Network & HTTP gate
19 allow
18 ask
1 block
Outbound network operations. GET requests and head checks pass through; everything mutating, downloading, or interactive pauses for approval. The reverse-shell variant of netcat (nc -e) is the one hard block this gate owns.
Showing all 38 rules.
Blocked · reverse shell
rules/network.toml#block 1 patternsnc -e
Block
netcat
-e blocked: connects a remote process to a shell on this host (classic reverse shell). No legitimate use in an agent workflow.Allowed · read-only requests
rules/network.toml#allow 19 patternscurl --version
Allow
Prints the curl version and supported protocols. Read-only.
curl -h
Allow
Shows curl usage help. Read-only.
curl --help
Allow
Shows curl usage help. Read-only.
curl -I --head
Allow
HEAD request. Returns response headers only, no body. Read-only.
http --version
Allow
Prints the HTTPie client version. Read-only.
http --help
Allow
Shows HTTPie usage help. Read-only.
http GET
Allow
HTTPie GET requests, including URL-only invocations that default to GET.
check_httpie routes POST/PUT/DELETE/PATCH to ask.nmap --version
Allow
Prints the nmap version and build info. Read-only; sends no probes.
nmap -V
Allow
Prints the nmap version and build info. Read-only; sends no probes.
nmap --help
Allow
Shows nmap usage help. Read-only; sends no probes.
nmap -h
Allow
Shows nmap usage help. Read-only; sends no probes.
socat --version
Allow
Prints the socat version and feature list. Read-only; opens no connection.
socat -V
Allow
Prints the socat version and feature list. Read-only; opens no connection.
socat --help
Allow
Shows socat usage help. Read-only; opens no connection.
socat -h
Allow
Shows socat usage help. Read-only; opens no connection.
wget --version
Allow
Prints the wget version and build info. Read-only.
wget -h
Allow
Shows wget usage help. Read-only.
wget --help
Allow
Shows wget usage help. Read-only.
wget --spider
Allow
Spider mode. Checks that a URL resolves; does not download. Read-only.
Asks first · mutations and inbound
rules/network.toml#ask 18 patternshttp POST
Ask
Sends an HTTP POST request. Mutating method; server-side effects depend on the endpoint.
http PUT
Ask
Sends an HTTP PUT request. Typically replaces a resource at the target URL.
http DELETE
Ask
Sends an HTTP DELETE request. Typically removes the resource at the target URL.
http PATCH
Ask
Sends an HTTP PATCH request. Typically applies a partial update to the resource at the target URL.
nc -l
Ask
Opens a listening port. The
-e flag (reverse shell) is blocked separately; verify firewall scope and that you intend to accept inbound connections.nc
Ask
Opens a netcat connection to the given host/port. Sends/receives raw bytes; verify both endpoints.
nmap
Ask
Sends port-scan probes to remote hosts. Can be slow on large ranges and is logged by most network security tools.
rsync
Ask
Synchronizes files between source and destination.
--delete removes files at the destination not present at source; preview with -n first.scp
Ask
Copies files over SSH. Overwrites the destination by default; can transfer in either direction.
sftp
Ask
Opens an interactive SFTP session for transferring files over SSH.
socat
Ask
socat sets up bidirectional I/O between two endpoints (network, file, process). Confirm both endpoints; can be used to tunnel out of restricted environments.
ssh
Ask
Opens an SSH connection. Commands executed on the remote bypass local tool-gates; treat the remote as a separate trust boundary.
telnet
Ask
Opens a cleartext telnet session to a host/port. No encryption; credentials sent in the clear.
wget -O --output-document -P --directory-prefix
Ask
Downloads a file from the given URL. Writes to disk;
-O chooses the output name, -P chooses the directory.wget -r --recursive
Ask
Recursively downloads pages and linked resources. Can fetch a large amount of data; control depth with
-l.wget -m --mirror
Ask
Mirrors a site to local disk. Implies infinite recursion, timestamping, and link conversion.
wget --post-data --post-file
Ask
Sends a POST request with the given body. Mutating HTTP method; server-side effects depend on the endpoint.
wget
Ask
Downloads the given URL to the current directory by default. Writes to disk.
Pipe-to-shell lives in the pre-AST pass, not here. A pattern like curl https://… | bash is denied before any program-level gate runs. The network gate only sees the curl in isolation; the shell pipe is caught upstream by the raw-string scanner.