Skip to content

Releases: HXSecurity/DongTai

Release-1.9.1

26 Nov 03:27
406b579
Compare
Choose a tag to compare

Feature

  • Fixed a bug where saving a project might cause the agent to lose association
  • Fixed display bug of method pool.
  • Fixed the bug that the data cleaning configuration save did not take effect reported by the community @Belee05.
  • Fixed the bug that registration failed due to too long startup command.

What's Changed

Full Changelog: v1.9.0...v1.9.1

Release-1.9.0

11 Nov 09:26
b51e497
Compare
Choose a tag to compare

Feature

  • Improved the method pool information collected by the agent, and is compatible with previous versions.
  • Added highlight display of taint range.
  • Added detection logic compatible with agent v3 version method pool.
  • Added a timeout mechanism for vulnerability verification.
  • Added timeout mechanism for replay.
  • Added API for unified distribution of agent configuration.
  • Fixed display bug #1058 reported by the community @onesecurity
  • Fixed the problem that the weak encryption vulnerability is not displayed after re-reporting after deletion.
  • Removed hook rules causing false negatives.

What's Changed

  • fix(hookstrategy): fix hook_profilesv2 api type 4 by @Bidaya0 in #1055
  • fix(hookstrategy): remove error strategy . by @Bidaya0 in #1057
  • fix(hookstrategy): fix hook_profilesv2 api language filter. by @Bidaya0 in #1056
  • build(logger): disable departured logger. by @Bidaya0 in #1060
  • feat: lifecycle by @tscuite in #1061
  • feat: Compatible with kubernetes version 1.16 by @tscuite in #1065
  • fix(typing): fix None return in get_hook_type function. by @Bidaya0 in #1066
  • build(deps): lock deps. by @Bidaya0 in #1067
  • feat: Added independent pv version by @tscuite in #1072
  • fix(scan):indexerror when method pool sink acnode . by @Bidaya0 in #1074
  • debug(scan): add debug command to test scan . by @Bidaya0 in #1076
  • ci(unittest): fix env setup in ci . by @Bidaya0 in #1077
  • ci(test): merge test state all in one. by @Bidaya0 in #1079
  • feat(systemsettings): add system setting for agent api . by @Bidaya0 in #1080
  • feat(systemsettings): add system setting for agent api . by @Bidaya0 in #1081
  • feat(systemsettings): change api . by @Bidaya0 in #1083
  • feat(method pool): add compatibility to v3 method_pool. by @Bidaya0 in #1082
  • Feat/url blacklist by @Bidaya0 in #1084
  • feat(method pool): add compatibility to get resbody for v3 method_pool. by @Bidaya0 in #1085
  • build(deps): lock stub pyyaml. by @Bidaya0 in #1087
  • fix(typing): add typing hint for handler. by @Bidaya0 in #1086
  • feat(method pool): add compatibility to parse taint position. by @Bidaya0 in #1088
  • feat(url_blacklist): add operator to header key. by @Bidaya0 in #1089
  • fix(taint_position): fix taint_position in version 3 method_pool . by @Bidaya0 in #1090
  • feat(method pool): add compatibility to display and new highlight range. by @Bidaya0 in #1091
  • fix(normal_vul): fix distinct logic confilct with is_del . by @Bidaya0 in #1092
  • feat(method pool): add compatibility to display and new highlight range. by @Bidaya0 in #1093
  • feat(method pool): add compatibility to display and new highlight range. by @Bidaya0 in #1094
  • fix(hook_strategy): remove unnessary strategy which cause fake positive. by @Bidaya0 in #1095
  • fix(display): fix method_pool display. by @Bidaya0 in #1096
  • fix(display): fix method_pool display. by @Bidaya0 in #1097
  • feat(hookstrategy): add experimental feature auto updatre strategy. by @Bidaya0 in #1098
  • fix(recheck): add auto expire time in recheck. by @Bidaya0 in #1099
  • fix(recheck): add auto expire time in recheck. by @Bidaya0 in #1100
  • fix(display): fix method_pool display with old version data. by @Bidaya0 in #1101
  • fix(recheck): add auto expire time in method_pool replay. by @Bidaya0 in #1102

Full Changelog: v1.8.7...v1.9.0

Release-1.8.7

31 Oct 03:58
7bb18eb
Compare
Choose a tag to compare

Feature

  • Refactored hook strategy to accommodate subsequent changes.
  • Added step to sync rules when updating.
  • Modified the display of the component vulnerability section.
  • Optimized related query of project API.
  • Fixed utf-8 support for logger.

