qark | Tool to look for several security related Android | Security library

by linkedin Python Version: v0.9-alpha.10 License: Non-SPDX

X-Ray Key Features Code Snippets Community Discussions(4)Vulnerabilities Install Support

kandi X-RAY | qark Summary

qark is a Python library typically used in Security applications. qark has no bugs, it has no vulnerabilities, it has build file available and it has medium support. However qark has a Non-SPDX License. You can download it from GitHub.

Tool to look for several security related Android application vulnerabilities

Support

Quality

Security

License

Reuse

Support

qark has a medium active ecosystem.

It has 2988 star(s) with 655 fork(s). There are 135 watchers for this library.

It had no major release in the last 12 months.

There are 61 open issues and 168 have been closed. On average issues are closed in 104 days. There are 15 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of qark is v0.9-alpha.10

Quality

qark has 0 bugs and 0 code smells.

Security

qark has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

qark code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

qark has a Non-SPDX License.

Non-SPDX licenses can be open source with a non SPDX compliant license, or non open source licenses, and you need to review them closely before use.

Reuse

qark releases are available to install and integrate.

Build file is available. You can build the component from source.

qark saves you 45605 person hours of effort in developing the same functionality from scratch.

It has 53569 lines of code, 3624 functions and 345 files.

It has high code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi has reviewed qark and discovered the below as its top functions. This is intended to give you an instant insight into qark implemented functionality, and help decide if they suit your requirements.

Implementation of exploit
Writes a key value pair to an XML file
Build the apk
Write dictionary to properties file
Update the manifest
Return the manifest out of a list of files
Get the package name from a manifest
Get the minSdk version from the manifest
Runs the decompiler function
Unpack the apk file
Unzip an APK file
Runs the dex2jar command
Run apktool
Escape a Windows path
Make files executable
Configures APKTool
Runs a coroutine
Check if a method invocation is valid
Validates a method invocation
Run the coroutine
Process received SSL errors
Check if the server certificate is empty
Return the minimal SDK from a list of files
Run a coroutine
Runs the generator
Determine if this coroutine can run

Get all kandi verified functions for this library.

qark Key Features

No Key Features are available at this moment for qark.

qark Examples and Code Snippets

No Code Snippets are available at this moment for qark.

Community Discussions

Trending Discussions on qark

Installation of QARK in ubuntu 18.04

Qark reports a PendingIntent security issue on java files: zzaup, zzst, zze, MediaButtonReceiver, TaskStackBuilder

calling another application from bash in python multiprocessing is very slow

How to specify the path to access a file in both windows and linux uniquely using slash seperator

QUESTION

Installation of QARK in ubuntu 18.04

Asked 2020-May-13 at 14:12

I've tried to install QARK in my Ubuntu 18.04 Desktop machine. I was following some docs provided by Linked In but it has not worked for me.

...

ANSWER

Answered 2020-Apr-30 at 17:51

Prerequisite

Python 2.7.17-1

pip 9.0.1

openjdk version "10.0.2" 2018-07-17 (java home environment variable hast to be set)

Download QARK from github

$ git clone https://github.com/linkedin/qark

$ cd qark

$ pip install -r requirements.txt

$ python setup.py install

To test APK :

$ sudo qark --apk path/to/my.apk

It will take some time, the html report will be generating on the following path

/home//.local/lib/python2.7/site-packages/qark/report/report.html

Source https://stackoverflow.com/questions/54460123

QUESTION

Qark reports a PendingIntent security issue on java files: zzaup, zzst, zze, MediaButtonReceiver, TaskStackBuilder

Asked 2019-Sep-30 at 15:54

I'm working on an already existing app and I had to test the code security vulnerabilities using QARK (Quick Android Review Kit).

When I run this tool it reports this problems related to Pending Intents:
In these Java classes:
- myApp/classes_dex2jar/com/google/android/gms/internal/zzaup.java
- myApp/classes_dex2jar/com/google/android/gms/internal/zzst.java
- myApp/classes_dex2jar/com/google/android/gms/common/zze.java
- myApp/classes_dex2jar/android/support/v4/media/session/MediaButtonReceiver.java
- myApp/classes_dex2jar/android/support/v4/app/TaskStackBuilder.java

With the same warning:

Implicit Intent: localIntent used to create instance of PendingIntent. A malicious application could potentially intercept, redirect and/or modify (in a limited manner) this Intent. Pending Intents retain the UID of your application and all related permissions, allowing another application to act as yours.
File: myApp/classes_dex2jar/[folder structure for each java class listed above].java
More details: https://www.securecoding.cert.org/confluence/display/android/DRD21-J.+Always+pass+explicit+intents+to+a+PendingIntent

I really have no idea what to do. In my code there isn't any of these classes, neither PendingIntent. (Only 1 implicit intent to open a simple link in browser, nothing else!)

Any suggestion???

...

ANSWER

Answered 2019-Sep-30 at 15:54

I answer myself so that I can help those who need it in the future.

Simply, the report that was given to me was generated with an old version of QARK (beginning of July 2018, version 1.2, the current one is 4.0.)

Searching on the internet I found this issue (now closed) in which it is said that:

"The blog posts are old and use the release version of QARK. In the newer version (with more checks, faster execution, and less false positives) we have a simple report for now. [...]".

Good luck to all and good development!

Source https://stackoverflow.com/questions/57837122

QUESTION

calling another application from bash in python multiprocessing is very slow

Asked 2019-Feb-25 at 10:28

I'm trying to use qark analyzer to analyze a set of apks in multiprocessing using python.

Trying to analyze a set of 100 apks I've found that the application I wrote to automatyze the analysis is VERY SLOW. Last analysis I ran stayed in execution for about 20 hours and then I manually turned off my pc, as it had become unusable, probably due to the heavy RAM usage... The analysis was even harmful, messing up my Windows partition and preventing me to see data inside the partition and Windows to boot anymore (I run the analysis from ubuntu, but into my Windows partition for a matter of free disk space)

The core of the class executed in the process is something very similar to

...

ANSWER

Answered 2019-Feb-25 at 10:28

What may have happened to your Windows partition is that the qark's output JSON files were written in some vital area in the disk, corrupting some data structure like the MFT (in case you use NTFS).

In your code you spawn 10 worker threads. These are both memory and processing intensive threads. Unless you have got more than 10 cores, this will consume all your processing power, trigger hyperthreading (if available) and render the system too slow.

To get the maximum performance from your system, you would have to run one thread per working core. To do that, run:

Source https://stackoverflow.com/questions/54863362

QUESTION

How to specify the path to access a file in both windows and linux uniquely using slash seperator

Asked 2017-Jan-19 at 06:26

I have an application written in java in which forward slash to specify the file and directory path . The file and directory can access when the application run on linux. But when it run on windows it says an error that the specified path is incorrect.How to uniquely specify the path of the file.

In java iam using this command:

...

ANSWER

Answered 2017-Jan-18 at 06:39

You need to escape characters for escape sequences. More details here - Escape Characters

In Windows, You need to defined a escape character for file sepeator with backslash - as below.

Source https://stackoverflow.com/questions/41712652

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install qark

You can download it from GitHub.
You can use qark like any standard Python library. You will need to make sure that you have a development environment consisting of a Python distribution including header files, a compiler, pip, and git installed. Make sure that your pip, setuptools, and wheel are up to date. When using pip it is generally recommended to install packages in a virtual environment to avoid changes to the system.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: