Close ISSUE #94 ( DongTai-Engine )

core/plugins/strategy_headers.py

@@ -9,6 +9,7 @@
 
 from celery.apps.worker import logger
 from django.db.models import Q
+from dongtai.models.project import IastProject
 from dongtai.models.strategy import IastStrategyModel
 from dongtai.models.vulnerablity import IastVulnerabilityModel
 from dongtai.utils import const
@@ -101,6 +102,7 @@ def save_vul(vul_type, method_pool, position=None, data=None):
         method_pool_id=method_pool.id
     ).first()
     timestamp = int(time.time())
+    IastProject.objects.filter(id=method_pool.agent.bind_project_id).update(latest_time=timestamp)
     if vul:
         vul.req_header = method_pool.req_header
         vul.req_params = method_pool.req_params

core/tasks.py

@@ -117,7 +117,6 @@ def search_and_save_vul(engine, method_pool_model, method_pool, strategy):
             taint_value=taint_value
         )
     else:
-        # 更新漏洞状态为已忽略/误报
         try:
             if isinstance(method_pool_model, MethodPool):
                 return
@@ -140,6 +139,7 @@ def search_and_save_vul(engine, method_pool_model, method_pool, strategy):
                 verify_time=timestamp,
                 update_time=timestamp
             )
+            IastProject.objects.filter(id=method_pool.agent.bind_project_id).update(latest_time=timestamp)
         except Exception as e:
             logger.info(f'漏洞数据处理出错，原因：{e}')
 

signals/handlers/vul_handler.py

@@ -9,6 +9,7 @@
 import requests
 from celery.apps.worker import logger
 from django.dispatch import receiver
+from dongtai.models.project import IastProject
 from dongtai.models.replay_queue import IastReplayQueue
 
 from dongtai.models.notify_config import IastNotifyConfig
@@ -239,6 +240,7 @@ def save_vul(vul_meta, vul_level, strategy_id, vul_stack, top_stack, bottom_stac
         agent=vul_meta.agent,
         method_pool_id=vul_meta.id
     ).first()
+    IastProject.objects.filter(id=vul_meta.agent.bind_project_id).update(latest_time=timestamp)
     if vul:
         vul.req_header = vul_meta.req_header
         vul.req_params = vul_meta.req_params
@@ -327,6 +329,8 @@ def handler_replay_vul(vul_meta, vul_level, strategy_id, vul_stack, top_stack, b
         vul.latest_time = timestamp
         vul.save(update_fields=['status_id', 'latest_time'])
 
+        IastProject.objects.filter(id=vul_meta.agent.bind_project_id).update(latest_time=timestamp)
+
         IastReplayQueue.objects.filter(id=kwargs['replay_id']).update(
             state=const.SOLVED,
             result=const.RECHECK_TRUE,

test/core/tasks.py

@@ -17,7 +17,7 @@ def test_search_vul_from_replay_method_pool(self):
         search_vul_from_replay_method_pool(method_id)
 
     def test_search_vul_from_method_pool(self):
-        method_pool_id = 66235
+        method_pool_id = 68871
         from core.tasks import search_vul_from_method_pool
         search_vul_from_method_pool(method_pool_id)