K2 Agent Supported Components

This page covers all the supported test applications by K2 Agent.

OS Distributions (For the Base image of test application)

Version

Kernel

Docker

Remark

Result

CentOS 7

Linux 3.10.0-957.10.1.el7.x86_64

18.09.5

Supported applications were tested. Attacks were reported on the cloud.

PASS

CentOS 7.2.1511

Linux 3.10.0-327.13.1.el7.x86_64

18.09.6

Supported applications were tested. Attacks were reported on the cloud.

PASS

CentOS 7.3.1611

Linux 3.10.0-514.2.2.el7.x86_64

18.09.6

Supported applications were tested. Attacks were reported on the cloud.

PASS

CentOS 7.4.1708

Linux 3.10.0-693.2.2.el7.x86_64

18.09.6

Supported applications were tested. Attacks were reported on the cloud.

PASS

CentOS 7.5.1804

Linux 3.10.0-862.el7.x86_64

18.09.6

Supported applications were tested. Attacks were reported on the cloud.

PASS

CentOS 7.6.1810

Linux 3.10.0-957.el7.x86_64

18.09.6

Supported applications were tested. Attacks were reported on the cloud.

PASS

CentOS 8

Linux 3.10.0-957.el7.x86_64

19.03.12

Supported applications were tested. Attacks were reported on the cloud.

PASS

Fedora 27

Linux 4.13.16-300.fc27.x86_64

18.09.0

Supported applications were tested. Attacks were reported on the cloud.

PASS

Fedora 28

Linux 4.20.16-100.fc28.x86_64

18.09.6

Supported applications were tested. Attacks were reported on the cloud.

PASS

Fedora 29

Linux 5.0.5-200.fc29.x86_64

18.09.6

Supported applications were tested. Attacks were reported on the cloud.

PASS

Fedora 30

Linux 5.0.11-300.fc30.x86_64

19.03.0-beta5

Supported applications were tested. Attacks were reported on the cloud.

PASS

Ubuntu 16.04

Linux 4.4.0-1079-aws

18.09.6

Supported applications were tested. Attacks were reported on the cloud.

PASS

Ubuntu 18.04

Linux 4.15.0-1039-aws

18.09.2

Supported applications were tested. Attacks were reported on the cloud.

PASS

Ubuntu 19.04

Linux 5.0.0-1004-aws

18.09.6

Supported applications were tested. Attacks were reported on the cloud.

PASS

Ubuntu 20.04

Linux 5.0.0-1004-aws

18.09.6

Supported applications were tested. Attacks were reported on the cloud.

PASS

RHEL 7.6

Linux 3.10.0-1127.19.1.el7.x86_64

19.03.12

Supported applications were tested. Attacks were reported on the cloud.

PASS

RHEL 7.7

Linux 3.10.0-1127.19.1.el7.x86_64

19.03.12

Supported applications were tested. Attacks were reported on the cloud.

PASS

RHEL 7.8

Linux 3.10.0-1127.19.1.el7.x86_64

19.03.12

Supported applications were tested. Attacks were reported on the cloud.

PASS

RHEL 8.1

Linux 3.10.0-1127.19.1.el7.x86_64

19.03.12

Supported applications were tested. Attacks were reported on the cloud.

PASS

Amazon Linux 2

4.14 or Higher

19.03.12

Supported applications were tested. Attacks were reported on the cloud.

PASS

Docker

Docker CE Compatibility Matrix

  • Docker Compatibility Matrix of K2 Agent with Different Docker Versions and Supported Storage Drivers.

  • Docker Version

    overlay2

    devicemapper

    overlay

    19.03.1

    Yes

    Yes

    No

    19.03.0

    Yes

    Yes

    No

    18.09.8

    Yes

    Yes

    No

    18.09.7

    Yes

    Yes

    No

    18.09.6

    Yes

    Yes

    No

    18.09.5

    Yes

    Yes

    No

    18.09.4

    Yes

    Yes

    No

    18.09.3

    Yes

    Yes

    No

    18.09.2-ce

    Yes

    Yes

    No

    18.09.1-ce

    Yes

    Yes

    No

    18.09.0-ce

    Yes

    Yes

    No

    18.06.1.ce

    Yes

    Yes

    No

    18.06.0.ce

    Yes

    Yes

    No

    Note: Docker version below 18.06.0 are not supported.

