MARA FRAMEWORK V0.2(BETA) – MOBILE APPLICATION REVERSE ENGINEERING & ANALYSIS FRAMEWORK.

Ken-Pachi / August 12, 2016 / Comments Off on Mara framework v0.2(beta) – Mobile Application Reverse Engineering & Analysis Framework. / Android Tools, Anti Malware/Virus – Malware Analysis, Encryption, Framework, Registry Analysis, Security Tools
Changelog v0.2(beta):
* Adding Preliminary Analysis (*new Features)
* Adding APK Manifest Analysis (*new Features)
* Tools Update
tools/editors/com.maskyn.fileeditor-59.apk
tools/editors/sublime-text_build-3114_amd64.deb
* setup.sh
* mara.sh
Mara Framework v0.2
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a tool that puts together commonly used mobile application reverse engineering toolsets, in order to make the task or reverse engineering and analysis easier and friendly to mobile application developers and security professionals.



Mara
Features supported:

* APK Reverse engineering
Disassembling Dalvik bytecode to smali bytecode via baksmali and apktool
Disassembling Dalvik bytecode to java bytecode via enjarify
Decompiling APK to Java source code via jadx

* Preliminary Analysis
arsing smali files for analysis via smalisca
Dump apk assets,libraries and resources
Extracting certificate data via openssl
Extract strings and app permissions via aapt
Identify methods and classes via ClassyShark
Scan for apk vulnerabilities via androbugs
Analyze apk for potential malicious behaviour via androwarn
Identify compilers, packers and obfuscators via APKiD
Extract execution paths, IP addresses, URL, URI, emails via regex
Domain SSL scan via pyssltest and testssl

* APK Manifest Analysis
Extract Intents
Extract exported activities
Extract receivers
Extract exported receivers
Extract Services
Extract exported services
Check if apk is debuggable
Check if apk allows backups
Check if apk allows sending of secret codes
Check if apk can receive binary SMS

Source : https://github.com/xtiankisutsa/MARA_Framework

 

Comments

Post a Comment

Popular posts from this blog

How To Hack WIFI WPS pin With Kali Linux

Image
Today I’m gonna tell you. HOW TO HACK WIFI WPS PIN. Kali Linux can be used for many things, but it probably is best known for its ability to penetration test, or hack wifi wps pin . There are hundreds of Windows applications that claim they can hack WPA , don’t get them! They’re just scams, used by professional hackers, to lure newbie or wannabe hackers into getting hacked themselves. Warning..!! WIFI hacking is illegal. “This tutorial is only for educational purposes. I am not responsible for any consequences.” Hack WIFI WPS PIN using reaver method. So lets Start Cracking Step 1:  Open Terminal and Find out the name of your wireless adapter. , type ifconfig on a terminal. See the result. (here my wireless adapter is ‘wlan0’).  Step 2:  Enable Monitor mode. Now, we use a tool called airmon-ng to create a virtual interface called mon. Just type. airmon-ng start wlan0 Step 3:  Type the following commands on terminal. airmon-ng check kill Step 4 :   To find WPS networks ,we'll
Read more

World’s Fastest Camera Takes 5 Trillion Photos Per Second, Can Pause Moving Light

Image
High-speed cameras taking 100,000 pictures in one second are enough to fascinate us. But what about a camera that can film at a rate of 5 trillion images per second. It’s created by the researchers Elias Kristensson and Andreas Ehn at the Lund University in Sweden. The camera can make light slow enough that it could be analyzed by humans. In other words, it can be used to record events happening in the 0.2 trillionths of a second. In 2011, a similar camera device was created by the MIT Media Lab. But it was slower and capable of capturing 1 trillion images per second. The researchers demonstrated the camera by filming photons of light traveling a distance equivalent to the thickness of a paper. The trillion camera works in a different way in comparison to the normal high-speed cameras. [youtube https://www.youtube.com/watch?v=2fjP02EpJac?feature=oembed&w=669&h=502] In the method, laser light pulses with a unique code are slashed on the subject. The reflected pulses captured by
Read more

creak – Poison, Reset, Spoof, Redirect MITM Script

Image
Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born as a didactic project for learning python language, I decline every responsibility for any abuse, including malevolent or illegal use of this code. Installation  1 2 3 $ git clone https : //github.com/codepr/creak.git $ cd creak $ python setup . py install or simply clone the repository and run the creak.py after all requirements are installed: 1 $ git clone https : //github.com/codepr/creak.git It is required to have installed pcap libraries for raw packet manipulations and dpkt module, for dns spoofing options is required to have installed dnet module from libdnet package, do not confuse it with pydnet (network evaluation tool) module. It can use also scapy if desired, can just be set in the c
Read more