DongTai Agent Java Versions Save

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

v1.9.0

1 year ago

What's Changed

1.9.0-beta1 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/483
feat: add beta、develop by @tscuite in https://github.com/HXSecurity/DongTai-agent-java/pull/486
feat: add beta、develop by @tscuite in https://github.com/HXSecurity/DongTai-agent-java/pull/488
fix fastjson class fetch by class loader by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/485
fixes JSR/RET in old jar by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/489
fixes ignore same propagator taint when taint range was changed by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/490
change dast header key by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/491
Fix/agent actual state update after uninstall by cli by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/492
change dast mark header by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/493
fixes character encoding error when collect form urlencoded post body by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/496
add logger remote config by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/494
add ignore internal and blacklist policy by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/495
remove hook blacklist org/apache/catalina/core/ApplicationPart by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/498
add taint normalize test cases by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/499
set class version when visit class by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/500
ignore the collection of propagators when the taint has not change by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/501
release v1.9.2-beta2 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/502
better compatible for log error code by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/504
bump version to 1.9.0 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/506

Full Changelog: https://github.com/HXSecurity/DongTai-agent-java/compare/v1.8.2...v1.9.0

v1.9.0-beta2

1 year ago

What's Changed

feat: add beta、develop by @tscuite in https://github.com/HXSecurity/DongTai-agent-java/pull/486
feat: add beta、develop by @tscuite in https://github.com/HXSecurity/DongTai-agent-java/pull/488
fix fastjson class fetch by class loader by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/485
fixes JSR/RET in old jar by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/489
fixes ignore same propagator taint when taint range was changed by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/490
change dast header key by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/491
Fix/agent actual state update after uninstall by cli by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/492
change dast mark header by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/493
fixes character encoding error when collect form urlencoded post body by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/496
add logger remote config by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/494
add ignore internal and blacklist policy by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/495
remove hook blacklist org/apache/catalina/core/ApplicationPart by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/498
add taint normalize test cases by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/499
set class version when visit class by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/500
ignore the collection of propagators when the taint has not change by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/501
release v1.9.2-beta2 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/502

Full Changelog: https://github.com/HXSecurity/DongTai-agent-java/compare/v1.9.0-beta1...v1.9.0-beta2

v1.9.0-beta1

1 year ago

What's Changed

1.9.0-beta1 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/483

Full Changelog: https://github.com/HXSecurity/DongTai-agent-java/compare/v1.8.2...v1.9.0-beta1

v1.8.2

1 year ago

What's Changed

fixes spring api fetch exception cause by controller with scope by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/439
feat: update action by @tscuite in https://github.com/HXSecurity/DongTai-agent-java/pull/440
feat: update action by @tscuite in https://github.com/HXSecurity/DongTai-agent-java/pull/442
feat: update action by @tscuite in https://github.com/HXSecurity/DongTai-agent-java/pull/443
add ziroom blacklist by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/441
fixes engine running state check by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/444
ignore invalid http request meta by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/445
fixes engine running state by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/446
ignore spring mvc api collect by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/447
change catch Exception to Throwable by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/448
Feature/multi servive trace by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/449
bump version to 1.8.2-beta by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/450
http service request: add traceId and url source to okhttp client by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/451
fixes some uninstall issue by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/452
add tracing java net url header for http service by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/453
http service: add header and body tracing to okhttp by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/454
Feature/http service apache http client by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/455
fixes servlet response flush by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/456
fixes http client post body charset by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/457
fixes custom model track: servlet request/response implementation by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/458
add app template property by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/459
bypass interfaces when transform classes by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/460
logging: add error codes by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/461
bypass agent state change after uninstall by cli by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/462
add agent version to manifest by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/463
fixes replay request header and body by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/464
bump version to 1.8.2-beta2 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/466
Feature/refactor http request response collection by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/467
fixes unkonwn taing range calculate by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/468
fixes ibm SRTServletRequest getParameterNames() track in source node by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/469
fixes exception cause by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/470
fixes request body fetch by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/471
fixes xxe check reflect exception catch by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/472
fixes taint range calculate for StringWriter.write() char array by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/473
fixes HttpServletRequest.getParameter() xss taint tag by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/474
Fix/request response body fetch by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/475
add undertow servlet ServletPrintWriter response fetch by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/476
bump version to 1.8.2-beta3 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/477
add parent agent id header for outgoing requests by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/480
fixes scanner hook blacklist by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/481
bump version to 1.8.2 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/482

