HXSecurity/DongTai-agent-java

Issues

• [Agent compatibility]: javaweb-vuln靶场中 json来源的漏洞无法检测

  #602 opened a year ago by johnniesong
  1

• [BUG]: JDK17 exist Reflect Problem

  #613 opened a year ago by RTxin
  1

• [BUG]: XXEChecker对Unmarshaller无效

  #610 opened a year ago by RTxin
  1

• [Agent compatibility]: 反射型xss某些场景不能被检测到

  #566 opened a year ago by ww1024
  8

• [Bug]: POST出现服务器端请求伪造漏洞,位置:COOKIE

  #564 opened a year ago by PhuketIsland
  6

• [Bug]: POST出现服务器端请求伪造漏洞,位置:HEADER

  #538 opened 2 years ago by PhuketIsland
  4

• [Bug]: fastjson已经是1.2.83版本了，洞态显示请求头有反序列化漏洞

  #533 opened 2 years ago by PhuketIsland
  6

• [Bug]: 被测应用服务器cpu2核会导致cpu爆满

  #478 opened 2 years ago by jeansgit
  1

• [Bug]: 洞态无法加载agent

  #369 opened 2 years ago by G0mini
  2

• [Feature]: Java Agent是否可以增加Tomcat7的兼容

  #375 opened 2 years ago by KKhit
  1

• [Bug]: 装完javaagent之后cpu飙到400%

  #512 opened 2 years ago by PhuketIsland
  2

• ssrf sink点缺失

  #525 opened 2 years ago by mdkk
  1

• SSRFSourceCheck的addSourceType方法只会返回false

  #522 opened 2 years ago by mdkk
  4

• The startup has failed due to a discrepancy between the agent and server versions

  #497 opened 2 years ago by jiaorujia
  1

• [Bug]: 触发性能阈值后卸载不彻底，导致大量报错

  #399 opened 2 years ago by fengzhouc
  1

• dubbo远程方法调用检测场景下存在污点丢失问题

  #373 opened 2 years ago by Maskhe
  1

• [Error]: Content-Length header already present

  #505 opened 2 years ago by Bmebme
  1

• java agent内存溢出

  #371 opened 2 years ago by u-raison
  1

• java agent自动部署时没有应用漏洞 agent安装时只存在一个硬编码漏洞

  #438 opened 2 years ago by bbg8cody
  1

• [Bug]: SpringBoot使用undertow容器会引发请求失败错误

  #370 opened 2 years ago by wayswei
  0

• [Bug]: install成功后，原服务无法正常工作

  #374 opened 2 years ago by Bmebme
  1

• JAVA agent 部署之后，项目的groovy脚本初始化异常

  #465 opened 2 years ago by jieyunhu
  2

• Agent ips are not displayed accurately on the server side

  #421 opened 2 years ago by Windy-Yang
  1

• dongtai-agent-java 服务端使用resttemplate.exchange 访问其他服务，无法访问

  #437 opened 2 years ago by xiaofeng2014
  3

• [Bug]: transform class org/eclipse/jetty/http/HttpURI$State failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager

  #422 opened 2 years ago by onesecurity
  1

• [Bug]: agent在wndows下运行时，无法注册，报错

  #403 opened 2 years ago by a1576471428
  1

• [Bug]: /openapi/api/v1/agent/register failed, Exception: javax.net.ssl.SSLHandshakeException:

  #402 opened 2 years ago by onesecurity
  4

• API响应时间阈值

  #393 opened 2 years ago by Bidaya0
  0

• [Bug]: 部分Agent上报信息报错

  #378 opened 2 years ago by onesecurity
  2

• [Bug]: 1.4.0 java agent arg : dongtai.response.length causes http response body encode error

  #372 opened 3 years ago by savior325
  1

• [BUG] The detection rate of vulnerability in shooting openrasp is low

  #282 opened 3 years ago by Nizernizer
  0

• [Bug]: Java Agent 在 Spring WebFlux 和 Tomcat 组合下会导致 HTTP 请求不输出结果

  #220 opened 3 years ago by rjsoftcode
  1

• [Feature] Support KRPC

  #266 opened 3 years ago by Nizernizer
  0

• Feature: support gRPC

  #267 opened 3 years ago by exexute
  0

• [Bug] Modify prompt logs when user permissions are insufficient

  #264 opened 3 years ago by Nizernizer
  0

• [Feature] Add parameter dongtai.server.package : whether to download agent from Server side

  #270 opened 3 years ago by Nizernizer
  0

• [Feature] Add attach parameter

  #255 opened 3 years ago by Nizernizer
  1

• [Feature]: Attach方式部署支持参数配置

  #223 opened 3 years ago by Ch35Tnut
  1

• [Feature]: 支持单一 JAR 文件应用中组件的提取

  #238 opened 3 years ago by tanjelly
  0

• [Bug] Weblogic Server start failed

  #252 opened 3 years ago by Nizernizer
  1

• [Bug]: com.secnium.iast.core.report.ErrorLogReport#sendErrorLog(java.lang.Throwable) appears recursive.

  #236 opened 3 years ago by Nizernizer
  1

• [Bug] Parameter `response.length` Invalid

  #250 opened 3 years ago by Nizernizer
  0

• [Bug] SLF4J warn log.

  #248 opened 3 years ago by Nizernizer
  0

• Add agent, some pages cannot be loaded

  #246 opened 3 years ago by exexute
  0

• `java -javaagent:agent.jar -version` causes a deadlock

  #239 opened 3 years ago by exexute
  1

• [FEATURE] Performance Optimization

  #228 opened 3 years ago by Nizernizer
  0

• add ThreadPool for upload report

  #234 opened 3 years ago by exexute
  0

• upgraded `iast-*` to `dongtai-*`, remove reflect method call

  #232 opened 3 years ago by exexute
  0

• [BUG] The agent will cause longer response times when collecting API data

  #226 opened 3 years ago by Nizernizer
  0

• Enhance: Remove namespace in iast-core and iast-inject module

  #219 opened 3 years ago by exexute
  0