hxsecurity / dongtai-agent-java Goto Github PK

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

Home Page: https://dongtai.io

License: Apache License 2.0

Java 100.00%

iast devsecops appsec-tutorials applicationsecuritymonitoring dongtai-iast security-scan agent java

dongtai-agent-java's People

Contributors

Stargazers

Watchers

Forkers

zu1kbackup iast-s amakerlee gifrop venscor l0kiii mo-xiaoxi zsdlove mrquiet harry1080 rongqinglee iatf 0xccsec red-team-sec a1kaid laozhudetui longofo m-star-coder javalangclass ethancck kaide0521 bill-bil ufwt 26597925 geekmc minluzhou changheluor007 traxsw test2504 achudk r4b3rt veeeooo tirthikas jweny xiaoq1z piaoxue88 kaka77 w5d1 bigbrobro n1f2c3 threezerobravoteam grant555 bitefoo run0nceex echogin404 a0xpg sendarg kingking888 randengshifu data54388 chennqqi crackercat free04k rassec ru4h alphagir hqixuan bipabo1l cleanmgr112 wangyi0127 whitesharks dk47os3r xysh90hou alphadyz gitttttbottttt jeromeyoung pyking qiaoqiaoxz jumpyyy rapper-zc xiaoruiguo c0d1007 medasz nizernizer wadewfsssss exexute liaomengge sesyi iicoming jywah skybulk testyn imouplatform we1h0 topscrew darius-1024 missdiog d-eagle whoami001 heartsleep dacer250 csyjyy gentlexue pr1s0n kaizhiyu xpt-open-souce leekeey zhaoxianhua jinghao1 13e713e7

dongtai-agent-java's Issues

attach模式启动抛出java.lang.InternalError

Describe the bug
程序启动时控制台抛出错误

To Reproduce
Steps to reproduce the behavior:

使用vulfocus/shiro-cve_2020_11989:latest
用attach模式安装agent
控制台抛出错误

log

current jdk version is : 1.8.0_292
[cn.huoxian.dongtai.iast] The remote file http://openapi.iast.huoxian.cn:8000/api/v1/engine/download?package_name=iast-inject&jdk.version=1 was successfully written to the local cache.
[cn.huoxian.dongtai.iast] The remote file http://openapi.iast.huoxian.cn:8000/api/v1/engine/download?package_name=iast-core&jdk.version=1 was successfully written to the local cache.
2021-06-01 19:25:45.048 [cn.huoxian.dongtai.engine] INFO  The engine is about to be installed, the installation mode is attach
2021-06-01 19:25:45.074 [cn.huoxian.dongtai.engine] INFO  Initialize the core configuration of the engine
2021-06-01 19:25:45.466 [cn.huoxian.dongtai.engine] INFO  The engine's core configuration is initialized successfully.
2021-06-01 19:25:45.468 [cn.huoxian.dongtai.engine] INFO  Start the data reporting submodule
2021-06-01 19:25:45.469 [cn.huoxian.dongtai.engine] INFO  The data reporting submodule started successfully
2021-06-01 19:25:45.469 [cn.huoxian.dongtai.engine] INFO  Register spy submodule
2021-06-01 19:25:45.471 [cn.huoxian.dongtai.engine] INFO  Spy sub-module registered successfully
2021-06-01 19:25:45.472 [cn.huoxian.dongtai.engine] INFO  Install data acquisition and analysis sub-modules
2021-06-01 19:25:50.763 [cn.huoxian.dongtai.engine] WARN  reTransform class class org.springframework.boot.autoconfigure.jdbc.HikariDriverConfigurationFailureAnalyzer failed, at index=728;total=1517. ignore this class.
java.lang.InternalError: null
        at sun.instrument.InstrumentationImpl.retransformClasses0(Native Method)
        at sun.instrument.InstrumentationImpl.retransformClasses(InstrumentationImpl.java:144)
        at com.secnium.iast.core.enhance.IastClassFileTransformer.retransform(IastClassFileTransformer.java:242)
        at com.secnium.iast.core.enhance.IastClassFileTransformer.init(IastClassFileTransformer.java:218)
        at com.secnium.iast.core.engines.impl.TransformEngine.start(TransformEngine.java:31)
        at com.secnium.iast.core.AgentEngine.run(AgentEngine.java:100)
        at com.secnium.iast.core.AgentEngine.install(AgentEngine.java:56)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at com.secnium.iast.agent.manager.EngineManager.install(EngineManager.java:189)
        at com.secnium.iast.agent.AgentLauncher.install(AgentLauncher.java:77)
        at com.secnium.iast.agent.AgentLauncher.agentmain(AgentLauncher.java:52)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at sun.instrument.InstrumentationImpl.loadClassAndStartAgent(InstrumentationImpl.java:386)
        at sun.instrument.InstrumentationImpl.loadClassAndCallAgentmain(InstrumentationImpl.java:411)
2021-06-01 19:25:57.630 [cn.huoxian.dongtai.engine] INFO  The sub-module of data acquisition and analysis is successfully installed
2021-06-01 19:25:57.630 [cn.huoxian.dongtai.engine] INFO  The engine is successfully installed to the JVM, and it takes 12582ms
2021-06-01 19:25:57.668 [cn.huoxian.dongtai.engine] INFO  Turn on the engine
2021-06-01 19:25:57.668 [cn.huoxian.dongtai.engine] INFO  Engine opened successfully
[cn.huoxian.dongtai.iast] Successfully opened the engine, and it takes  13s```