What's Changed

  • build(dependency): add botocore setuptool as dependency to lock insta… by @Bidaya0 in #1017
  • fix(locales): fix utf8 support in logger. by @Bidaya0 in #1022
  • Feature/hook profiles v2 by @Bidaya0 in #1023
  • feat(hookrules): add field vul_type. by @Bidaya0 in #1024
  • feat(strategy): add hook_profiles full export and load. by @Bidaya0 in #1021
  • refactor(strategy): change strategy search api . by @Bidaya0 in #1025
  • refactor(strategy): change strategy load in task scan . by @Bidaya0 in #1026
  • refactor(strategy): change strategy read from IastStrategy in task s… by @Bidaya0 in #1027
  • refactor(strategy): change hookstrategy list api to adopt new strateg… by @Bidaya0 in #1028
  • refactor(strategy): fix hook rule summary. by @Bidaya0 in #1030
  • refactor(strategy): fix hook rule summary. by @Bidaya0 in #1029
  • refactor(strategy): fix hook rule types. by @Bidaya0 in #1031
  • refactor(strategy): fix hook rule types. by @Bidaya0 in #1032
  • feat(strategy): add new field in hook type create api . by @Bidaya0 in #1033
  • feat(strategy): add new field in hook type create api . by @Bidaya0 in #1034
  • feat(strategy): add new field in hook type create api . by @Bidaya0 in #1035
  • feat(strategy): add new field in hook type create api . by @Bidaya0 in #1036
  • feat(strategy): add new field in hook type create api . by @Bidaya0 in #1037
  • refactor(strategy): fix hook rule add and modify. by @Bidaya0 in #1038
  • refactor(strategy): fix hook rule modify. by @Bidaya0 in #1039
  • fix(project): combine multiple queries to reduce time cost. by @Bidaya0 in #1040
  • fix(project): param 'page' add validation . by @Bidaya0 in #1041
  • fix(project): delete bound agent and relative data when delete project. by @Bidaya0 in #1042
  • fix(project): delete bound agent and relative data when delete project. by @Bidaya0 in #1043
  • fix(strategy): fix org.xml.sax.InputSource.setSystemId(java.lang.String) by @Bidaya0 in #1044
  • fix(strategy): fix hook rules . by @Bidaya0 in #1046
  • build(deps): fix elasticsearch deps by @Bidaya0 in #1047
  • fix(strategy): fix hooktype by @Bidaya0 in #1048
  • feat: load_hook_strategy and SQL VERSION by @tscuite in #1049
  • feat(sca): show vul source package. by @Bidaya0 in #1050
  • feat(sca): show vul source package. by @Bidaya0 in #1051
  • feat: hide errors by @tscuite in #1052
  • feat: add nodeSelector Labels env by @tscuite in #1053
  • fix(hookstrategy): fix query when agent pull hook policy. by @Bidaya0 in #1054

Full Changelog: v1.8.6...v1.8.7

Release-1.8.6

14 Oct 13:19
f08bb36
Compare
Choose a tag to compare

Feature

  • Improved component query logic
  • Improved component data storage to reduce storage usage
  • Added detection process for judging the range of string taint
  • Fixed the bug that the api coverage calculation is not always consistent
  • Fixed bug in apisitemap recording
  • Fixed the bug that apisitemap query PUT filter conditions would be invalid

What's Changed

Full Changelog: v1.8.5...v1.8.6

Release-1.8.5

15 Sep 11:48
8571c56
Compare
Choose a tag to compare

Feature

  • Low severity vulnerability, adjusted the display and its call stack
  • Response header vulnerability aggregation display, now multiple similar response header vulnerabilities will be merged into one
  • Fixed false positives for XXE vulnerability
  • Called methods in the call stack are now displayed more precisely
  • Update detection rules

What's Changed

Full Changelog: v1.8.4...v1.8.5

Release-1.8.4

09 Sep 09:43
9566c9d
Compare
Choose a tag to compare

Feature

  • Added increased ssrf range detection, now only vulnerabilities that affect the host will be reported
  • Added spring's restful parameter recognition
  • Added vulnerability detection for fastjson
  • Updated detection rules

What's Changed

New Contributors

  • @UzJu made their first contribution in #939

Full Changelog: v1.8.3...v1.8.4

Release-1.8.3

05 Aug 10:49
3b705e9
Compare
Choose a tag to compare

What's Changed

Full Changelog: v1.8.2...v1.8.3

Release-1.8.2

15 Jul 05:47
92a1bae
Compare
Choose a tag to compare

What's Changed

Full Changelog: v1.8.1...v1.8.2

Release-1.8.1

23 Jun 09:24
51b3ded
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v1.8.0...v1.8.1

Release-1.8.0

15 Jun 17:12
0d427b3
Compare
Choose a tag to compare

What's Changed

Read more