Full Changelog: https://github.com/HXSecurity/DongTai-agent-java/compare/v1.8.1...v1.8.2

v1.8.2-beta3

1 year ago

What's Changed

Feature/refactor http request response collection by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/467
fixes unkonwn taing range calculate by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/468
fixes ibm SRTServletRequest getParameterNames() track in source node by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/469
fixes exception cause by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/470
fixes request body fetch by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/471
fixes xxe check reflect exception catch by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/472
fixes taint range calculate for StringWriter.write() char array by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/473
fixes HttpServletRequest.getParameter() xss taint tag by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/474
Fix/request response body fetch by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/475
add undertow servlet ServletPrintWriter response fetch by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/476
bump version to 1.8.2-beta3 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/477

Full Changelog: https://github.com/HXSecurity/DongTai-agent-java/compare/v1.8.2-beta2...v1.8.2-beta3

v1.8.2-beta2

1 year ago

What's Changed

http service request: add traceId and url source to okhttp client by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/451
fixes some uninstall issue by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/452
add tracing java net url header for http service by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/453
http service: add header and body tracing to okhttp by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/454
Feature/http service apache http client by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/455
fixes servlet response flush by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/456
fixes http client post body charset by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/457
fixes custom model track: servlet request/response implementation by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/458
add app template property by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/459
bypass interfaces when transform classes by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/460
logging: add error codes by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/461
bypass agent state change after uninstall by cli by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/462
add agent version to manifest by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/463
fixes replay request header and body by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/464
bump version to 1.8.2-beta2 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/466

Full Changelog: https://github.com/HXSecurity/DongTai-agent-java/compare/v1.8.2-beta...v1.8.2-beta2

v1.8.2-beta

1 year ago

What's Changed

fixes spring api fetch exception cause by controller with scope by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/439
feat: update action by @tscuite in https://github.com/HXSecurity/DongTai-agent-java/pull/440
feat: update action by @tscuite in https://github.com/HXSecurity/DongTai-agent-java/pull/442
feat: update action by @tscuite in https://github.com/HXSecurity/DongTai-agent-java/pull/443
add ziroom blacklist by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/441
fixes engine running state check by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/444
ignore invalid http request meta by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/445
fixes engine running state by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/446
ignore spring mvc api collect by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/447
change catch Exception to Throwable by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/448
Feature/multi servive trace by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/449
bump version to 1.8.2-beta by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/450

Full Changelog: https://github.com/HXSecurity/DongTai-agent-java/compare/v1.8.1...v1.8.2-beta

v1.8.1

1 year ago

What's Changed

fix class retransform after attach by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/423
fixes crypto weak randomness scan for SecureRandom by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/424
add stack deny list for sink node by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/425
fixes math random check by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/427
Feature/taint tag by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/428
fixes parse source custom model IllegalAccessException by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/429
add agent uuid by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/430
Fix fallback and agent state by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/431
change method pool size over capacity log level to warn by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/432
add version header key config by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/433
add fluent-arm, fixes fluent extract when another process in use by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/434
fixes agent register server env by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/435
bump version to 1.8.1 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/436

Full Changelog: https://github.com/HXSecurity/DongTai-agent-java/compare/v1.8.0...v1.8.1

v1.8.0

1 year ago

What's Changed

refactor policy model and class transform by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/404
fixes fluent config variable parse, split fluent config and log file by agent id by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/405
Fix(Close #403): system env string shouldn't use default charsets, us utf-8 by @a1576471428 in https://github.com/HXSecurity/DongTai-agent-java/pull/406
fixes policy node map key by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/407
Feature/refactor method pool fields by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/408
add new config by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/409
Feature/method pool size limit config by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/410
add dynamic configuration of response body collection by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/411
fixes replay request post body by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/412
skip http request collect if in deny list by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/413
fixes org.slf4j package shade by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/414
fixes normal vul stacks and crypto-weak-randomness policy source by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/415
fixes obj2string exception by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/416
add config builder testcases by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/417
fixes some sink methods source value capture by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/418
update blacklist.txt by @Nizernizer in https://github.com/HXSecurity/DongTai-agent-java/pull/419
bump version to 1.8.0 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/420

New Contributors

@a1576471428 made their first contribution in https://github.com/HXSecurity/DongTai-agent-java/pull/406

Full Changelog: https://github.com/HXSecurity/DongTai-agent-java/compare/v1.7.9...v1.8.0

v1.7.9

1 year ago

What's Changed

Fix/parse custom model exception by @Nizernizer in https://github.com/HXSecurity/DongTai-agent-java/pull/400
bump version to 1.7.9 by @lostsnow in https://github.com/HXSecurity/DongTai-agent-java/pull/401

Full Changelog: https://github.com/HXSecurity/DongTai-agent-java/compare/v1.7.8...v1.7.9