[BUG]: WebSphere Liberty start error.

WebSphere liberty 启动报错
总结：启动存在报错，但是服务可以正常启动，agent也正常运行。Server start error: file lock obtained, and server process is running.attach模式启动未报错
正常启动：

带agent启动：

attach模式启动：未报错

报错日志：
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:00.73 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:01.20 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:01.68 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:02.16 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:02.22 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:02.23 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:02.67 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:03.03 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:03.52 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:03.98 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:04.49 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:05.00 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:05.51 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:06.01 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:06.53 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:07.03 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:07.54 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:08.05 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:08.56 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:09.06 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:09.56 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:10.07 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:10.58 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:11.09 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:11.59 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:12.02 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:12.32 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:12.32 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:12.32 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:13.11 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:14.25 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:14.92 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:15.43 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:16.20 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:17.11 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:18.14 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:18.71 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:19.22 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:20.17 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:20.78 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:21.55 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:22.32 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:22.83 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:23.34 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:23.85 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:24.36 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:24.86 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:25.37 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:25.88 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:26.38 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:26.89 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:27.58 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:28.41 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:28.83 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:28.91 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:28.91 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:29.29 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:29.80 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:30.37 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0
[ps, -p, 9253]
PID TTY TIME CMD
9253 ttys000 0:31.78 /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java -javaagent:/Users/erzhuangniu/develop/wlp/bin/tools/ws-javaagent.jar -Djava.awt.headless=true -Djdk.attach.allowAttachSelf=true -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -javaagent:/Users/erzhuangniu/develop/wlp/bin/agent.jar -Dproject.name=websphere -jar /Users/erzhuangniu/develop/wlp/bin/tools/ws-server.jar wasdemo
Exit code for 'ps' command: 0

Server start error: file lock obtained, and server process is running.

arg0=wasdemo
arg1=--pid=9253
arg2=--status:start
exit=22

               Command:  /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre/bin/java 
             Java home:  /Library/Java/JavaVirtualMachines/jdk1.8.0_301.jdk/Contents/Home/jre
          Install root:  /Users/erzhuangniu/develop/wlp/
      System libraries:  /Users/erzhuangniu/develop/wlp/lib/
             User root:  /Users/erzhuangniu/develop/wlp/usr/
                Config:  /Users/erzhuangniu/develop/wlp/usr/servers/wasdemo/
                Output:  /Users/erzhuangniu/develop/wlp/usr/servers/wasdemo/

[Bug]: 解码不是utf-8导致乱码

Preflight Checklist

I agree to follow the Code of Conduct that this project adheres to.
I have searched the issue tracker for an issue that matches the one I want to file, without success.
I am not looking for support or already pursued the available support channels without success.

Version

1.1.0

Installation Type

Official Docker Compose

Service Name

DongTai-agent-java

Describe the details of the bug and the steps to reproduce it

拦截http请求后默认的解码编码是 ISO8859-1 不是 UTF-8，对项目传参造成影响。本地使用utf-8编码。

Additional Information

Logs

No response

Vulnerability full link tracking: add support for httpclient component

local模式和remote模式的漏洞检出率不一致

背景

在测试RuoYi安全漏洞时分别使用了local模式和remote模式进行漏洞检测，发现local模式无法检测出remote模式检测出的安全漏洞。

[BUG] SCA collection

"java -classpath" can't collect SCA.

