{"repo":"bytedance/appshark","free":true,"listed":false,"github":"https://github.com/bytedance/appshark","clone":"git clone https://github.com/bytedance/appshark.git","description":"Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.","language":"Kotlin","stars":1752,"topics":["android","compliance","static-analysis","vulnerability"],"license":"Apache-2.0","category":"security-tools","readme_excerpt":"Document Index - 1.overview - 2.startup - 3.how to write rules - 4.how to find compliance problems use appshark - 5.a path traversal game - 6.argument - 7.engine config - 8.result - 9.faq AppShark Appshark is a static taint analysis platform to scan vulnerabilities in an Android app. Prerequisites Appshark requires a specific version of JDK -- JDK 11. After testing, it does not work on other LTS versions, JDK 8 and JDK 16, due to the dependency compatibility issue. Building/Compiling AppShark We assume that you are working in the root directory of the project repo. You can build the whole project with the gradle tool. After executing the above command, you will see an artifact file AppShark-0.1.2-all.jar in the directory build/libs . Running AppShark Like the previous step, we assume that you are still in the root folder of the project. You can run the tool with The config.json5 has the following configuration contents. Each JSON has these basic field. - apkPath: the path of the apk file to analyze - out: the path of the output directory - rules: specifies the rules, split by , . Default is all .json files in the $rulePath directory - rulePath: specifies the rule's parent directory, default is ./config/rules - maxPointerAnalyzeTime: the timeout duration in seconds set for the analysis started from an entry point - debugRule: specify the rule name that enables logging for debugging For more config field, please visit net.bytedance.security.app.ArgumentConfig If you provide a c","default_branch":null,"files":null,"tree":[],"storefront":"/r/bytedance","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/bytedance/appshark/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}