https://cybertoolchain.io/tools/quark-engine New releases and features in quark-engine, tracked by The Cyber Toolchain. en Sat, 10 Oct 2026 06:22:28 GMT https://github.com/ev-flow/quark-engine/releases/tag/v26.10.1 https://github.com/ev-flow/quark-engine/releases/tag/v26.10.1 Sat, 10 Oct 2026 06:22:28 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v26.9.1 https://github.com/ev-flow/quark-engine/releases/tag/v26.9.1 Fri, 04 Sep 2026 14:08:16 GMT DexTrace becomes the default analysis library; fall back to Androguard with `--core-library androguard`. • Sets DexTrace as the default analysis library, with `--core-library androguard` available to fall back to Androguard. Breaking changes: • The default analysis library is now DexTrace instead of Androguard; workflows that relied on Androguard behaviour by default must add `--core-library androguard` to preserve the previous behaviour. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v26.8.1 https://github.com/ev-flow/quark-engine/releases/tag/v26.8.1 Sat, 08 Aug 2026 01:58:48 GMT Quark Engine v26.8.1 adds Claude Code `/quark` and `/quark-rule-gen` skills plus a new DexTrace core-library backend. • Adds Claude Code skills `/quark` and `/quark-rule-gen` for AI-assisted malware analysis and rule generation directly in Claude Code. • Adds DexTrace core-library backend for DEX analysis. • Adds Quark malware analysis reports for AhRat, AndroRAT, and Sova. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v26.7.1 https://github.com/ev-flow/quark-engine/releases/tag/v26.7.1 Thu, 02 Jul 2026 03:01:42 GMT v26.7.1 adds NGate & Cerberus detection rules and Phase 5 dynamic string resolution via DexTrace. • Enables Phase 5 dynamic string resolution via DexTrace, extending analysis to runtime-resolved obfuscated strings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v26.6.1 https://github.com/ev-flow/quark-engine/releases/tag/v26.6.1 Wed, 03 Jun 2026 13:54:00 GMT Quark Engine adds detection rules for BRATA, TangleBot, and Godfather Android malware families. • Adds new Quark detection rules for the BRATA malware family. • Adds new Quark detection rules for the TangleBot SMS-based spyware family. • Adds new Quark detection rules for the Godfather banking trojan family. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v26.5.1 https://github.com/ev-flow/quark-engine/releases/tag/v26.5.1 Wed, 06 May 2026 11:22:55 GMT Quark Engine v26.5.1 adds detection rules for Antidot, Arsink, and TrickMo malware families. • Adds new Quark rules covering the Antidot, Arsink, and TrickMo Android malware families. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v26.4.1 https://github.com/ev-flow/quark-engine/releases/tag/v26.4.1 Wed, 29 Apr 2026 11:11:45 GMT Quark Engine v26.4.1 adds analysis reports for Hydra and SharkBot malware families. • Adds analysis report for the Hydra malware family. • Adds analysis report for the SharkBot malware family. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v26.3.1 https://github.com/ev-flow/quark-engine/releases/tag/v26.3.1 Sat, 07 Mar 2026 02:44:16 GMT Quark Engine v26.3.1 adds automatic DEX checksum repair for androguard-based parsing and cuts memory usage. • Adds safe DEX checksum auto-repair flow for androguard-based parsing, allowing analysis of APKs with mismatched checksums without manual intervention. • Reduces memory usage by recording register usage instead of full register state, enabling analysis of larger samples under constrained environments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v26.2.1 https://github.com/ev-flow/quark-engine/releases/tag/v26.2.1 Fri, 06 Feb 2026 10:16:31 GMT Quark Engine v26.2.1 adds support for analyzing semi-corrupted Android APKs. • Supports analysis of semi-corrupted Android APKs that previously could not be processed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v26.1.1 https://github.com/ev-flow/quark-engine/releases/tag/v26.1.1 Wed, 07 Jan 2026 02:48:32 GMT Quark Engine v26.1.1 adds 5 new detection rules for the PhantomCard malware family. • Adds 5 new detection rules targeting the PhantomCard malware family. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v25.11.1 https://github.com/ev-flow/quark-engine/releases/tag/v25.11.1 Thu, 06 Nov 2025 04:12:28 GMT quark-engine v25.11.1 adds 3 new detection rules for the DawDropper Android malware family. • Adds 3 new detection rules targeting the DawDropper malware family. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v25.9.1 https://github.com/ev-flow/quark-engine/releases/tag/v25.9.1 Wed, 03 Sep 2025 11:22:57 GMT Quark Engine v25.9.1 adds CWE-359 detection APIs and 4 new GoldDream malware rules. • Adds Quark Script APIs and showcase for detecting CWE-359 (Exposure of Private Personal Information to an Unauthorized Actor). • Adds 4 new detection rules for the GoldDream Android malware family. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v25.2.1 https://github.com/ev-flow/quark-engine/releases/tag/v25.2.1 Thu, 06 Feb 2025 06:22:18 GMT Quark Engine adds optional Shuriken-Analyzer core library for Android APK analysis. • Adds optional Shuriken-Analyzer-based core library, selectable via `--core-library shuriken` flag. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v24.9.1 https://github.com/ev-flow/quark-engine/releases/tag/v24.9.1 Wed, 04 Sep 2024 13:36:59 GMT Quark Engine v24.9.1 adds an AI-powered agent with web UI for natural-language malware analysis. • New Quark Agent lets practitioners perform analyses using natural language queries instead of manual rule crafting. • New web interface for Quark Agent provides a browser-based front-end for agent-driven analysis workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v24.8.1 https://github.com/ev-flow/quark-engine/releases/tag/v24.8.1 Wed, 07 Aug 2024 03:13:20 GMT Quark Engine v24.8.1 introduces Quark Script Agent, an AI-powered member for automated script analysis. • Adds Quark Script Agent, a new AI-driven member that automates Quark Script tasks, with two included showcases. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v23.12.1 https://github.com/ev-flow/quark-engine/releases/tag/v23.12.1 Wed, 27 Dec 2023 01:15:00 GMT Adds Quark Script showcase for CWE-601; updates API documentation. • Add a new Quark Script showcase for CWE-601. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v23.11.1 https://github.com/ev-flow/quark-engine/releases/tag/v23.11.1 Wed, 29 Nov 2023 02:07:55 GMT quark-engine v23.11.1 adds a Quark Script showcase for CWE-502 and documentation for method wrappers • Add detailed explanations for the methods wrapper_lookup, show_comparison_graph, and call_graph. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v23.8.1 https://github.com/ev-flow/quark-engine/releases/tag/v23.8.1 Wed, 30 Aug 2023 14:53:16 GMT New Quark Script showcases and Visual Quark Scripts Program introduced • Introduce Visual Quark Scripts Program. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v23.5.1 https://github.com/ev-flow/quark-engine/releases/tag/v23.5.1 Wed, 31 May 2023 09:01:26 GMT Adds new Quark Script showcases for CWE-73, CWE-88, and CWE-925 • Add detailed explanations for method check_parameter and check_parameter_values. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v23.4.1 https://github.com/ev-flow/quark-engine/releases/tag/v23.4.1 Wed, 26 Apr 2023 07:27:41 GMT quark-engine v23.4.1 adds receiver component extraction from AndroidManifest.xml • Adds property receivers to show all receiver components defined in AndroidManifest.xml Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v23.3.1 https://github.com/ev-flow/quark-engine/releases/tag/v23.3.1 Tue, 28 Mar 2023 07:09:15 GMT Quark Engine v23.3.1 adds Quark Script cases for CWE-23 and CWE-338 and supports partial APK method searches. • Adds new Quark Script case for CWE-23 and CWE-338 • Makes Quark Script API `findMethodInAPK` compatible with partial search Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v23.2.1 https://github.com/ev-flow/quark-engine/releases/tag/v23.2.1 Wed, 22 Feb 2023 02:12:47 GMT Adds Quark Script cases for CWE-22, 295, 328, 489 • Add new Quark Script case for CWE-22, CWE-295, CWE-328, CWE-489(#460, #447, #448, #458). • Add detailed explanations for method `find_previous_method` and `find_intersection`. Check [here](https://quark-engine.readthedocs.io/en/latest/quark_method_reference.html) for the details. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v22.11.1 https://github.com/ev-flow/quark-engine/releases/tag/v22.11.1 Wed, 30 Nov 2022 02:43:29 GMT quark-engine v22.11.1 adds Quark Script APIs for detecting CWE-319 and CWE-327 • Add new Quark Script APIs to detect CWE-319 and CWE-327. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v22.10.1 https://github.com/ev-flow/quark-engine/releases/tag/v22.10.1 Wed, 26 Oct 2022 12:13:17 GMT Quark Engine v22.10.1 adds new detection APIs for CWE-532 and CWE-780 via Quark Script. • Introduces the Quark MIT Program as a new component Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v22.9.1 https://github.com/ev-flow/quark-engine/releases/tag/v22.9.1 Thu, 29 Sep 2022 02:24:11 GMT New Quark Script APIs for CWE-89, CWE-926, CWE-312, and CWE-749 detection in v22.9.1 • Add new Quark Script APIs to detect CWE-89, CWE-926, CWE-312, and CWE-749 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v22.7.1 https://github.com/ev-flow/quark-engine/releases/tag/v22.7.1 Wed, 27 Jul 2022 13:28:56 GMT Introduces Quark Script project and new detection APIs for CWE-94, CWE-798, and CWE-921 • Adds a new scripting framework called `Quark Script` to the engine • Adds APIs for detecting `CWE-94` in Android applications • Adds APIs for detecting `CWE-798` in Android applications • Adds APIs for detecting `CWE-921` in Android applications Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v22.6.1 https://github.com/ev-flow/quark-engine/releases/tag/v22.6.1 Wed, 29 Jun 2022 03:16:27 GMT Quark Engine v22.6.1 adds quark-rule-generate integration and API filtering in Radiocontrast. • `quark-rule-generate` feature integrated into Quark Engine • API filter added to Radiocontrast Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v22.5.1 https://github.com/ev-flow/quark-engine/releases/tag/v22.5.1 Wed, 25 May 2022 05:20:00 GMT Quark Engine v22.5.1 adds Quark web report visualization and recursive rule loading • Introduces the `quark web-report` command to generate a browser-based HTML visualization of analysis results. • Adds the `-R` / `--recursive` flag to quark commands, enabling rulesets (e.g., YAML files) to load nested directories of rule definitions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine https://github.com/ev-flow/quark-engine/releases/tag/v22.3.1 https://github.com/ev-flow/quark-engine/releases/tag/v22.3.1 Mon, 28 Mar 2022 14:50:28 GMT Adds a configurable limit for parallel analysis processes in Quark Engine • `quark-analysis` now supports limiting the number of processes for parallel analysis (#311 and #315) • Update analysis library for Rizin v0.3.0 and above Full history on Cyber Toolchain: https://cybertoolchain.io/tools/quark-engine