Update python version to 3.10 in CI

.github/workflows/testQuarkScript.yml

@@ -20,33 +20,23 @@ jobs:
         git clone https://github.com/quark-engine/quark-engine.git
 
 
-    - name: Set up Python 3.9
+    - name: Set up Python 3.10
       uses: actions/setup-python@v4
       with:
-        python-version: 3.9
+        python-version: "3.10"
         cache: pip
         cache-dependency-path: quark-engine/setup.py
 
 
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
-        python -m pip install pytest rzpipe meson==0.62.0 ninja coverage ciphey frida objection
-        # Install graphviz & ninja
-        sudo apt-get -y install graphviz ninja-build
+        python -m pip install frida objection importlib_resources
+        # Install graphviz
+        sudo apt-get -y install graphviz
 
-        # Install Rizin
-
-        sudo git clone --branch v0.3.4 https://github.com/rizinorg/rizin /opt/rizin/
-        cd /opt/rizin/
-        meson build
-        ninja -C build
-        sudo ninja -C build install
-        sudo ldconfig -v
-        cd -
-
-        # Install click >= 8.0.0 for CLI supports
-        python -m pip install click==8.0.3
+        # Install click <=8.1.7 for CLI supports
+        python -m pip install "click<=8.1.7"
 
     - name: Install Quark-Engine
       run: |

CWE-312/CWE-312.py

@@ -1,5 +1,5 @@
 from quark.script.frida import runFridaHook
-from quark.script.ciphey import checkClearText
+from quark.script.ares import checkClearText
 
 APP_PACKAGE_NAME = "oversecured.ovaa"
 
@@ -23,4 +23,4 @@
         print(
             "The CWE-312 vulnerability is found. "
             f'The cleartext is "{secondParam}"'
-        )
+        )

CWE-312/README.md

@@ -28,12 +28,12 @@ vulnerability.
 First, we designed a [Frida](https://frida.re) script `agent.js` to hook
 the target method and get the arguments when the target method is
 called. Then we hook the method `putString` to catch its arguments.
-Finally, we use [Ciphey](https://github.com/Ciphey/Ciphey) to check if
+Finally, we use [Ares](https://github.com/bee-san/Ares) to check if
 the arguments are encrypted.
 
 ``` python
 from quark.script.frida import runFridaHook
-from quark.script.ciphey import checkClearText
+from quark.script.ares import checkClearText
 
 APP_PACKAGE_NAME = "oversecured.ovaa"