https://github.com/sandboxie-plus/Sandbo...2024-02-10

[harlan4096]

Sandboxie Plus 1.13.4 / Classic 5.68.4:

Homepage
Changelog
Download Page
Download | 32-Bit Classic
Download | 64-Bit Classic
Download | 32-Bit Plus
Download | 64-Bit Plus

[harlan4096]

Sandboxie-Plus 1.14.3:

In the 1.14.x release line, several significant updates and fixes have been introduced to enhance the functionality and performance of sandboxed processes. These enhancements are aimed at providing users with a more robust and versatile experience, ensuring smoother and more secure operations.

One of the major updates is the introduction of the ability to force sandboxed processes to use a predefined SOCKS5 proxy. This feature allows for more controlled and secure network interactions. Additionally, the capability to intercept DNS queries for logging or redirection has been added, providing administrators with greater oversight and flexibility in managing network traffic. Notably, support for SOCKS5 proxy authentication based on RFC1928 has been incorporated, thanks to Deezzir's contributions, who also developed a Test Dialog UI for the SOCKS5 proxy. It is important to note that utilizing the Proxy and DNS features requires an advanced type certificate.

The release also introduces a new command line option, /fcp /force_children, to the start.exe utility. This option enables the initiation of a program outside the sandbox while ensuring that all its child processes are sandboxed, enhancing security without compromising flexibility. Additionally, a new feature allows for the limitation of memory usage and the number of processes within a single sandbox through job objects. This was made possible by Yeyixiao's contribution and can be configured using "TotalMemoryLimit" for overall sandbox memory limits and "ProcessMemoryLimit" for individual process limits.

Further improvements include the addition of a new "Sandboxie\All Sandboxes" SID to the token creation process, which fundamentally alters the token creation mechanism. This feature can be activated with the "SandboxieAllGroup=y" setting. Users can now also configure the "EditAdminOnly=y" setting on a per-box basis, providing more granular control over administrative permissions. Additionally, a new UI option allows users to start unsandboxed processes while forcing child processes into a sandbox, and the "AlertBeforeStart" option prompts a warning before launching a new program into the sandbox if the initiating program is not a Sandboxie component.

Moreover, the update introduces a mechanism to block unsafe calls via RPC Port message filtering and a template to prevent sandboxed processes from accessing system information through WMI. A new "Job Object" Options page has been added, consolidating all job object-related options for easier management. Several critical fixes have been implemented, including resolving Chrome printing problems and various bugs affecting sandbox properties and program launching. Compatibility with Steam running sandboxed has also been improved.

Compatibility with Windows build 26217 has been validated, and dynamic data has been updated accordingly. Finally, an issue with an early batch of Large Supporter certificates has been resolved, ensuring smoother operation and fewer disruptions. These updates collectively enhance the security, performance, and usability of sandboxed processes, providing users with a more reliable and efficient environment.

Download: Release v1.14.3 / 5.69.3 · sandboxie-plus/Sandboxie

This build is considered final, it will be distributed instantly in the preview update channel, when no issues materialize it will be published in the stable channel in a few days and on the website.

https://www.wilderssecurity.com/threads/...-3.454463/

[damien76]

I have been reading about this 'Plus' edition and I see that is different from the old.SBIE. Mayve someone eho has been using Sandboxie Plus can make a short review here and include some scenarios or setup for banking or vpn?

This will be great for those that are interested but not quite decided yet...

[harlan4096]

I'm still using SB Classic, SB Plus it's paid...

[damien76]

I'm still using SB Classic, SB Plus it's paid...

I have forgotten to.use it already and it was way back when I still have a license of the old SBIE. SOPHOS has taken over it yes? It has been so long and even setting it up I forgot. Perhaps someone can review or post some settings? I dunno if jasonX can but he isn't reply...

[jasonX]

@damien76,
So sorry I am not using SBIE here. I have VoodooShield installed as of the moment. I am trying to simplify my setup as of the moment. I did use SBIE before but went to HMPA and then returned to VS.

[harlan4096]

Sandboxie-Plus 1.14.7

In this release, we have introduced several new features and improvements that significantly enhance the user experience and provide greater flexibility in system operations. Most notably, users can now effortlessly obtain free 10-day evaluation certificates directly from the support settings page within the UI. These certificates are hardware-locked to the user's machine and allow for up to three requests per hardware ID, making it easier to test and evaluate the system with minimal setup.

Furthermore, new options have been added to increase privacy and security, such as the ability to modify the Windows Product ID in the registry to a random value and to return random values for disk serial numbers and network adapter MAC addresses when queried by applications. These features add an extra layer of obfuscation to protect against unwanted system identification.

