http://twd6bfktlkhwluhj2ghjthx55pnp2dcuuhf6qqjz7vm2krsmwpz6crad.onion/appshark-to-scan-vulnerabilities-in-android-app/index.html
You can run the tool with $ java -jar build/libs/AppShark-0.1.1-all.jar config/config.json5 The config.json5 has the following configuration contents. {
"apkPath": "/Users/apks/app1.apk",
"out": "out",
"rules": "unZipSlip.json",
"maxPointerAnalyzeTime": 600
} Each JSON field is explained below. apkPath: the path of the apk file to analyze out: the path of the output directory rules: the path(s) of the rule file(s), can be more than 1 rules maxPointerAnalyzeTime : the timeout duration in seconds...