期望推出类似esapi一个通用组件

期望产品同步推出一个类似esapi的一个通用组件
该组件提供一系列函数可以对发现的有缺陷的输入参数，提供通用过滤的这么一个功能
当开发人员看到有输入参数导致的漏洞，直接用通用组件处理输入的变量，达到快速安全整改的目的

iast启动偶发性报错

报错信息

Error opening zip file or JAR manifest missing : /mnt/www/cfg/iast/iast-agent.jar
Error occurred during initialization of VM
agent library failed to init: instrument

环境
OpenJDK 1.8

commons-configuration的配置文件监听功能下线

背景
实际使用过程中，发现很少需要直接修改配置文件进行操作；而commons-configuration又存在一定的性能问题，因此下线该功能，删除相关依赖，减轻agent的复杂度

remove unused code

Publish Java-Agent to Github Package

fix 优化maven依赖，优化HttpRequest对象相关方法

[Bug]: 手动部署探针无法查看到日志

Preflight Checklist

I agree to follow the Code of Conduct that this project adheres to.
I have searched the issue tracker for an issue that matches the one I want to file, without success.
I am not looking for support or already pursued the available support channels without success.

Version

1.0.6

Installation Type

Official Docker Compose

Service Name

DongTai-Engine

Describe the details of the bug and the steps to reproduce it

手动安装
spring boot 版本号为 v2.2.6
看不到日志

Additional Information

No response

Logs

No response

PerformanceMonitor#check方法失效

preStatus的值一直都是0，导致isStart等四个方法的返回值也都为false，不会执行里面的代码

DongTai-agent-java/iast-agent/src/main/java/com/secnium/iast/agent/monitor/PerformanceMonitor.java

Lines 78 to 95 in 95e0f01

 @Override 

 public void check() { 

 double unUserdRate = memUsedRate(); 

 int preStatus = this.engineManager.getRunningStatus(); 

 if (isStart(unUserdRate, preStatus)) { 

 this.engineManager.start(); 

 this.engineManager.setRunningStatus(2); 

 } else if (isStop(unUserdRate, preStatus)) { 

 this.engineManager.stop(); 

 this.engineManager.setRunningStatus(3); 

 } else if (isUninstall(unUserdRate, preStatus)) { 

 this.engineManager.uninstall(); 

 this.engineManager.setRunningStatus(4); 

 } else if (isInstall(unUserdRate, preStatus)) { 

 this.engineManager.install(); 

 this.engineManager.setRunningStatus(1); 

 } 

 }

fix bugs in vulnerability verification

【False negatives】xss vulnerability

title

Reflective xss cannot be detected

code

issue committer

MOMO Security Engineer

solution

The value transfer algorithm does not correctly handle the Object[] type causing this problem, so as to traverse Object[] to ensure the correctness of the value transfer process

Consider adding URL whitelist mechanism to agent(考虑对agent加入url白名单机制)

Preflight Checklist

I agree to follow the Code of Conduct that this project adheres to.
I have searched the issue tracker for an issue that matches the one I want to file, without success.

Problem Description

Because a large number of heartbeat packets need to be sent, and for these heartbeat packets, the agent will send a request to the server every time, which will consume more time. Performance degradation. Want to join the URL whitelist mechanism. Some URLs are not detected by default.
因为有大量的心跳包需要发送，而对于这些心跳包，每发送一次agent就会发送一个请求到server，这样会消耗比较多的时间。使得性能下降。想要加入url白名单机制。默认不检测某些url。

Proposed Solution

Faster(更快)

Alternatives Considered

No response

Additional Information

No response

When using resttemplate to customize the header, some fields will not be loaded, such as the host header.

Preflight Checklist

I agree to follow the Code of Conduct that this project adheres to.
I have searched the issue tracker for an issue that matches the one I want to file, without success.
I am not looking for support or already pursued the available support channels without success.

Version

1.1.2

Installation Type

Official Docker Compose

Service Name

DongTai-agent-java

Describe the details of the bug and the steps to reproduce it

When using resttemplate to customize the header, some fields will not be loaded, such as the host header.In sun.net.www.protocol.http.httpurlconnection, allowrestrictedheaders is assigned in the static block and will be initialized only once. In the agent, httpurlconnection is loaded before the program, which leads to this problem.
使用RestTemplate自定义头的时候有些字段会加载不进来，比如说host头。因为在sun.net.www.protocol.http.HttpURLConnection中allowRestrictedHeaders是放在static块中赋值，只会初始化一次。而在agent中先于程序加载了HttpURLConnection，所以导致这个问题。

Additional Information

No response

Logs

No response

attach模式启动

Preflight Checklist

I agree to follow the Code of Conduct that this project adheres to.
I have searched the issue tracker for an issue that matches the one I want to file, without success.
I am not looking for support or already pursued the available support channels without success.

