MARA homepage, documents and downloads - mobile application reverse engineering framework - OSCHINA - Chinese open source technology exchange community

MARA is a reverse engineering and analysis framework for mobile applications. It combines the commonly used mobile application reverse engineering and analysis tools to test mobile applications to resist the mobile security threat of OWASP (Open Web Application Security Project).

Supported Features

APK Reverse Engineering

Disassemble Dalvik bytecode into smali bytecode (using baksmali And apktool ）
Disassemble Dalvik bytecode into java bytecode（ enjarify ）
Decompile APK into Java source code (using jadx ）

APK Anti aliasing

Anti confusion of APK (Using http://www.apk-deguard.com/ )

APK analysis

Parse the smali file for analysis (using smalisca ）
Dump APK assets, libraries and resources
Extract certificate data (using openssl ）
Extract string and application permissions (use aapt)
Identify methods and classes (using ClassyShark ）
Scan for apk vulnerabilities (using androbugs ）
branch Analysis of APK's potential malicious behavior (using androwarn ）
Identify compilers, wrappers, and obfuscators (using APKiD ）
Extract execution path, IP address, URL, URI, e-mail (use regular expression)

APK Manifest analysis

Extract Intents
Extract exported activities
Extraction receiver
Extract Exported Receivers
Fetch Service
Extract exported services
Check whether apk can be debugged
Check whether apk allows backup
Check whether apk allows sending passwords
Check Whether APK can receive binary SMS

Domain analysis

Perform a domain SSL scan (using pyssltest And testssl ）
Website fingerprint identification (using whatweb ）

safety analysis

Based on OWASP Top Mobile Top 10 And Static analysis of source code of OWASP Mobile Apps Checklist
MARA can execute apk, dex or jar files single or of large number analysis.

Longki 2024-06-28 11:29

Advertisement is the enemy of all users. 360 people will die if they touch it. Xiaomi mobile phones are also testing the water. All kinds of hidden advertisements will kill themselves sooner or later.

Leibniz gnaws apples 2024-06-28 14:44

Basic functions, such as formatting SQL, cannot be used

You can also use coupons to buy a house 2024-06-28 15:53

As long as it can be sewn well, it is immortal, like a science geek. Hahaha

_____Lex 2024-06-28 14:59

It's really a compact version! Even formatted sql needs enterprise edition, let alone exporting excel. The structure is compared

Youyouzi with Tomatoes 2024-05-30 16:53

There are off the shelf open source products available. Do I need a garbage to keep the bottom?

who

Who will fight me for three hundred rounds 2024-06-28 11:14

Shouldn't it be restarted when it is down? Why are you looking so good? Do you want to have a little game on it, so that the blue screen can accompany you for a lifetime without restarting.

GDWhisperer 2024-05-15 17:23

I transferred tens of thousands of yuan to my own account, which was under risk control. How did I do this? The bank should be responsible for this 😂

Stephen 421 2024-06-12 10:37

If I write a script that allows AI to generate images according to various keywords 24 hours a day, I can sit at home and wait to collect money

Ma Nong Little Fatty Brother 2024-05-16 14:40

I give you six seconds. I give you six moves with the same effect in the martial arts contest, which shows the invincibility and confidence of the master

One code Yma 2024-05-09 09:58

Recently, I often go to interviews. People who hate Ali background most regard me as a fool, even though I am a fool

Old Goodall 2024-06-28 15:27

It is hoped that the compact version will remove the modeling function and only provide basic management functions, such as SQL formatting, structure comparison, and various exports.

RustDesk 2024-06-28 12:58

We should continue to communicate with them

wei2011 2024-06-28 14:30

I am also using Fast Spark. I have tried to compare it with Wenxin Yiyan before. I feel that the performance of Spark is OK

Brother Mark, it's me 2024-06-28 23:16

Where is the automatic certificate update now? Download and replace every time?

RustDesk 2024-06-28 12:59

It is solved in the new version of testlight

from now on 2024-06-28 09:48

Do you need trust?

Whisper the wind over the horizon 2024-05-20 13:19

I also despise this kind of behavior, but what kind of brain circuit does it take to rise to the national level?

