Skip to content

Commit ffd44c8

Browse files
authored
Optimize the document of Quark Script CWE-601 (#821)
1 parent e3cd5e2 commit ffd44c8

File tree

1 file changed

+12
-3
lines changed

1 file changed

+12
-3
lines changed

docs/source/quark_script.rst

Lines changed: 12 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2914,15 +2914,24 @@ Code of CWE-601 in ovaa.apk
29142914

29152915
We use the `ovaa.apk <https://github.com/oversecured/ovaa>`_ sample to explain the vulnerability code of CWE-601.
29162916

2917-
.. image:: https://imgur.com/I61pL2m.png
2917+
.. image:: https://i.postimg.cc/hjqKnKLN/2025-10-08-1-12-43.png
29182918

2919-
Quark Script: CWE-601.py
2920-
========================
2919+
2920+
CWE-601 Detection Process Using Quark Script API
2921+
=================================================
2922+
2923+
.. image:: https://i.postimg.cc/q75yxptk/2025-10-09-9-14-34.png
29212924

29222925
Let’s use the above APIs to show how the Quark script finds this vulnerability.
29232926

29242927
To detect the vulnerability, we use the API ``findMethodInAPK(samplePath, targetMethod)`` to find all the caller methods of ``startActivity``. Next, we examine the arguments of each method to discover the methods receiving external input. If a method receives external input but lacks proper input validation, the CWE-601 vulnerability is identified.
29252928

2929+
2930+
Quark Script: CWE-601.py
2931+
========================
2932+
2933+
.. image:: https://i.postimg.cc/wTwvm0Rm/2025-10-09-9-18-38.png
2934+
29262935
.. code-block:: python
29272936
29282937
from quark.script import findMethodInAPK

0 commit comments

Comments
 (0)