quark-engine
Contents:
Installation
Quark Script
Quark MIT Program
Quark Report
Add Rules
Rule Generation
Integration
Development
Contribution
Organization
Updating Documentation
Quark-Engine Inside
quark
FAQ
quark-engine
»
Index
Index
A
|
B
|
C
|
D
|
E
|
F
|
G
|
H
|
I
|
J
|
L
|
M
|
N
|
O
|
P
|
Q
|
R
|
S
|
T
|
U
|
V
|
W
|
Y
A
access_flags (quark.core.struct.methodobject.MethodObject attribute)
activities (quark.core.apkinfo.AndroguardImp property)
(quark.core.interface.baseapkinfo.BaseApkinfo property)
(quark.core.rzapkinfo.RizinImp property)
Activity (class in quark.script)
add_table_row() (quark.core.quark.Quark method)
AGET_KIND() (quark.evaluator.pyeval.PyEval method)
AGET_WIDE_KIND() (quark.evaluator.pyeval.PyEval method)
all_methods (quark.core.apkinfo.AndroguardImp property)
(quark.core.interface.baseapkinfo.BaseApkinfo property)
(quark.core.rzapkinfo.RizinImp property)
all_strings (quark.forensic.forensic.Forensic attribute)
analysis (quark.core.apkinfo.AndroguardImp attribute)
analysis() (quark.report.Report method)
analyze_multi_file() (quark.forensic.vt_analysis.VTAnalysis method)
analyze_single_file() (quark.forensic.vt_analysis.VTAnalysis method)
AndroguardImp (class in quark.core.apkinfo)
android_apis (quark.core.apkinfo.AndroguardImp property)
(quark.core.interface.baseapkinfo.BaseApkinfo property)
(quark.core.rzapkinfo.RizinImp property)
api (quark.core.struct.ruleobject.RuleObject property)
apk (quark.core.apkinfo.AndroguardImp attribute)
(quark.forensic.forensic.Forensic attribute)
apk_filename (quark.core.interface.baseapkinfo.BaseApkinfo attribute)
(quark.core.rzapkinfo.RizinImp attribute)
apk_filepath (quark.core.interface.baseapkinfo.BaseApkinfo attribute)
(quark.core.rzapkinfo.RizinImp attribute)
apply_rules() (quark.core.parallelquark.ParallelQuark method)
APUT_KIND() (quark.evaluator.pyeval.PyEval method)
APUT_WIDE_KIND() (quark.evaluator.pyeval.PyEval method)
axml_size (quark.core.axmlreader.AxmlReader property)
AxmlException
AxmlReader (class in quark.core.axmlreader)
B
BaseApkinfo (class in quark.core.interface.baseapkinfo)
Behavior (class in quark.script)
(class in quark.script.frida)
behaviorOccurList (quark.script.frida.FridaResult property)
(quark.script.QuarkResult property)
BINOP_KIND() (quark.evaluator.pyeval.PyEval method)
black() (in module quark.utils.colors)
blue() (in module quark.utils.colors)
bold() (in module quark.utils.colors)
BytecodeObject (class in quark.core.struct.bytecodeobject)
C
cache (quark.core.struct.methodobject.MethodObject attribute)
calculate() (quark.utils.weight.Weight method)
call_graph() (in module quark.utils.graph)
call_graph_analysis_list (quark.core.analysis.QuarkAnalysis attribute)
called_by_func (quark.core.struct.registerobject.RegisterObject property)
CAST_TYPE() (quark.evaluator.pyeval.PyEval method)
change_api_key() (quark.forensic.vt_analysis.VTAnalysis method)
check_api_key_available() (quark.forensic.vt_analysis.VTAnalysis method)
check_item (quark.core.struct.ruleobject.RuleObject attribute)
check_parameter() (quark.core.quark.Quark method)
check_parameter_on_single_method() (quark.core.quark.Quark method)
check_parameter_values() (quark.core.quark.Quark static method)
check_sequence() (quark.core.quark.Quark method)
checkClearText() (in module quark.script.ciphey)
class_name (quark.core.struct.methodobject.MethodObject attribute)
className (quark.script.Method property)
