DongTai-engine

English

项目介绍

DongTai-Engine用于处理DongTai探针采集到的数据，功能如下：

1. 根据方法池数据和污点跟踪算法分析HTTP/HTTPS/RPC请求中是否存在漏洞
2. 定期处理漏洞验证请求
3. 定期更新组件中存在的漏洞
4. 定期清理过期的日志数据
5. 定期维护探针检测引擎的状态

部署方案

基础服务：MySql、Redis

基础服务配置如下：

官方镜像部署

1. 拉取官方镜像

$ docker pull registry.cn-beijing.aliyuncs.com/secnium/iast-saas-engine:latest

2. 创建配置文件：/etc/dongtai/config.ini，内容如下：

[mysql]
host = 127.0.0.1
port = 3306
name = dongtai_webapi
user = dongtai
password = dongtai-iast

[redis]
host = 127.0.0.1
port = 6379
password = 123456
db = 0

; 下面的内容未使用，保持默认
[engine]
url = http://engine_url

[smtp]
server = server
user = user
password = password
from_addr = from_addr
ssl = False
cc_addr = cc_addr

[aliyun_oss]
access_key = access_key
access_key_secret = access_key

3. 启动dongtai-engine容器并映射配置文件

$ docker run -d --name dongtai-engine -v /etc/dongtai/config.ini:/opt/dongtai/engine/conf/config.ini --restart=always secnium/iast-saas-engine:latest

4. 启动dongtai-engine-task容器并映射配置文件

$ docker run -d --name dongtai-engine-task -v /etc/dongtai/config.ini:/opt/dongtai/engine/conf/config.ini --restart=always secnium/iast-saas-engine:latest bash /opt/dongtai/engine/docker/entrypoint.sh

构建镜像部署

1. 构建镜像

$ docker build -t secnium/iast-saas-engine:latest .

2. 创建配置文件：/etc/dongtai/config.ini，内容如下：

[mysql]
host = 127.0.0.1
port = 3306
name = dongtai_webapi
user = dongtai
password = dongtai-iast

[redis]
host = 127.0.0.1
port = 6379
password = 123456
db = 0

; 下面的内容未使用，保持默认
[engine]
url = http://engine_url

[smtp]
server = server
user = user
password = password
from_addr = from_addr
ssl = False
cc_addr = cc_addr

[aliyun_oss]
access_key = access_key
access_key_secret = access_key

3. 启动dongtai-engine容器并映射配置文件

$ docker run -d --name dongtai-engine -v /etc/dongtai/config.ini:/opt/dongtai/engine/conf/config.ini --restart=always secnium/iast-saas-engine:latest

4. 启动dongtai-engine-task容器并映射配置文件

$ docker run -d --name dongtai-engine-task -v /etc/dongtai/config.ini:/opt/dongtai/engine/conf/config.ini --restart=always secnium/iast-saas-engine:latest bash /opt/dongtai/engine/docker/entrypoint.sh

文档

• 官方文档
• 洞态官网

网友提问