Skip to content

Commit 7b1593d

Browse files
authored
Optimize the document of Quark Script CWE-925 (#808)
* Document enhance for Quark Script CWE-925 * Fix images and improve clarity in quark_script.rst * Fix image links in quark_script.rst
1 parent a10e96d commit 7b1593d

File tree

1 file changed

+12
-3
lines changed

1 file changed

+12
-3
lines changed

docs/source/quark_script.rst

Lines changed: 12 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2330,15 +2330,24 @@ We use the `InsecureBankv2.apk <https://github.com/dineshshetty/Android-Insecure
23302330

23312331
.. image:: https://imgur.com/V7VtL3x.jpg
23322332

2333-
Quark Script CWE-925.py
2334-
========================
2333+
2334+
CWE-925 Detection Process Using Quark Script API
2335+
=================================================
2336+
2337+
.. image:: https://i.postimg.cc/Ls0Kw749/2025-09-17-4-19-22.png
23352338

23362339
First, we use API ``getReceivers(samplePath)`` and ``receiverInstance.isExported()`` to find all the exported receivers defined in the APK.
23372340

2338-
Second, we use API ``checkMethodCalls(samplePath, targetMethod, checkMethods)`` to check if the ``onReceive`` method of every exported receiver obtains intent action.
2341+
Second, we use API ``checkMethodCalls(samplePath, targetMethod, checkMethods)`` to check if the ``onReceive`` method of every exported receiver obtains an intent action.
23392342

23402343
If **No**, it could imply that the APK does not verify intent properly, potentially leading to a CWE-925 vulnerability.
23412344

2345+
2346+
Quark Script CWE-925.py
2347+
========================
2348+
2349+
.. image:: https://i.postimg.cc/dQhts2gN/2025-09-17-4-17-51.png
2350+
23422351
.. code-block:: python
23432352
23442353
from quark.script import checkMethodCalls, getReceivers

0 commit comments

Comments
 (0)