Version

1.0.4

Installation Type

Other (specify below)

Service Name

DongTai-Core

Describe the details of the bug and the steps to reproduce it

attach模式启动

Additional Information

alibaba/arthas@53a544c?diff=split
alibaba/arthas#675

Logs

class=org.springframework.boot.sql.init.dependency.DatabaseInitializationDependencyConfigurer$$Lambda$290/142555199\njava.lang.VerifyError\r
at sun.instrument.InstrumentationImpl.retransformClasses0(Native Method)\r
at sun.instrument.InstrumentationImpl.retransformClasses(InstrumentationImpl.java:144)\r
at com.secnium.iast.core.enhance.IastClassFileTransformer.retransform(IastClassFileTransformer.java:241)\r
at com.secnium.iast.core.enhance.IastClassFileTransformer.init(IastClassFileTransformer.java:65)\r
at com.secnium.iast.core.engines.impl.TransformEngine.start(TransformEngine.java:31)\r
at com.secnium.iast.core.AgentEngine.run(AgentEngine.java:98)\r
at com.secnium.iast.core.AgentEngine.install(AgentEngine.java:58)\r
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)\r
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)\r
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)\r
at java.lang.reflect.Method.invoke(Method.java:498)\r
at com.secnium.iast.agent.manager.EngineManager.install(EngineManager.java:177)\r
at com.secnium.iast.agent.monitor.MonitorDaemonThread.startEngine(MonitorDaemonThread.java:47)\r
at com.secnium.iast.agent.monitor.MonitorDaemonThread.run(MonitorDaemonThread.java:26)\r
at java.lang.Thread.run(Thread.java:748)\n

[Bug]:Agent配置延迟启动时间无法正常上报心跳

Preflight Checklist

I agree to follow the Code of Conduct that this project adheres to.
I have searched the issue tracker for an issue that matches the one I want to file, without success.
I am not looking for support or already pursued the available support channels without success.

Version

V1.1.3

Installation Type

Other (specify below)

Service Name

DongTai-agent-java

Describe the details of the bug and the steps to reproduce it

java -javaagent:/path/to/agent.jar -Diast.engine.delay.time=15 -jar app.jar
当使用“-Diast.engine.delay.time”该参数，无法正常上报IastHeartbeat数据

Additional Information

No response

Logs

No response

[FEATURE] Add Rules about Path Traversal

org.springframework.web.multipart.MultipartFile.getOriginalFilename()
org.springframework.web.multipart.MultipartFile.getName()
org.apache.commons.fileupload.FileItem.getName()

agent向云端发送数据时，数据一直发送失败导致OOM

场景：
测试环境中，网络与云端网络不通，导致agent端重复把数据写入本地内存，最终，出现OOM

解决方案：
当数据发送失败时，将数据从内存中释放并写入本地磁盘

核心检测引擎延时加载

背景
部分企业在k8s环境中，会增加健康检查的步骤，由于测试环境安装的java agent类产品较多，从而导致应用启动时间明显拉长

解决方案
配置延时加载的功能，在应用启动后一段时间，再加载iast，解决启动问题

[Feature]: V1.1.0版本WebGoat-8.0.0.M17下的XSS场景，测试无法检测出来

Preflight Checklist

I agree to follow the Code of Conduct that this project adheres to.
I have searched the issue tracker for an issue that matches the one I want to file, without success.

Problem Description

WebGoat-8.0.0.M17下的XSS场景，V1.1.0版本本地测试无法检测出来：

Proposed Solution

V1.1.0版本修复XSS检测

Alternatives Considered

No response

Additional Information

No response

[Bug]: 使用洞态idea插件报错

Preflight Checklist

I agree to follow the Code of Conduct that this project adheres to.
I have searched the issue tracker for an issue that matches the one I want to file, without success.
I am not looking for support or already pursued the available support channels without success.