clean_result() (quark.core.analysis.QuarkAnalysis method)
close() (quark.core.parallelquark.ParallelQuark method)
color() (in module quark.utils.colors)
colorful_report() (in module quark.utils.colors)
CONST() (quark.evaluator.pyeval.PyEval method)
CONST_CLASS() (quark.evaluator.pyeval.PyEval method)
CONST_FOUR() (quark.evaluator.pyeval.PyEval method)
CONST_HIGHSIXTEEN() (quark.evaluator.pyeval.PyEval method)
CONST_SIXTEEN() (quark.evaluator.pyeval.PyEval method)
CONST_STRING() (quark.evaluator.pyeval.PyEval method)
CONST_WIDE() (quark.evaluator.pyeval.PyEval method)
CONST_WIDE_HIGHSIXTEEN() (quark.evaluator.pyeval.PyEval method)
CONST_WIDE_SIXTEEN() (quark.evaluator.pyeval.PyEval method)
CONST_WIDE_THIRTY_TWO() (quark.evaluator.pyeval.PyEval method)
contains() (in module quark.utils.tools)
convertMethodToString() (in module quark.script.objection)
core_library (quark.core.interface.baseapkinfo.BaseApkinfo attribute)
(quark.core.rzapkinfo.RizinImp attribute)
count_confidence_rule_number() (in module quark.webreport.generate)
crime (quark.core.struct.ruleobject.RuleObject property)
crime_description (quark.core.analysis.QuarkAnalysis attribute)
current_type (quark.core.struct.registerobject.RegisterObject property)
custom_methods (quark.core.apkinfo.AndroguardImp property)
(quark.core.interface.baseapkinfo.BaseApkinfo property)
(quark.core.rzapkinfo.RizinImp property)
cyan() (in module quark.utils.colors)
D
dalvikvmformat (quark.core.apkinfo.AndroguardImp attribute)
data (quark.core.axmlreader.ResValue attribute)
DefaultRuleset (class in quark.script)
descriptor (quark.core.struct.methodobject.MethodObject attribute)
(quark.script.Method property)
descriptor_to_androguard_format() (in module quark.utils.tools)
download() (in module quark.freshquark)
E
entry_point() (in module quark.freshquark)
extract_content() (in module quark.utils.regex)
extract_file() (in module quark.utils.regex)
extract_ip() (in module quark.utils.regex)
extract_url() (in module quark.utils.regex)
F
file_size (quark.core.axmlreader.AxmlReader property)
filename (quark.core.interface.baseapkinfo.BaseApkinfo property)
filesize (quark.core.interface.baseapkinfo.BaseApkinfo property)
FILLED_NEW_ARRAY_KIND() (quark.evaluator.pyeval.PyEval method)
filter_api_by_usage_count() (in module quark.utils.tools)
find_api_usage() (quark.core.quark.Quark method)
find_intersection() (quark.core.quark.Quark method)
find_method() (quark.core.apkinfo.AndroguardImp method)
(quark.core.interface.baseapkinfo.BaseApkinfo method)
(quark.core.rzapkinfo.RizinImp method)
find_previous_method() (quark.core.quark.Quark method)
findMethodInAPK() (in module quark.script)
findMethodInCaller() (quark.script.QuarkResult method)
first_api (quark.core.analysis.QuarkAnalysis attribute)
Forensic (class in quark.forensic.forensic)
FridaResult (class in quark.script.frida)
full_name (quark.core.struct.methodobject.MethodObject property)
fullName (quark.script.Method property)
G
generate_json_report() (quark.core.quark.Quark method)
generate_rule() (quark.radiocontrast.RadioContrast method)
(quark.rulegeneration.RuleGeneration method)
get_all_labels() (in module quark.webreport.generate)
get_all_strings() (quark.forensic.forensic.Forensic method)
get_analysis_report_html() (quark.webreport.generate.ReportGenerator method)
get_android_api() (quark.forensic.forensic.Forensic method)
