Haeter
Haeter
@pulorsok. Thanks for the suggestion. I have updated the documents for each function in the files.
Sounds nice! Yara format provides more complex conditions to define behaviors. I think it can expand the flexibility of Quark rules. Hi @PaulNicolasHunter. If you are interested in this idea,...
Thanks for the suggestion, @pulorsok. I agree that inputting the answers is more intuitive than choosing the flags. I will update the PR.
Thank @pulorsok for the nice suggestion. I've updated the docstring in #335. Once we merge that PR, I will rebase the commits to ensure all methods here are well-documented.
Hi @javixeneize Thank you for reporting this issue! We will start to investigate it soon. If there is anything new, I will keep you updated :)
Hi @javixeneize, I tested the sample on Linux and got the same result as well. It looks like the OS killed Quark because running out of memory. Therefore, I think...
Hi @realsdx Thank you for reporting this! We will start investigating it. And I will keep you updated if there is anything new.
Hi @realsdx It's a problem caused by an API change in the recent Rizin. The rework of the Dex parser in Rizin v0.3.0 has changed the display format of binaries....
The CI failed since the field `lib` used in this PR is a feature of Rizin v0.4.x. Therefore, this PR should be postponed until #334 is resolved.
Moreover, implementing Quark Script is not complex work, but it brings more potential to the GSoC proposal. For example, apply this feature to identify possible malware, which could be a...