Sandboxie Plus (open source fork of Sandboxie)

[harlan4096]

New Update Minor improvements

Download: https://github.com/sandboxie-plus/Sandbo...ag/v1.14.9

Added

• added alternative default sandbox paths to the box wizard:
  • \??\%SystemDrive%\Sandbox\%USER%\%SANDBOX%
    
  • \??\%SystemDrive%\Sandbox\%SANDBOX%
    
  • \??\%SystemDrive%\Users\%USER%\Sandbox\%SANDBOX%
    
• added Sandbox Import dialog
  

Changed

• sandbox root selection in global settings is now a combo box
  

Fixed

• fixed Exported encrypted archive files cannot be unpacked by Sandboxie #4229
  

[Kool]

Release v1.14.10 / 5.69.10

 
[1.14.10 / 5.69.10] - 2024-10-03Added

• added Ability to import encrypted archive files directly #4255
  

Changed

• when the sbiesvc.exe worker crashes it now can automatically be restarted.
  

Fixed

• fixed issue with sandbox path entry combo boxes
  
• fixed Proxy for GetRawInputDeviceInfoW() causes a buffer overflow #4267 (thanks marti4d)
  

Download : https://github.com/sandboxie-plus/Sandboxie/releases

[Kool]

Release v1.15.0 / 5.70.0
 
This build of Sandboxie Plus version 1.15.0 introduces several impactful enhancements, focusing on user-specific operations and security improvements. A notable addition is the new user proxy mechanism, which enables user-specific operations, as well as support for Encrypting File System (EFS) through the user proxy. By adding the configuration 'EnableEFS=y' to the sandbox, users can now leverage EFS within the sandbox environment. Furthermore, a breakout document feature has been implemented, allowing users to specify certain file paths and extensions that can escape the sandbox. However, users are warned to avoid paths terminated with wildcards as they may open up security vulnerabilities, enabling the execution of malicious scripts outside of the sandbox.
In terms of security, a new mechanism has been added to restrict access to box folders, allowing only the user who created the folder to access it by setting 'LockBoxToUser=y'. Additionally, users now have the option to retain the original Access Control Lists (ACLs) on sandboxed files or modify them, providing more flexibility in access management, this may introduce compatibility issues though. Another new feature is the 'OpenWPADEndpoint=y' option, which allows to open system proxy configuration access. On the technical side, improvements have been made to the startup processes for SandboxieCrypto and Sandboxed RPCSS, as well as refinements to the user interface controls.
These updates mark a significant step forward in both the security and functionality of Sandboxie Plus.

Download : Sandboxie-Plus-x64-v1.15.0.exe

Download : Sandboxie-Plus-x86-v1.15.0.exe

Release channel : https://github.com/sandboxie-plus/Sandboxie/releases

[Kool]

Release v1.15.1 / 5.70.1

 
Release NotesThis build fixes a couple issues with 1.15.0 and updates compatibility to the latest windows insider build.

 
Fixed

• fixed Sandboxie crypto fails to start in red boxes
  
• fixed issue with breakout process when using explorer.exe
  

Changed

• validated compatibility with Windows build 27729 and updated DynData
  
• updated Templates.ini to grant access to the Multimedia Class Scheduler Service #4312
  
• updated Inno Setup to version 6.3.3 #4020
  

Release Channel

Download

[Kool]

Release v1.15.2 / 5.70.2

 
Added

• added "NetworkAdapterMAC=0,AA-BB-CC-DD-EE-FF" to set MAC address for each box (thanks Yeyixiao)
  
• added "DiskSerialNumber=DeviceName,1234-ABCD" to set Disk Serial Number for indivdal box (thanks Yeyixiao)
  
• added the ability to hide certificates in editbox in Global Setting (idea by Yeyixiao)
  
• added Opening a program in several sandboxes at once #4231
  
• added "Description" field inside the sandbox settings #4243
  
• added "NotifyMsiInstaller=y" enabled by default to display message SBIE2194 when an MSI installer is run in a box without the recommended exemptions #4330
  • SBIE2194: MSI installer requires 'MsiInstallerExemptions=y' option to be set in the ini to be able to work correctly, however this option weakens the isolation.
    
• added option to hide installed programs #4139
  
• added Hide Tray Icon #4075
  
• added improved trace logging filtering #4338
  
• added EventLog monitoring for SbieMessages #4113
  • add 'LogMessageEvents=y' to the global settings to log all sbie events to the system event log
    

Fixed

• fixed Sign the .tmp file that gets dropped when installing or updating Sandboxie Plus #2643 #4343
  
• fixed issue with DLL unloading
  
• fixed Files Resource Access - Browse for Folder - allows access to excluded folders #4007
  
• fixed "ForceDisableAdminOnly" is weird #4233
  
• fixed deadlock on no op condition when renaming file or folder #4304
  
• fixed Could not move file or folder #4329
  
• "Run Sandboxed" from the quick-previewer should have only one option #4339
  
• Sandboxie causing Firefox Nightly crashes #4183
  

Changed

• validated compatibility with Windows build 27749 and updated DynData
  
• when running via drag and drop now the apps parent folder is used as working dir #4073
  

Release channel

Download

[harlan4096]

We are excited to announce the latest updates to Sandboxie Plus 1.15.3, these updates introduce impactful new features, significant improvements, and critical fixes to enhance user experience, customization, and security.

For enhanced security, this release includes a mechanism to restrict access to sandbox folders to the user who created them. Users can also choose to retain or modify Access Control Lists (ACLs) on sandboxed files, providing more flexibility in access management, though this may introduce compatibility issues in some cases. Importantly, this update addresses a security vulnerability documented under CVE-2024-49360.

This release also includes the introduction of a user proxy mechanism, enabling user-specific operations, along with support for the Encrypting File System (EFS). By adding the configuration EnableEFS=y to sandbox settings, users can now utilize EFS within the sandbox environment. The new OpenWPADEndpoint=y option allows access to system proxy configuration, expanding sandbox functionality. Additionally, trace logging filtering has been enhanced, and by enabling LogMessageEvents in global settings, all Sandboxie events can now be logged directly to the Windows Event Log for better tracking and analysis.

Technical improvements in this release include refinements to the startup processes for SandboxieCrypto, ensuring smoother operations. Applications launched via drag-and-drop now consistently use their parent folder as the working directory, improving user experience. Compatibility with Windows build 27749 has been validated to ensure a seamless experience for users. Additionally, crashes affecting Firefox Nightly have been resolved, ensuring better browser compatibility.

We thank our contributors and users for their invaluable feedback and support. Update now to take advantage of the latest features, enhancements, and security improvements in Sandboxie Plus.

Added

• improved ini section editor, it now supports search Ctrl+F
  
• added SBIE1321 to log all force process events, can be enabled with "NotifyForceProcessEnabled=y", Improves #4113
  

Changed

• improved support notification
  

Fixed

• fixed issues with SSL on ARM64 platform, breaking updater and cert retrieval
  

Download: https://github.com/sandboxie-plus/Sandbo...ag/v1.15.3

[harlan4096]

Sandboxie Plus 1.15.4 / Classic 5.70.4:

Homepage
Changelog
Download Page
Download | 32-Bit Classic
Download | 64-Bit Classic
Download | 32-Bit Plus
Download | 64-Bit Plus

[Kool]

Sandboxie 1.15.5/5.70.5

Release Notes

This release introduces several important fixes to enhance functionality and improve user experience.
A new debugging feature has been added with the inclusion of the HookTrace=y setting, which provides enhanced debugging capabilities for API hooking.
The Sandboxie-Plus data folder has been relocated from C:\Users[User]\AppData\Local\Sandboxie-Plus to C:\Users[User]\AppData\Local\Xanasoft\Sandboxie-Plus. This change is automatic for users upgrading to this version, but those downgrading to an older version will need to move the folder back manually. Additionally, some options in the box context menu have been re-ordered for improved usability.
This update resolves several critical issues and enhances overall stability. The crash triggered by selecting "Run as Administrator" in the non-advanced view has been fixed, along with a crash caused by missing IP definitions in DNS filtering (#3600, #4475).
Compatibility with ARM64 systems has been significantly improved, addressing issues such as x64 executables failing to run on Windows 11 ARM64 (#4422, #4415) and resolving compatibility MSEdge and explorer problems with Windows 10 ARM64.
Several user experience issues have also been addressed. These include process self-termination failures, infinite loops when Gui_ConnectConsole waited for SbieSvc.exe to quit (#4462), and missing program icons when paths with spaces were specified in the RunCommand setting (#4416). Additional fixes include template scanning reliability (#4401) and the proper display of credential dialogs for RDP connections in encrypted boxes (#4389).
This update aims to provide a smoother, more reliable experience across supported platforms, particularly for users on ARM64 systems.

Known Issues

• Setting migration fails under certain conditions resulting in the UI configuration being reset to default. You can close the UI and move the files manually C:\Users[User]\AppData\Local\Sandboxie-Plus to C:\Users[User]\AppData\Local\Xanasoft\Sandboxie-Plus this issue will be fixed in 1.15.6
  

For a full list of changes please review the change log.

Anouncement

Additionally, I am pleased to announce that TaskExplorer, a powerful system exploration tool first launched in 2019, has been revitalized and is now production-ready thanks to its fully signed driver. With a host of new features and enhancements, including advanced security options, expanded data columns, and improved usability, TaskExplorer is an ideal choice for both casual users and IT professionals. For more details and to download the latest release, visit: TaskExplorer on GitHub.


Homepage
Changelog
Download Page
Download | 32-Bit Classic
Download | 64-Bit Classic
Download | 32-Bit Plus
Download | 64-Bit Plus

[harlan4096]

Release v1.15.6 / 5.70.6 Latest​This update introduces improvements to stability, compatibility, and debugging tools, addressing several reported issues affecting various applications and sandbox configurations.

This release also includes a rework of CreateDesktop handling, which addresses various issues encountered with browsers and browser-based applications when running within Sandboxie. These changes should result in improved stability and functionality for affected software. Furthermore, a missing hook for NtQueryInformationByName has been implemented to enhance overall system compatibility.

Several bugs have been resolved in this update. An issue where the Sandboxie Plus data folder was not functioning correctly after updating to version 1.15.5 has been fixed. Additionally, crashes affecting Adobe Acrobat Reader when used within an Application Compartment box have been resolved.

Compatibility issues with Viber have also been fixed, ensuring that the software no longer crashes upon launch within Sandboxie. Users of qutebrowser will benefit from a fix that now allows the browser to run properly in a sandboxed environment. A problem preventing applications from launching when ApiTrace was enabled in version 1.15.5 has also been resolved. Lastly, a critical fix has been implemented to prevent blue screen errors (BSoD) when using OpenWndStation=y on Windows 10 with applications that call CreateDesktopW/A.

This release provides key stability and usability improvements for Sandboxie Plus, ensuring better compatibility across a range of applications.

For a full list of changes please review the change log.

Anouncement​Additionally, I am pleased to announce that TaskExplorer, a powerful system exploration tool first launched in 2019, has been revitalized and is now production-ready thanks to its fully signed driver. With a host of new features and enhancements, including advanced security options, expanded data columns, and improved usability, TaskExplorer is an ideal choice for both casual users and IT professionals. For more details and to download the latest release, visit: TaskExplorer on GitHub.

https://github.com/sandboxie-plus/Sandbo...ag/v1.15.6