Security Study/Reversing

Mobile Application Reverse Engineering: MARA

𝓛𝓾𝓬𝓮𝓽𝓮_𝓢𝓽𝓮𝓵𝓵𝓪 2016. 12. 16.

728x90

Mobile Application Reverse engineering and Analysis Framework

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a tool that puts together commonly used mobile application reverse engineering tools, in order to make the task or reverse engineering and analysis easier and friendly to mobile application developers and security professionals.

Features supported

APK Reverse Engineering

Disassembling Dalvik bytecode to smali bytecode via baksmali and apktool
Disassembling Dalvik bytecode to java bytecode via enjarify
Decompiling APK to Java source code via jadx

APK Deobfuscation

APK deobfuscation via apk-deguard.com

APK Analysis

Parsing smali files for analysis via smalisca
Dump apk assets,libraries and resources
Extracting certificate data via openssl
Extract strings and app permissions via aapt
Identify methods and classes via ClassyShark
Scan for apk vulnerabilities via androbugs
Analyze apk for potential malicious behaviour via androwarn
Identify compilers, packers and obfuscators via APKiD
Extract execution paths, IP addresses, URL, URI, emails via regex

APK Manifest Analysis

Extract Intents
Extract exported activities
Extract receivers
Extract exported receivers
Extract Services
Extract exported services
Check if apk is debuggable
Check if apk allows backups
Check if apk allows sending of secret codes
Check if apk can receive binary SMS

Domain Analysis

Domain SSL scan via pyssltest and testssl
Website fingerprinting via whatweb

Security Analysis

Source code static analysis based on OWASP Top Mobile Top 10 and the OWASP Mobile Apps Checklist
MARA is capable of performing either single or mass analysis of apk, dex or jar files.

Installing MARA on Linux

Installing dependencies

MARA ships with a script that assists in downloading and installing the dependencies for each of the tools and components it ships with. Simply run the setup.sh script with sudo privileges and it will install them.

1. git clone https://github.com/xtiankisutsa/MARA_Framework

2. cd MARA_Framework

3. ./setup.sh

4. ./MARA.sh

[원본]https://n0where.net/mobile-application-reverse-engineering-mara/