Other enhancements include the ability to terminate all processes when Sandman exits, a new option for configuring DropConHostIntegrity directly from the UI, and an improved shared template feature in the New Box Wizard. The number of available shared templates has increased to 10, and the template names can now be easily updated by adjusting the corresponding settings.

In terms of fixes, we have addressed several key issues, including improving the "HideDiskSerialNumber" functionality to prevent application crashes, correcting the format of encrypted proxy passwords, and resolving an issue related to the "NtQueryDirectoryObject" function to avoid easy sandbox detection. These updates contribute to a more stable and secure environment for users.

Release note by ChatGPT

Download: https://github.com/sandboxie-plus/Sandbo...ag/v1.14.7

Added

• added "RandomRegUID"(bool) which could modify Windows Product Id in the registry to a rand value
  
• added "HideDiskSerialNumber"(bool) return random value when applications tries to get disk serial number
  
• added option to get free 10 days evaluation certificates from the support settings page.
  • The evaluation certificates are node lcoked to the HwID and for each HwID up to 3 certs can be requested.
    
• added "TerminateWhenExit"(bool,in Sandboxie-Plus.ini) to terminate all processes when Sandman exits for #4171
  
• added a question box to ask for Sandbox Import Location for #4169
  
• added UI option to configure DropConHostIntegrity
  
• added "HideNetworkAdapterMAC"(bool) return random value when applications tries to get network adapter mac address
  
• added shared template selection to the Shared Template feature in the advanced options of the New Box Wizard #4199
  • The number of available shared templates has been increased to 10
    
  • To update the names displayed in the list, simply adjust the "Tmpl.Title" setting within each template
    

Fixed

• fixed and improved HideDiskSerialNumber option causes applications to crash #4185
  
• fixed encrypted proxy password was improperly formatted #4197
  
• fixed NtQueryDirectoryObject (should not return "STATUS_MORE_ENTRIES") as this is a EASY Sandbox Detection #4201
  

The release is set in the preview updater channel today and will be set in the stable channel in a few days.

[harlan4096]

In this release, we have introduced several new features and improvements that significantly enhance the user experience and provide greater flexibility in system operations. Most notably, users can now effortlessly obtain free 10-day evaluation certificates directly from the support settings page within the UI. These certificates are hardware-locked to the user's machine and allow for up to three requests per hardware ID, making it easier to test and evaluate the system with minimal setup.

Furthermore, new options have been added to increase privacy and security, such as the ability to modify the Windows Product ID in the registry to a random value and to return random values for disk serial numbers and network adapter MAC addresses when queried by applications. These features add an extra layer of obfuscation to protect against unwanted system identification.

Other enhancements include the ability to terminate all processes when Sandman exits, a new option for configuring DropConHostIntegrity directly from the UI, and an improved shared template feature in the New Box Wizard. The number of available shared templates has increased to 10, and the template names can now be easily updated by adjusting the corresponding settings.

In terms of fixes, we have addressed several key issues, including improving the "HideDiskSerialNumber" functionality to prevent application crashes, correcting the format of encrypted proxy passwords, and resolving an issue related to the "NtQueryDirectoryObject" function to avoid easy sandbox detection. These updates contribute to a more stable and secure environment for users.

Release note by ChatGPT

Download: Release v1.14.8 / 5.69.8 · sandboxie-plus/Sandboxie
Download: Release v1.14.7 / 5.69.7 · sandboxie-plus/Sandboxie

Added

• added "RandomRegUID"(bool) which could modify Windows Product Id in the registry to a rand value
  
• added "HideDiskSerialNumber"(bool) return random value when applications tries to get disk serial number
  
• added option to get free 10 days evaluation certificates from the support settings page.
  • The evaluation certificates are node lcoked to the HwID and for each HwID up to 3 certs can be requested.
    
• added "TerminateWhenExit"(bool,in Sandboxie-Plus.ini) to terminate all processes when Sandman exits for #4171
  
• added a question box to ask for Sandbox Import Location for #4169
  
• added UI option to configure DropConHostIntegrity
  
• added "HideNetworkAdapterMAC"(bool) return random value when applications tries to get network adapter mac address
  
• added shared template selection to the Shared Template feature in the advanced options of the New Box Wizard #4199
  • The number of available shared templates has been increased to 10
    
  • To update the names displayed in the list, simply adjust the "Tmpl.Title" setting within each template
    

Fixed

• fixed and improved HideDiskSerialNumber option causes applications to crash #4185
  
• fixed encrypted proxy password was improperly formatted #4197
  
• fixed NtQueryDirectoryObject (should not return "STATUS_MORE_ENTRIES") as this is a EASY Sandbox Detection #4201
  

The release is set in the preview updater channel today and will be set in the stable channel in a few days.