Skip to content

Commit 1aed2ad

Browse files
committed
Send attack.user with detected attack event
1 parent b8bc8dd commit 1aed2ad

File tree

3 files changed

+10
-4
lines changed

3 files changed

+10
-4
lines changed

agent_api/src/main/java/dev/aikido/agent_api/background/cloud/api/events/DetectedAttack.java

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@
33
import dev.aikido.agent_api.background.cloud.CloudConnectionManager;
44
import dev.aikido.agent_api.background.cloud.GetManagerInfo;
55
import dev.aikido.agent_api.context.ContextObject;
6+
import dev.aikido.agent_api.context.User;
67
import dev.aikido.agent_api.vulnerabilities.Attack;
78

89
import java.util.Map;
@@ -40,7 +41,8 @@ public record AttackData (
4041
// Auxiliary attack data :
4142
String module,
4243
boolean blocked,
43-
String stack
44+
String stack,
45+
User user
4446
) {};
4547

4648
public static DetectedAttackEvent createAPIEvent(Attack attack, ContextObject context, CloudConnectionManager connectionManager) {
@@ -56,7 +58,7 @@ public static DetectedAttackEvent createAPIEvent(Attack attack, ContextObject co
5658
);
5759
AttackData attackData = new AttackData(
5860
attack.kind, attack.operation, attack.source, attack.pathToPayload, attack.payload, attack.metadata,
59-
"MODULE?", connectionManager.shouldBlock(), attack.stack
61+
"module", connectionManager.shouldBlock(), attack.stack, attack.user
6062
);
6163
return new DetectedAttackEvent(
6264
"detected_attack", // type

agent_api/src/main/java/dev/aikido/agent_api/vulnerabilities/Scanner.java

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,10 @@ public static void scanForGivenVulnerability(Vulnerabilities.Vulnerability vulne
4444
exception = Optional.of(detectorResult.getException());
4545
// Report attack :
4646
reportAttack(
47-
new Attack(operation, vulnerability, source, path, detectorResult.getMetadata(), userInput, getCurrentStackTrace()), ctx
47+
new Attack(
48+
operation, vulnerability, source,
49+
path, detectorResult.getMetadata(), userInput,
50+
getCurrentStackTrace(), ctx.getUser()), ctx
4851
);
4952
break;
5053
}

agent_api/src/main/java/dev/aikido/agent_api/vulnerabilities/ssrf/SSRFDetector.java

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,8 @@ public Attack run(String hostname, int port, List<String> ipAddresses, String op
5454
"port", String.valueOf(port)
5555
),
5656
attackFindings.payload(),
57-
getCurrentStackTrace()
57+
getCurrentStackTrace(),
58+
context.getUser()
5859
);
5960
}
6061

0 commit comments

Comments
 (0)