DongTai Versions Save

Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.

v1.16.0

6 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/HXSecurity/DongTai/compare/v1.15.0...v1.16.0

v1.15.0

7 months ago

What's Changed

Full Changelog: https://github.com/HXSecurity/DongTai/compare/v1.14.0...v1.15.0

v1.14.1

8 months ago

Full Changelog: https://github.com/HXSecurity/DongTai/compare/v1.14.0...v1.14.1

v1.14.0

8 months ago

What's Changed

Full Changelog: https://github.com/HXSecurity/DongTai/compare/v1.13.0...v1.14.0

v1.13.0

9 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/HXSecurity/DongTai/compare/v1.12.0...v1.13.0

v1.12.0

10 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/HXSecurity/DongTai/compare/v1.11.0...v1.12.0

v1.11.0

11 months ago

Feature

  • Increase the location display of dangerous methods and user code identification
  • Add code black and white list configuration
  • Add custom rule configuration items
  • Add agent list data display
  • Added hard-coded vulnerability display
  • The call chain search is modified to include matches, and a search timeout reminder is added.
  • Fixed the situation where an error was reported in a certain scenario in the vulnerability search part
  • Fix the problem of getting the wrong url corresponding to the api in the case of redirection
  • Fixed the markdown parsing problem of vulnerability description and repair plan
  • Fixed the problem of incorrect calculation of the number of agents in the project list interface
  • Fixed the bug that the number of connections surged due to connection reuse that conflicted with celery
  • Fixed the problem that the resource usage of excel report export was too high
  • Adjusted the verification of webhook, now as long as the receiving end returns a 200 status code, it can pass

What's Changed

Full Changelog: https://github.com/HXSecurity/DongTai/commits/v1.11.0

v1.10.0

1 year ago

Feature

  • SAST integration: Support SAST scanner to push vulnerabilities to scan vulnerabilities under the project
  • SAST integration: supports the association of instrumented vulnerabilities and SAST scanning vulnerabilities
  • Project configuration: Add project level modification log level and switch
  • Custom rules: Added two options: Ignore Internal Call and Ignore Blacklist
  • Fixed an issue where replay association based on file path similarity failed
  • Fixed the problem that the original URL address for extracting vulnerabilities was invalid
  • Fix the problem of highlight failure caused by abnormal data
  • Fixed SSRF false positives not being properly excluded in the engine
  • Fix the problem that the number of statistical items in the vulnerability display is incorrect due to the Agent being deleted
  • Fixed the wrong binding problem caused by projects with the same name in multiple departments during Agent registration
  • Updated the text of some vulnerability descriptions

What's Changed

Full Changelog: https://github.com/HXSecurity/DongTai/compare/v1.9.3...v1.10.0

v1.9.3

1 year ago

Feature

  • Add project template function
  • Add department and project related settings when installing agent
  • Fixed the regular check when detecting sensitive information
  • Fix agent start and stop bug
  • Optimize the query in the search part of the api
  • Fixed the display bug in the component part
  • Fixed log deletion bug

What's Changed

Full Changelog: https://github.com/HXSecurity/DongTai/compare/v1.9.2...v1.9.3

v1.9.2

1 year ago

What's Changed

Full Changelog: https://github.com/HXSecurity/DongTai/compare/v1.9.1...v1.9.2