Haeter

Results 29 issues of Haeter

**Describe the bug** For now, the Rizin-based analysis library relies on a field called `flagname` (from the Rizin command `isj`) to get the class name of a method. However, this...

issue-processing-state-06

**Is your feature request related to a problem? Please describe.** Currently, Quark has its method to support analyzing APKs with [Multidex](https://developer.android.com/studio/build/multidex) . However, this method has two disadvantages - 1....

issue-processing-state-06

**Describe the bug** As the title, that makes Quark crashes in Kali Linux. The reason is that the Debian package requires its dependencies are in the .deb format. However, rz-pipe,...

issue-processing-state-04

**Is your feature request related to a problem? Please describe.** Dalvik architecture uses two opcodes, `packed-switch` and `sparse-switch`, and their table structures to construct the switch statement. By parsing the...

RzAnalysis
test-required
DEX

Hi, there. I recently found the `is` command gives incomplete return types for some methods in APKs. Since that information may mislead the user to incorrect classes, I think it...

RzBin
DEX

Hi. I found there may be an issue parsing method references in multidex APKs. Some of the xrefs provided by Rizin are wrong, especially those pointing to external libraries. Since...

DEX

#### Description Please refer to #324. This PR adds the following Quark script API to detect exposed dangerous methods or functions([CWE-749](https://cwe.mitre.org/data/definitions/749.html)). 1. `methodInstance.getArguments(none)` **Test Plans** - [x] All tests passed

pr-processing-state-05

**Describe the bug** Currently, the CLI shows an outdated path to the built-in ruleset. After running `freshquark`, we have the following output. ![](https://i.imgur.com/z6M9dgH.png) The last line shows that the path...

#### Description Please refer to #324. This PR adds the following three Quark script APIs to support comparison of register values. 1. `getPackageName(samplePath)` 2. `getLength(argument)` 3. `methodInstance.compareValueOf(valueA, valueB)` **Test Plans**...

pr-processing-state-04

Close #582. The PR adds two Quark Script APIs, `getInstances` and `execute`, to support executing APK's method with custom arguments.

pr-processing-state-05