Version

1.1.3

Installation Type

Official Docker Compose

Service Name

DongTai-Core

Describe the details of the bug and the steps to reproduce it

在安装完1.1.3版本和配置完idea后进行测试，使用时会报错，下图是报错图片。

Additional Information

No response

Logs

No response

IastClassAncestorQuery抛出java.lang.NullPointerException

镜像名称

fastjson/1.2.47-rce

如何复现

添加agent启动程序后抛出异常

日志

{"msg":"java.lang.NullPointerException\n\tat com.secnium.iast.core.enhance.IastClassAncestorQuery.scanJarForAncestor(IastClassAncestorQuery.java:145)\n\tat com.secnium.iast.core.enhance.IastClassAncestorQuery.addClassToAncestor(IastClassAncestorQuery.java:98)\n\tat com.secnium.iast.core.enhance.IastClassAncestorQuery.getAncestors(IastClassAncestorQuery.java:71)\n\tat com.secnium.iast.core.enhance.IastClassFileTransformer.transform(IastClassFileTransformer.java:105)\n\tat sun.instrument.TransformerManager.transform(TransformerManager.java:188)\n\tat sun.instrument.InstrumentationImpl.transform(InstrumentationImpl.java:428)\n\tat java.lang.ClassLoader.defineClass1(Native Method)\n\tat java.lang.ClassLoader.defineClass(ClassLoader.java:763)\n\tat java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)\n\tat java.net.URLClassLoader.defineClass(URLClassLoader.java:467)\n\tat java.net.URLClassLoader.access$100(URLClassLoader.java:73)\n\tat java.net.URLClassLoader$1.run(URLClassLoader.java:368)\n\tat java.net.URLClassLoader$1.run(URLClassLoader.java:362)\n\tat java.security.AccessController.doPrivileged(Native Method)\n\tat java.net.URLClassLoader.findClass(URLClassLoader.java:361)\n\tat java.lang.ClassLoader.loadClass(ClassLoader.java:424)\n\tat org.springframework.boot.loader.LaunchedURLClassLoader.loadClass(LaunchedURLClassLoader.java:92)\n\tat java.lang.ClassLoader.loadClass(ClassLoader.java:357)\n\tat org.springframework.boot.autoconfigure.SharedMetadataReaderFactoryContextInitializer$SharedMetadataReaderFactoryBean.setBeanClassLoader(SharedMetadataReaderFactoryContextInitializer.java:119)\n\tat org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.invokeAwareMethods(AbstractAutowireCapableBeanFactory.java:1796)\n\tat org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1765)\n\tat org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:593)\n\tat org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:515)\n\tat org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:320)\n\tat org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222)\n\tat org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:318)\n\tat org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:199)\n\tat org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:303)\n\tat org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:110)\n\tat org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1681)\n\tat org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1433)\n\tat org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:592)\n\tat org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:515)\n\tat org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:320)\n\tat org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222)\n\tat org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:318)\n\tat org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:204)\n\tat org.springframework.context.support.PostProcessorRegistrationDelegate.invokeBeanFactoryPostProcessors(PostProcessorRegistrationDelegate.java:89)\n\tat org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:705)\n\tat org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:531)\n\tat org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:140)\n\tat org.springframework.boot.SpringApplication.refresh(SpringApplication.java:742)\n\tat org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:389)\n\tat org.springframework.boot.SpringApplication.run(SpringApplication.java:311)\n\tat org.springframework.boot.SpringApplication.run(SpringApplication.java:1213)\n\tat org.springframework.boot.SpringApplication.run(SpringApplication.java:1202)\n\tat org.vulhub.fastjsondemo.FastjsondemoApplication.main(FastjsondemoApplication.java:16)\n\tat sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)\n\tat sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)\n\tat sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)\n\tat java.lang.reflect.Method.invoke(Method.java:498)\n\tat org.springframework.boot.loader.MainMethodRunner.run(MainMethodRunner.java:47)\n\tat org.springframework.boot.loader.Launcher.launch(Launcher.java:86)\n\tat org.springframework.boot.loader.Launcher.launch(Launcher.java:50)\n\tat org.springframework.boot.loader.JarLauncher.main(JarLauncher.java:51)\n","classname":"org/springframework/core/type/classreading/MetadataReaderFactory","type":"scan class for family"}

[BUG]: ElasticSearch query slow when use dongtai-java-agent.