get_api_keys_list() (quark.forensic.vt_analysis.VTAnalysis method)
get_arguments_from_argument_str() (in module quark.utils.tools)
get_attributes() (quark.core.axmlreader.AxmlReader method)
get_base64() (quark.forensic.forensic.Forensic method)
get_content() (quark.forensic.forensic.Forensic method)
get_file() (quark.forensic.forensic.Forensic method)
get_file_md5() (quark.forensic.vt_analysis.VTAnalysis method)
get_five_stages_labels() (in module quark.webreport.generate)
get_ip() (quark.forensic.forensic.Forensic method)
get_json_report() (quark.core.quark.Quark method)
get_json_report_html() (in module quark.webreport.generate)
get_method_bytecode() (quark.core.apkinfo.AndroguardImp method)
(quark.core.interface.baseapkinfo.BaseApkinfo method)
(quark.core.rzapkinfo.RizinImp method)
get_method_pattern() (quark.evaluator.pyeval.PyEval static method)
get_obj_list() (quark.core.struct.tableobject.TableObject method)
get_parenthetic_contents() (in module quark.utils.tools)
get_report() (quark.report.Report method)
get_reports() (quark.forensic.vt_analysis.VTAnalysis method)
get_rule_classification_data() (in module quark.utils.output)
get_rule_generate_editor_html() (quark.webreport.generate.ReportGenerator method)
get_score() (quark.core.struct.ruleobject.RuleObject method)
get_string() (quark.core.axmlreader.AxmlReader method)
get_strings() (quark.core.apkinfo.AndroguardImp method)
(quark.core.interface.baseapkinfo.BaseApkinfo method)
(quark.core.rzapkinfo.RizinImp method)
get_subclasses (quark.core.interface.baseapkinfo.BaseApkinfo property)
get_table() (quark.core.struct.tableobject.TableObject method)
get_url() (quark.forensic.forensic.Forensic method)
get_wrapper_smali() (quark.core.apkinfo.AndroguardImp method)
(quark.core.interface.baseapkinfo.BaseApkinfo method)
(quark.core.rzapkinfo.RizinImp method)
get_xml_tree() (quark.core.axmlreader.AxmlReader method)
getActivities() (in module quark.script)
getAllStrings() (quark.script.QuarkResult method)
getArguments() (quark.script.Method method)
getMethodsInArgs() (quark.script.Behavior method)
getMethodXrefFrom() (quark.script.QuarkResult method)
getMethodXrefTo() (quark.script.QuarkResult method)
getParamValues() (quark.script.Behavior method)
(quark.script.frida.Behavior method)
getXrefFrom() (quark.script.Method method)
getXrefTo() (quark.script.Method method)
green() (in module quark.utils.colors)
H
handleCapturedEvent() (quark.script.frida.MethodCallEventDispatcher method)
hash_index (quark.core.struct.registerobject.RegisterObject property)
hash_table (quark.core.struct.tableobject.TableObject attribute)
hasIntentFilter() (quark.script.Activity method)
hasString() (quark.script.Behavior method)
(quark.script.frida.Behavior method)
hasUrl() (quark.script.Behavior method)
(quark.script.frida.Behavior method)
High (quark.utils.weight.LEVEL_INFO attribute)
hookMethod() (quark.script.objection.Objection method)
I
init_label_report_table() (in module quark.core.analysis)
init_pretty_table() (in module quark.core.analysis)
insert() (quark.core.struct.tableobject.TableObject method)
insert_genrule_report_html() (quark.webreport.generate.ReportGenerator method)
insert_radarchart_html() (quark.webreport.generate.ReportGenerator method)
insert_report_html() (quark.webreport.generate.ReportGenerator method)
insert_sample_information_html() (quark.webreport.generate.ReportGenerator method)
INVOKE_CUSTOM() (quark.evaluator.pyeval.PyEval method)
