YuShiang Dang
YuShiang Dang
Engineer
Telecom Technology Center

Currently an engineer at the Telecom Technology Center, and serves as the Quark Script Team Lead within Quark Engine. He has presented related achievements at internationally renowned cybersecurity conferences such as BlackHat Asia Arsenal 2021, 2024.

SPEECH
5/14 (Tue.) 13:00 - 13:30 4F AIoT & Hardware Security Zone AIoT & Hardware Security Summit
Quark Script - Dig Vulnerabilities in the BlackBox

Quark Script is a tool designed to detect black-box vulnerabilities in Android, which was presented at BlackHat Asia Arsenal 2024. It features three main characteristics :

  • Creativity and Innovation : Delving deep into black-box vulnerability discovery, resolving automation issues, providing user-friendly and practical APIs, and encouraging users to script detection with creativity and innovation.
  • Dynamic and Static Analysis : Integration of static analysis tools (such as Quark itself) and dynamic analysis tools (such as Frida).
  • Reusable and Shareable : Once a user creates a Quark Script, it can be applied to analyze different targets and shared with other users.