ElasticSearch-DongTai-java-agent 性能测试
测试用例：https://github.com/macrozheng/mall-learning/tree/master/mall-tiny-elasticsearch
环境：

Jdk 1.8
springboot 2.3.0
ElasticSearch 7.6.2

数据量为100时：
GET /esProduct/search/simple 接口：
未装 agent: （平均值：25.8ms）
search: 44ms
search: 25ms
search: 30ms
search: 22ms
search: 23ms
search: 27ms
search: 24ms
search: 19ms
search: 24ms
search: 20ms
装洞态IAST Javaageent：（平均值：444.8ms）
search: 3349ms
search: 223ms
search: 123ms
search: 98ms
search: 189ms
search: 101ms
search: 94ms
search: 86ms
search: 76ms
search: 109ms

[BUG]: Attack parameter is wrong.

project: RuoYi-4.6.1
jdk1.8

wrong parameter: pageSize

pinpoint-agent Found one Java-level deadlock

IAST agent在pinpoint-agent之后启动有时候会有异常，异常信息如下：

[PINPOINT] Found one Java-level deadlock:

If pinpoints affect the deadlock below, please put all the information posted on pinpoint's github.
(https://github.com/naver/pinpoint/issues)
================================================================
"dongtai-engine-report" Id=31 BLOCKED on com.secnium.iast.core.enhance.IastClassAncestorQuery@ef17fcc owned by "main" Id=1
	at com.secnium.iast.core.enhance.IastClassAncestorQuery.saveAncestors(IastClassAncestorQuery.java:47)
	-  blocked on com.secnium.iast.core.enhance.IastClassAncestorQuery@ef17fcc
	at com.secnium.iast.core.enhance.IastClassFileTransformer.transform(IastClassFileTransformer.java:104)
	at sun.instrument.TransformerManager.transform(TransformerManager.java:188)
	at sun.instrument.InstrumentationImpl.transform(InstrumentationImpl.java:428)
	at java.lang.ClassLoader.findBootstrapClass(Native Method)
	at java.lang.ClassLoader.findBootstrapClassOrNull(ClassLoader.java:1015)
	at java.lang.ClassLoader.loadClass(ClassLoader.java:413)
	at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
	at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:349)
	at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
	at com.secnium.iast.agent.IastClassLoader.loadClass(IastClassLoader.java:66)
	at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
	at com.secnium.iast.core.util.HttpClientUtils.sendRequest(HttpClientUtils.java:93)
	at com.secnium.iast.core.util.HttpClientUtils.sendPost(HttpClientUtils.java:50)
	at com.secnium.iast.core.report.VulnReport.send(VulnReport.java:35)
	at com.secnium.iast.core.AbstractThread.run(AbstractThread.java:41)
	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
	at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308)
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180)
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	at java.lang.Thread.run(Thread.java:748)

"main" Id=1 BLOCKED on com.secnium.iast.agent.IastClassLoader@161f6623 owned by "dongtai-engine-report" Id=31
	at com.secnium.iast.core.enhance.IastClassAncestorQuery.scanJarForAncestor(IastClassAncestorQuery.java:164)
	-  blocked on com.secnium.iast.agent.IastClassLoader@161f6623
	at com.secnium.iast.core.enhance.IastClassAncestorQuery.addClassToAncestor(IastClassAncestorQuery.java:98)
	at com.secnium.iast.core.enhance.IastClassAncestorQuery.getAncestors(IastClassAncestorQuery.java:71)
	at com.secnium.iast.core.enhance.IastClassFileTransformer.transform(IastClassFileTransformer.java:105)
	at sun.instrument.TransformerManager.transform(TransformerManager.java:188)
	at sun.instrument.InstrumentationImpl.transform(InstrumentationImpl.java:428)
	at sun.instrument.InstrumentationImpl.retransformClasses0(Native Method)
	at sun.instrument.InstrumentationImpl.retransformClasses(InstrumentationImpl.java:144)
	
	at com.secnium.iast.core.enhance.IastClassFileTransformer.retransform(IastClassFileTransformer.java:242)
	
	at com.secnium.iast.core.enhance.IastClassFileTransformer.init(IastClassFileTransformer.java:218)
	at com.secnium.iast.core.engines.impl.TransformEngine.start(TransformEngine.java:31)
	at com.secnium.iast.core.AgentEngine.run(AgentEngine.java:98)
	at com.secnium.iast.core.AgentEngine.install(AgentEngine.java:53)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at com.secnium.iast.agent.manager.EngineManager.install(EngineManager.java:187)
	at com.secnium.iast.agent.AgentLauncher.install(AgentLauncher.java:77)
	at com.secnium.iast.agent.AgentLauncher.premain(AgentLauncher.java:33)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at sun.instrument.InstrumentationImpl.loadClassAndStartAgent(InstrumentationImpl.java:386)
	at sun.instrument.InstrumentationImpl.loadClassAndCallPremain(InstrumentationImpl.java:401)

================================================================

性能优化

解决ISSUE： HXSecurity/DongTai#62

druid环境下，字节码修改过程抛出异常

处理com/alibaba/druid/support/http/ResourceServlet类时，IAST模型加载失败，导致异常，异常信息如下：

2021-05-28 14:31:42.547 [cn.huoxian.dongtai.engine] ERROR transform class com/alibaba/druid/support/http/ResourceServlet failed.{}
java.lang.NullPointerException: null
 at com.secnium.iast.core.handler.models.IastHookRuleModel.getRuleTypeValueByFramework(IastHookRuleModel.java:199)
 at com.secnium.iast.core.enhance.plugins.DispatchClassPlugin$ClassVisit.lazyAop(DispatchClassPlugin.java:160)
 at com.secnium.iast.core.enhance.plugins.DispatchClassPlugin$ClassVisit.visitMethod(DispatchClassPlugin.java:108)
 at com.secnium.iast.thirdparty.org.objectweb.asm.ClassReader.readMethod(ClassReader.java:1320)
 at com.secnium.iast.thirdparty.org.objectweb.asm.ClassReader.accept(ClassReader.java:711)
 at com.secnium.iast.thirdparty.org.objectweb.asm.ClassReader.accept(ClassReader.java:394)
 at com.secnium.iast.core.enhance.IastClassFileTransformer.transform(IastClassFileTransformer.java:115)

方法scanCodeSource()在扫描时漏扫/BOOT-INF/lib目录下的jar包

背景

在扫描项目依赖jar包时使用了切割字符串的方式对jar包的路径进行切割：
jarPackageFilePath = jarPackageFilePath.replace("file:", "");
jarPackageFilePath = jarPackageFilePath.substring(0, jarPackageFilePath.indexOf("!/"));

但是在使用substring()方法取到的字符串为：第0个到第一次遇到"!/"中间的子串，是错误的。
以下路径为真实应用场景中的路径：
file:/Users/erzhuangniu/workspace/vul/RuoYi-4.6.1/ruoyi-admin/target/ruoyi-admin.jar!/BOOT-INF/lib/shiro-core-1.7.1.jar!/

可以看到字符串"!/"出现两处，应取第0处和最后一次遇到"!/"中间的子串。

解决方案

使用String对象方法 lastIndexOf("!/") 来获取最后一次遇到字符串"!/"的位置，然后对 jarPackageFilePath 做字符串切割

背景

将服务器地址发送至云端，在云端系统配置-引擎管理可见当前探针所在的ip地址
字节码转换报错信息发送至云端

解决方案

使用 InetAddress 类获取当前服务器 IP 地址
使用ErrorLogReport.sendErrorLog()将字节码转换报错信息发送至云端

Vulnerability full link tracking: add support for okhttp

[Bug]: Java Agent startup performance optimization

Preflight Checklist

I agree to follow the Code of Conduct that this project adheres to.
I have searched the issue tracker for an issue that matches the one I want to file, without success.
I am not looking for support or already pursued the available support channels without success.

Version

1.0.4

Installation Type

Official SaaS Service

Service Name

DongTai-Core

Describe the details of the bug and the steps to reproduce it

When the Java Agent starts, the speed is very slow, often takes a few minutes

Additional Information

No response

Logs

No response

Compilation failure

编译失败。
使用maven编译时报异常，不知道是不是因为jdk 的问题还是别的，下面是我编译的系统信息和jdk版本。

系统：

No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 20.04.1 LTS
Release:	20.04
Codename:	focal

java version "1.8.0_201"
Java(TM) SE Runtime Environment (build 1.8.0_201-b09)
Java HotSpot(TM) 64-Bit Server VM (build 25.201-b09, mixed mode)

执行mvn clean package 后编译失败

[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for dongtai-agent-java 0.6.0:
[INFO] 
[INFO] dongtai-agent-java ................................. SUCCESS [  8.068 s]
[INFO] iast-agent ......................................... SUCCESS [06:45 min]
[INFO] iast-inject ........................................ SUCCESS [  0.498 s]
[INFO] iast-core .......................................... FAILURE [ 10.839 s]
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  07:05 min
[INFO] Finished at: 2021-04-24T19:26:43-07:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.apache.maven.plugins:maven-compiler-plugin:2.3.2:compile (default-compile) on project iast-core: Compilation failure
[ERROR] bootstrap class path not set in conjunction with -source 1.6
[ERROR] /home/xx/Documents/DongTai-agent-java/iast-core/src/main/java/com/secnium/iast/core/enhance/sca/SCAScanner.java:[17,7] error: class ScaScanner is public, should be declared in a file named ScaScanner.java

