Merge pull request #635 from bytedance/feat-memshell-count

feat memshell count
bytedance · Jun 12, 2024 · 4dc39ae · 4dc39ae
2 parents a2d4316 + a6b4ed2
commit 4dc39ae
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/rasp/jvm/JVMProbe/src/main/java/com/security/smith/SmithProbe.java b/rasp/jvm/JVMProbe/src/main/java/com/security/smith/SmithProbe.java
@@ -676,6 +676,7 @@ public void onScanAllClass() {
                     classFilter.setStackTrace(Thread.currentThread().getStackTrace());
 
                     client.write(Operate.SCANCLASS, classFilter);
+                    client.write(Operate.COUNTMEMSHELL, classFilter);
                     SmithLogger.logger.info("send metadata: " + classFilter.toString());
                     sendClass(clazz, classFilter.getTransId());
 

diff --git a/rasp/jvm/JVMProbe/src/main/java/com/security/smith/SmithProbeProxy.java b/rasp/jvm/JVMProbe/src/main/java/com/security/smith/SmithProbeProxy.java
@@ -156,6 +156,7 @@ public void sendMetadataClass(Class<?> cla) {
         classFilter.setStackTrace(Thread.currentThread().getStackTrace());
         if (client != null) {
             client.write(Operate.SCANCLASS, classFilter);
+            client.write(Operate.COUNTMEMSHELL, classFilter);
             SmithLogger.logger.info("send metadata: " + classFilter.toString());
             SmithProbe.getInstance().sendClass(cla, classFilter.getTransId());
         }
@@ -255,6 +256,7 @@ public void checkAddFilterPre(int classID, int methodID, Object[] args) {
                     classFilter.setStackTrace(Thread.currentThread().getStackTrace());
                     if (client != null) {
                         client.write(Operate.SCANCLASS, classFilter);
+                        client.write(Operate.COUNTMEMSHELL, classFilter);
                         SmithLogger.logger.info("send metadata: " + classFilter.toString());
                         SmithProbe.getInstance().sendClass(clazz, classFilter.getTransId());
                     }
@@ -529,6 +531,7 @@ public void checkWildflyaddServletPre(int classID, int methodID, Object[] args)
                         classFilter.setStackTrace(Thread.currentThread().getStackTrace());
                         if (client != null) {
                             client.write(Operate.SCANCLASS, classFilter);
+                            client.write(Operate.COUNTMEMSHELL, classFilter);
                             SmithLogger.logger.info("send metadata: " + classFilter.toString());
                             SmithProbe.getInstance().sendClass(servletClass, classFilter.getTransId());
                         }

diff --git a/rasp/jvm/JVMProbe/src/main/java/com/security/smith/client/Operate.java b/rasp/jvm/JVMProbe/src/main/java/com/security/smith/client/Operate.java
@@ -19,4 +19,5 @@ public class Operate {
     public static final int CLASSUPLOADSTART = 15;      // start to send class
     public static final int CLASSUPLOAD = 16;
     public static final int CLASSUPLOADEND = 17;        // end to send class
+    public static final int COUNTMEMSHELL = 100;        // count memshell
 }