bytedance / appshark

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.
Apache License 2.0
1.49k stars 165 forks source link

Running multiple rules and apps #28

Closed R3zk0n closed 1 year ago

R3zk0n commented 1 year ago

Hi, Thankyou for open sourcing this tool. Its wonderful and I really enjoy how fast it is, i am still learning writing the rules correctly at the moment but the "Tutorial" for path traversal helped alot!

Is it possible to run the engine with multiple rules and apks? I tried to use "Rule1, Rule2" but it appears to error out, maybe something i am missing?

Thankyou!

nkbai commented 1 year ago

this is a sample:

{
  //apk to anlayze
  "apkPath": "/Users/bai/dev/tmp/BypassPathTraversal/apk/app-debug.apk",
  //result output directory
  "out": "out",
  "rules": "ContentProviderPathTraversal.json,broadcastIMEI.json",
  "maxPointerAnalyzeTime": 600,
  //print more info about this rule
  "debugRule": "unZipSlip"
}

appshark supports multiple rules, but don't support multiple apks at the same time.

R3zk0n commented 1 year ago

Ah thankyou, Im trying to write a rule for setResult issue, however I cant seem to get the format correctly, I tried to sign up to the LARK channel but it says its an invalid QR code, is there place to discuss writing rules? :)

nkbai commented 1 year ago

I tried to sign up to the LARK channel but it says its an invalid QR code Did you scan this qr code with lark?

R3zk0n commented 1 year ago

Yes sir!

nkbai commented 1 year ago

Yes sir!

can you show me the error result? I just tested it and there is no problem with this QR code.

R3zk0n commented 1 year ago

Ah i was scanning in the wrong place! apologies. Closing the ticket :)