INVOKE_DIRECT() (quark.evaluator.pyeval.PyEval method)
INVOKE_INTERFACE() (quark.evaluator.pyeval.PyEval method)
INVOKE_POLYMORPHIC() (quark.evaluator.pyeval.PyEval method)
INVOKE_STATIC() (quark.evaluator.pyeval.PyEval method)
INVOKE_SUPER() (quark.evaluator.pyeval.PyEval method)
INVOKE_VIRTUAL() (quark.evaluator.pyeval.PyEval method)
INVOKE_VIRTUAL_RANGE() (quark.evaluator.pyeval.PyEval method)
is_android_api() (quark.core.struct.methodobject.MethodObject method)
isArgFromMethod() (quark.script.Behavior method)
isArgumentTrue() (in module quark.script.utils)
isExported() (quark.script.Activity method)
J
json_report (quark.core.analysis.QuarkAnalysis attribute)
L
label (quark.core.struct.ruleobject.RuleObject property)
label_report_table (quark.core.analysis.QuarkAnalysis attribute)
level_1_result (quark.core.analysis.QuarkAnalysis attribute)
level_2_result (quark.core.analysis.QuarkAnalysis attribute)
level_3_result (quark.core.analysis.QuarkAnalysis attribute)
level_4_result (quark.core.analysis.QuarkAnalysis attribute)
level_5_result (quark.core.analysis.QuarkAnalysis attribute)
LEVEL_INFO (class in quark.utils.weight)
lightblue() (in module quark.utils.colors)
lightyellow() (in module quark.utils.colors)
logger() (in module quark.evaluator.pyeval)
logo() (in module quark.logo)
LOW (quark.utils.weight.LEVEL_INFO attribute)
lowerfunc() (quark.core.apkinfo.AndroguardImp method)
(quark.core.interface.baseapkinfo.BaseApkinfo method)
(quark.core.rzapkinfo.RizinImp method)
M
magenta() (in module quark.utils.colors)
md5 (quark.core.interface.baseapkinfo.BaseApkinfo property)
Method (class in quark.script)
method_recursive_search() (quark.core.quark.Quark method)
(quark.radiocontrast.RadioContrast method)
MethodCallEventDispatcher (class in quark.script.frida)
methodName (quark.script.Method property)
MethodObject (class in quark.core.struct.methodobject)
mnemonic (quark.core.struct.bytecodeobject.BytecodeObject property)
Moderate (quark.utils.weight.LEVEL_INFO attribute)
module
quark
quark.cli
quark.config
quark.core
quark.core.analysis
quark.core.apkinfo
quark.core.axmlreader
quark.core.interface
quark.core.interface.baseapkinfo
quark.core.parallelquark
quark.core.quark
quark.core.rzapkinfo
quark.core.struct
quark.core.struct.bytecodeobject
quark.core.struct.methodobject
quark.core.struct.registerobject
quark.core.struct.ruleobject
quark.core.struct.tableobject
quark.evaluator
quark.evaluator.pyeval
quark.forensic
quark.forensic.forensic
quark.forensic.vt_analysis
quark.freshquark
quark.logo
quark.radiocontrast
quark.report
quark.rulegeneration
quark.script
quark.script.ciphey
quark.script.frida
quark.script.objection
quark.script.utils
quark.utils
quark.utils.colors
quark.utils.graph
quark.utils.output
quark.utils.pprint
quark.utils.regex
quark.utils.tools
quark.utils.weight
quark.webreport
quark.webreport.generate
MOVE_KIND() (quark.evaluator.pyeval.PyEval method)
MOVE_RESULT() (quark.evaluator.pyeval.PyEval method)
MOVE_RESULT_OBJECT() (quark.evaluator.pyeval.PyEval method)
MOVE_RESULT_WIDE() (quark.evaluator.pyeval.PyEval method)
N
name (quark.core.axmlreader.ResValue attribute)
(quark.core.struct.methodobject.MethodObject attribute)
namespace (quark.core.axmlreader.ResValue attribute)
NEG_AND_NOT_KIND() (quark.evaluator.pyeval.PyEval method)
NEW_ARRAY() (quark.evaluator.pyeval.PyEval method)
NEW_INSTANCE() (quark.evaluator.pyeval.PyEval method)
