QARK (Quick Android Review Kit) is a Python security scanner to identify Android application vulnerabilities. QARK can take APK or Java as source input, and do the reverse engineering automatically for further security analysis. It's easy to install and use. We will be using the QARK to analyze the goatdroid.apk in the following steps.
Static secure code scanning with QARK
Step 1 – install QARK
The installation can be easily done by python PIP, as follows:
$ pip install qark
Step 2 – APK scanning with QARK
To scan the APK, execute the python script...