Quick Android Review Kit
This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. There is no need to root the test device, as this tool focuses on vulnerabilities that can be exploited under otherwise secure conditions. It is capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the vulnerabilities it finds. For more options please see the --help command. Results: A report is generated in JSON and can be built into other format types, to change the report type please use the --report-type flag. Installation: With pip (no security checks on requirements): ~ pip install --user qark # --user is only needed if not using a virtualenv ~ qark --help With requirements.txt (security checks on requirements): ~ git clone https://github.com/linkedin/qark ~ cd qark ~ pip install -r requirements.txt ~ pip install . --user # --user is only needed if not using a virtualenv
FEATURES
SIMILAR TOOLS
Powerful PowerShell script for identifying missing software patches for local privilege escalation vulnerabilities.
A repository containing hourly-updated data dumps of bug bounty platform scopes
Dnscan is a DNS reconnaissance tool that performs DNS scans, DNS cache snooping, and DNS amplification attack detection.
A tool for scanning Adobe Experience Manager instances for potential security vulnerabilities
An extensible, heuristic-based vulnerability scanning tool for installed npm packages.
A vulnerability assessment and management tool that uses patented technology to accurately identify vulnerabilities and prioritize them by risk.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.