Language Agents:

Java Agent

Java Builds

  • This matrix gives an overview of which Java builds are supported by K2 Agent

    JDK Build

    JDK Version

    Static Attachment

    Dynamic Attachment

    Oracle JDK

    1.8.0.222

    Yes

    Yes

    OpenJDK

    1.8.0.222

    Yes

    Yes

    Adopt OpenJDK

    1.8.0.222

    Yes

    Yes

    RedHat OpenJDK

    1.8.0.222

    Yes

    Yes

    Azul Zulu

    1.8.0_222-b10

    Yes

    Yes

    Amazon Corretto

    8.222.10.1

    Yes

    Yes

    IBM

    1.8.0_211

    Yes

    No

OpenJDK Versions

  • This Matrix gives an overview of which Java versions are supportable by K2 Agent

Java Version (Runtime Environment →)

Application Build ↓

Java 8

Java 9

Java 10

Java 11

Java 12

Java 8

yes

yes

yes

yes

yes

Java 9

-

yes

yes

yes

yes

Java 10

-

-

yes

yes

yes

Java 11

-

-

-

yes

yes

Java 12

-

-

-

-

yes

Servers

  • Tomcat

    1. Tomcat 7: 7.0.6, 7.0.12, 7.0.19, 7.0.23, 7.0.42, 7.0.55, 7.0.76, 7.0.94

    2. Tomcat 8.5: 8.5.4, 8.5.9, 8.5.11, 8.5.27, 8.5.38, 8.5.41

    3. Tomcat 9: 9.0.1, 9.0.2, 9.0.4, 9.0.6, 9.0.7, 9.0.8, 9.0.10, 9.0.12, 9.0.13, 9.0.14, 9.0.20

  • Jetty

    1. Jetty 9.2: 9.2.28, 9.2.22, 9.2.14, 9.2.11, 9.2.10, 9.2.3, 9.2.0

    2. Jetty 9.3: 9.3.27, 9.3.25, 9.3.20, 9.3.14, 9.3.11, 9.3.8, 9.3.0

    3. Jetty 9.4: 9.4.18, 9.4.14, 9.4.12, 9.4.11, 9.4.8, 9.4.6, 9.4.0

  • IBM WebSphere Liberty:- 19.0.0.9 19.0.0.8 19.0.0.7 19.0.0.6 19.0.0.5 19.0.0.4 19.0.0.3

  • IBM WebSphere Traditional:- 8.5.5.15

  • Weblogic: 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0, 12.2.1.3.0 (On Host) 12.2.1.3, 12.1.3 (On Docker)

  • JBoss: Wildfly: 17.0.1.Final, 17.0.0.Final, 16.0.0.Final, 15.0.1.Final, 15.0.0.Final, 14.0.1.Final, 14.0.0.Final, 13.0.0.Final, 12.0.0.Final, 10.1.0.Final, 10.0.0.Final, 9.0.2.Final, 9.0.1.Final, 8.2.1.Final, 9.0.0.Final, 8.2.0.Final, 8.1.0.Final Jboss EAP: eap-7.2.0, eap-7.1.0, eap-7.0.0

  • Adobe Experience Manager(AEM): 6.5

Frameworks

  • JSP servlet

  • Struts

  • Struts2

  • Spring Boot

  • Spring MVC

Databases

  • More Details and version-specific test reports can be found at: Database Connector Compatibility Matrix

    • MySQL: 5.6, 5.7, 8.0

    • MongoDb: 3.2.22, 3.4.24, 3.617, 4.0.17, 4.2.5

    • MSSQL MS SQL 2017 server

    • Oracle: 18c, 12c, 11g

    • PostgreSQL 8,9, 10, 11

    • HSQL 1.8.0.10, 2.3.4

**Deprecated APIs from JDBC Drivers are not supported

**Supported MongoDB JDBC Driver Versions : 3.6.4+

K2-Node Agent support

OS: Ubuntu, CentOs.

Vulnerabilities: SQLI, NOSQLI, RCE, RCI, PATH TRAVERSAL, FILE INTEGRITY, SSRF, FILE UPLOAD, STORED XSS, REFLECTED XSS, LDAP, XPATH, UNTRUSTED DESERIALSATION. Databases: Mysql, Postgres, Oracle, MongoDB, SQLITE3 Servers/versions: NODE 8.x to Node 14.x (All versions in Active and Maintenance LTS status) Frameworks: express 4.x and above, KOA & HAPI 17.x to 18.x Third-party: BlueBird3.x, Sequelize, mongoose, generic-pool, multer.

K2-PHP Agent support

OS: Ubuntu

Vulnerabilities: SQLI, RCE, File Access, SSRF Databases: Mysql Versions: PHP 7 and above Servers: Apache Frameworks:

K2-Ruby Agent support

OS: Ubuntu,CentOS Vulnerabilities: SQLI, RCE, RCI, PATH TRAVERSAL, FILE INTEGRITY, SSRF, FILE UPLOAD, REFLECTED XSS, LDAP, XPATH, UNTRUSTED DESERIALSATION. Databases: Mysql, Postgres, Sqlite, AuroraDB Frameworks : Rails, Sinatra Application Servers:

Puma

  • Multi Threaded Mode

  • Cluster Mode

Phusion Passenger

  • Nginx+Passenger

    • Standalone mode (with nginx)

    • Nginx Mode+ Passenger (use ruby as like mod_php)

      • Dynamic scaling of Ruby Application Process

      • Static pool of Ruby Application Process

      • Direct Spawn Method & Smart Spawn Method

  • Apache+Passenger

    • Dynamic scaling of Ruby Application Process

    • Static pool of Ruby Application Process

Unicorn

  • Unicorn(no reverse proxy)

  • Niginx+Unicorn

Last updated

Was this helpful?