public EngineManager(Instrumentation inst, String launchMode, String ppid) {

Add Service Tracing Flag in HTTP/Dubbo RPC

agent反射异常

镜像名称

pinpoint

如何复现

应用启动后调用任意API

日志

sun.reflect.Reflection.ensureMemberAccess(Reflection.java:102)\n\tat
java.lang.reflect.AccessibleObject.slowCheckMemberAccess(AccessibleObject.java:296)\n\tat 
java.lang.reflect.AccessibleObject.checkAccess(AccessibleObject.java:288)\n\tat 
java.lang.reflect.Method.invoke(Method.java:491)\n\tat 
com.secnium.iast.core.util.http.HttpRequest.getQueryString(HttpRequest.java:260)\n\tat
com.secnium.iast.core.handler.graphy.GraphBuilder.convertToReport(GraphBuilder.java:85)\n\tat com.secnium.iast.core.handler.graphy.GraphBuilder.buildAndReport(GraphBuilder.java:25)\n\tat com.secnium.iast.core.handler.EventListenerHandlers.leaveHttp(EventListenerHandlers.java:197)\n\tat sun.reflect.GeneratedMethodAccessor44.invoke(Unknown Source)\n\tat sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)\n\tat java.lang.reflect.Method.invoke(Method.java:498)\n\tat java.lang.iast.inject.Injecter.leaveHttp(Injecter.java:424)\n\tat org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:168)\n\tat org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:712)\n\tat org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:461)\n\tat org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:384)\n\tat org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:312)\n\tat org.apache.catalina.core.StandardHostValve.custom(StandardHostValve.java:394)\n\tat org.apache.catalina.core.StandardHostValve.status(StandardHostValve.java:253)\n\tat org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:175)\n\tat org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92)\n\tat org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)\n\tat org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)\n\tat org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:408)\n\tat org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)\n\tat org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:836)\n\tat org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1747)\n\tat org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)\n\tat java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\n\tat java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\n\tat org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)\n\tat java.lang.Thread.run(Thread.java:748)\n 
java.util.Base64$Encoder.encodeToString(byte[]) -> base64-enc

[BUG]: java.lang.NoSuchMethodException: `cn.huoxian.iast.api.HttpResponse.getResponseLength`

Preflight Checklist

I agree to follow the Code of Conduct that this project adheres to.
I have searched the issue tracker for an issue that matches the one I want to file, without success.
I am not looking for support or already pursued the available support channels without success.

Version

1.1.0

Installation Type

Official Docker Compose

Service Name

DongTai-agent-java

Describe the details of the bug and the steps to reproduce it

jdk 1.8.0_171
Tomcat 8.5.38
springboot 2.3.1.RELEASE

Additional Information

No response

Logs

java.lang.NoSuchMethodException: cn.huoxian.iast.api.HttpResponse.getResponseLength(java.lang.Integer)
        at java.lang.Class.getDeclaredMethod(Class.java:2130)
        at com.secnium.iast.core.handler.controller.impl.HttpImpl.getResponseMeta(HttpImpl.java:130)
        at com.secnium.iast.core.handler.graphy.GraphBuilder.getResponseMeta(GraphBuilder.java:35)
        at com.secnium.iast.core.handler.graphy.GraphBuilder.convertToReport(GraphBuilder.java:86)
        at com.secnium.iast.core.handler.graphy.GraphBuilder.buildAndReport(GraphBuilder.java:28)
        at com.secnium.iast.core.handler.EventListenerHandlers.leaveHttp(EventListenerHandlers.java:204)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at java.lang.iast.inject.Injecter.leaveHttp(Injecter.java:429)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:168)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:493)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
        at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:650)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
        at org.apache.catalina.connector.CoyoteAdapter.servic

	@Override
	public void check() {
	double unUserdRate = memUsedRate();
	int preStatus = this.engineManager.getRunningStatus();
	if (isStart(unUserdRate, preStatus)) {
	this.engineManager.start();
	this.engineManager.setRunningStatus(2);
	} else if (isStop(unUserdRate, preStatus)) {
	this.engineManager.stop();
	this.engineManager.setRunningStatus(3);
	} else if (isUninstall(unUserdRate, preStatus)) {
	this.engineManager.uninstall();
	this.engineManager.setRunningStatus(4);
	} else if (isInstall(unUserdRate, preStatus)) {
	this.engineManager.install();
	this.engineManager.setRunningStatus(1);
	}
	}