O
Objection (class in quark.script.objection)
output_parent_function_graph() (in module quark.utils.output)
output_parent_function_json() (in module quark.utils.output)
output_parent_function_table() (in module quark.utils.output)
P
ParallelQuark (class in quark.core.parallelquark)
parameter (quark.core.struct.bytecodeobject.BytecodeObject property)
parent_wrapper_mapping (quark.core.analysis.QuarkAnalysis attribute)
permission (quark.core.struct.ruleobject.RuleObject property)
permissions (quark.core.apkinfo.AndroguardImp property)
(quark.core.interface.baseapkinfo.BaseApkinfo property)
(quark.core.rzapkinfo.RizinImp property)
pop() (quark.core.struct.tableobject.TableObject method)
print_error() (in module quark.utils.pprint)
print_info() (in module quark.utils.pprint)
print_success() (in module quark.utils.pprint)
print_warning() (in module quark.utils.pprint)
PyEval (class in quark.evaluator.pyeval)
Q
quark
module
Quark (class in quark.core.quark)
quark.cli
module
quark.config
module
quark.core
module
quark.core.analysis
module
quark.core.apkinfo
module
quark.core.axmlreader
module
quark.core.interface
module
quark.core.interface.baseapkinfo
module
quark.core.parallelquark
module
quark.core.quark
module
quark.core.rzapkinfo
module
quark.core.struct
module
quark.core.struct.bytecodeobject
module
quark.core.struct.methodobject
module
quark.core.struct.registerobject
module
quark.core.struct.ruleobject
module
quark.core.struct.tableobject
module
quark.evaluator
module
quark.evaluator.pyeval
module
quark.forensic
module
quark.forensic.forensic
module
quark.forensic.vt_analysis
module
quark.freshquark
module
quark.logo
module
quark.radiocontrast
module
quark.report
module
quark.rulegeneration
module
quark.script
module
quark.script.ciphey
module
quark.script.frida
module
quark.script.objection
module
quark.script.utils
module
quark.utils
module
quark.utils.colors
module
quark.utils.graph
module
quark.utils.output
module
quark.utils.pprint
module
quark.utils.regex
module
quark.utils.tools
module
quark.utils.weight
module
quark.webreport
module
quark.webreport.generate
module
QuarkAnalysis (class in quark.core.analysis)
QuarkResult (class in quark.script)
R
RadioContrast (class in quark.radiocontrast)
red() (in module quark.utils.colors)
register_name (quark.core.struct.registerobject.RegisterObject property)
RegisterObject (class in quark.core.struct.registerobject)
registers (quark.core.struct.bytecodeobject.BytecodeObject property)
remove_dup_list() (in module quark.utils.tools)
Report (class in quark.report)
ReportGenerator (class in quark.webreport.generate)
Res_value_type (class in quark.core.axmlreader)
ResValue (class in quark.core.axmlreader)
ret_type (quark.core.interface.baseapkinfo.BaseApkinfo attribute)
(quark.core.rzapkinfo.RizinImp attribute)
retreive_report() (quark.forensic.vt_analysis.VTAnalysis method)
RizinCache (in module quark.core.rzapkinfo)
RizinImp (class in quark.core.rzapkinfo)
rule_filename (quark.core.struct.ruleobject.RuleObject attribute)
RuleGeneration (class in quark.rulegeneration)
RuleObject (class in quark.core.struct.ruleobject)
Ruleset (class in quark.script)
run() (quark.core.parallelquark.ParallelQuark method)
(quark.core.quark.Quark method)
runFridaHook() (in module quark.script.frida)
runQuarkAnalysis() (in module quark.script)
S
scan_file() (quark.forensic.vt_analysis.VTAnalysis method)
score (quark.core.struct.ruleobject.RuleObject property)
score_sum (quark.core.analysis.QuarkAnalysis attribute)
second_api (quark.core.analysis.QuarkAnalysis attribute)
select_label_menu() (in module quark.utils.graph)
set_progress() (quark.forensic.vt_analysis.VTAnalysis method)
show_call_graph() (quark.core.quark.Quark method)
show_comparison_graph() (in module quark.utils.graph)
show_detail_report() (quark.core.quark.Quark method)
show_label_report() (quark.core.quark.Quark method)
show_rule_classification() (quark.core.quark.Quark method)
show_summary_report() (quark.core.quark.Quark method)
show_table() (quark.evaluator.pyeval.PyEval method)
startWatchingMethodCall() (quark.script.frida.MethodCallEventDispatcher method)
stopWatchingMethodCall() (quark.script.frida.MethodCallEventDispatcher method)
subclass_relationships (quark.core.apkinfo.AndroguardImp property)
(quark.core.rzapkinfo.RizinImp property)
summary_report_table (quark.core.analysis.QuarkAnalysis attribute)
superclass_relationships (quark.core.apkinfo.AndroguardImp property)
(quark.core.interface.baseapkinfo.BaseApkinfo property)
(quark.core.rzapkinfo.RizinImp property)
T
table() (in module quark.utils.pprint)
TableObject (class in quark.core.struct.tableobject)
type (quark.core.axmlreader.ResValue attribute)
TYPE_ATTRIBUTE (quark.core.axmlreader.Res_value_type attribute)
TYPE_DIMENSION (quark.core.axmlreader.Res_value_type attribute)
TYPE_DYNAMIC_ATTRIBUTE (quark.core.axmlreader.Res_value_type attribute)
TYPE_DYNAMIC_REFERENCE (quark.core.axmlreader.Res_value_type attribute)
TYPE_FIRST_COLOR_INT (quark.core.axmlreader.Res_value_type attribute)
TYPE_FIRST_INT (quark.core.axmlreader.Res_value_type attribute)
TYPE_FLOAT (quark.core.axmlreader.Res_value_type attribute)
TYPE_FRACTION (quark.core.axmlreader.Res_value_type attribute)
type_histroy (quark.core.struct.registerobject.RegisterObject property)
TYPE_INT_BOOLEAN (quark.core.axmlreader.Res_value_type attribute)
TYPE_INT_COLOR_ARGB4 (quark.core.axmlreader.Res_value_type attribute)
TYPE_INT_COLOR_ARGB8 (quark.core.axmlreader.Res_value_type attribute)
TYPE_INT_COLOR_RGB4 (quark.core.axmlreader.Res_value_type attribute)
TYPE_INT_COLOR_RGB8 (quark.core.axmlreader.Res_value_type attribute)
TYPE_INT_DEC (quark.core.axmlreader.Res_value_type attribute)
TYPE_INT_HEX (quark.core.axmlreader.Res_value_type attribute)
TYPE_LAST_COLOR_INT (quark.core.axmlreader.Res_value_type attribute)
TYPE_LAST_INT (quark.core.axmlreader.Res_value_type attribute)
TYPE_NULL (quark.core.axmlreader.Res_value_type attribute)
TYPE_REFERENCE (quark.core.axmlreader.Res_value_type attribute)
TYPE_STRING (quark.core.axmlreader.Res_value_type attribute)
U
update_rule_buffer() (in module quark.cli)
upperfunc() (quark.core.apkinfo.AndroguardImp method)
(quark.core.interface.baseapkinfo.BaseApkinfo method)
(quark.core.rzapkinfo.RizinImp method)
V
validate_base64() (in module quark.utils.regex)
validate_ip_address() (in module quark.utils.regex)
validate_url() (in module quark.utils.regex)
value (quark.core.axmlreader.ResValue attribute)
(quark.core.struct.registerobject.RegisterObject property)
VTAnalysis (class in quark.forensic.vt_analysis)
W
Weight (class in quark.utils.weight)
weight_sum (quark.core.analysis.QuarkAnalysis attribute)
white() (in module quark.utils.colors)
wrapper_lookup() (in module quark.utils.graph)
Y
yellow() (in module quark.utils.colors)