Li Yinghui 2024-05-09 16:40

Buddhism has a good word, evil opinion. In dealing with the world, it is meaningless to draw conclusions from preset positions; It is also important to receive good logic training.

zhy 2024-05-16 13:16

At the end of Shannon is Nong

Single structure 2024-05-11 10:09

Selected as Open Source China's disgrace pillar

Ai East 2024-06-28 20:38

More and more perfect This is a real ORM framework!!!

monkey_cici 2024-05-09 00:25

My I9 CPU, 64GB memory module and 3080Ti computer are inferior to the top configuration of 19999 on a tablet

Shazi199 2024-06-28 19:36

It's still heidisiql

Happy LeapFrog 2024-05-18 09:18

But the question is: "What's the use of this for ordinary Android users?" Now the answer seems to be: "Almost nothing.".

crystalsis 2024-06-18 15:06

The comment area is very interesting. What's the difference between writing kernel panic in white on a black background and writing it in white on a blue background? It's also "epic retrogression"

Intermarch 2024-05-30 13:42

800 million yuan was used for the database industry base of Damon China, and 603 million yuan was used for the construction project of Damon Research Institute. It raised 2.351 billion yuan and 1.403 billion yuan for infrastructure construction. six hundred and sixty-six

You can also use coupons to buy a house 2024-06-28 15:52

It seems that it can be compiled into an exe file

Yoona520 2024-05-17 16:34

Zhou Hongyi is now living more and more like a clown. If he stays behind the scenes, he has to become an online celebrity. Can you learn from Lei Jun?

jayson888 2024-06-28 15:49

I support Cangjie language, and development needs everyone's support

Yeah, for 2024-05-17 13:42

That's too right. Old Zhou can't control Google, but he can control 360. Do not do to others what you do not want. You should open source all 360 products first.

infoworld 2024-05-11 15:12

Universities should use open source free software instead of commercial ones. In this way, hands and feet will not be tied technically.

Who will fight me for three hundred rounds 2024-06-28 11:17

It's just a packing monster.

day

Tianxin 8206 2024-06-28 16:45

Make use of it. After all, it's much better than using pirated copies

Qin Liming 2024-05-11 09:12

be devoid of any sense of shame

Heaven is no better than home 2024-06-28 13:25

Sewing is not important. Performance and efficiency are important. Application scenario ecology

xiaoqibabby 2024-05-15 17:36

The bank is strongly required to be responsible for

Small

Pony lane 2024-06-28 16:02

It's too streamlined

kakai 2024-05-10 10:21

The world only knows that Android was created by Google. Several people know that Android is only a product acquired by Google. Similarly, what is the problem with Huawei's contribution to the collection of OGG open source work and integration into its own proprietary product line?

Bright 2024-05-19 23:25

What a fool! I killed myself. How can people deal with me later.

kylexy 2024-06-28 12:50

Finally, we can stop piracy

Who will fight me for three hundred rounds 2024-06-28 11:22

Move Linux to the mobile phone and put a layer of UI shell on it. From the development language, development tools, to the operating environment, the full link shell. Even the business model of the application market is copied from IOS.

sunday12345 2024-05-15 18:31

What does the bank do? It's blamed on the remote desktop. Persimmons really pick up soft pinches~?

T-type human 2024-06-28 20:52

Similar to Kotlin for Java in Android and Swift for OC in iOS. It is not necessarily substitution, but long-term coexistence.

fair-weather friends 2024-06-28 17:10

Accurate knife technique, backup, export to excel and format are all under your control. The good news is that there is no need to crack on the server

pangfei 2024-06-28 09:40

It would be better if client software could also be developed.

Longki 2024-06-28 15:07

Because we have a choice at present, we are gossiping here, the international situation is changing, and we may be blocked like Russia every minute. How can we do without our own things.

xmqtt 2024-06-28 13:17

Is it free for commercial use

Francesca 2024-05-19 18:00

Wine runs the Android emulator of Windows. Chrome OS is installed in the Android emulator. Linux environment is installed in chrome OS. Linux environment is installed in the Linux environment. Wine is installed in the Android emulator

kangaroo 2024-06-22 19:13

The document is an excellent case of language integration practice from the perspective of specifications, but the designer still seems to be a bit pretentious and has made some "innovations", such as func/foreign/->/prop/mut/Run/<:/, Except for the assignment operator, any compound operator is unacceptable and should be avoided as far as possible; In some aspects, the consistency is not rigorous. For example, when functions are used as parameters and return types, they are inconsistent with the standard definitions, and for example, the definitions of anonymous functions (Lambda) are inconsistent, which increases the difficulty of code reading and understanding; It is a bad idea to use the C language address symbol (&) as a spacer for interface inheritance, because it is inconvenient to enter this symbol on the keyboard and requires double keys to enter it; Nothing/Option/Any seems to be taken from TypeScript, which is a kind of null like detection mechanism after all. How about combining one? The syntax style of type followed and separated by colon (:) belongs to Pascal/Go style. This style is more convenient to implement lexical analyzer and generate syntax tree, which is conducive to subsequent processing; I hope that a new language will emerge. It should be based on the style of C language, boldly absorb the excellent practice of the new generation language (grammar sugar), keep the language specification as simple and consistent as possible, but keep the semantics and extensibility open; Cangjie language has made great exploration and practice for the development of new languages, and the expectations after implementation are also very good, making a good start; With the power of example, I believe that the Chinese community is more likely to produce such a language;

Chief taxi captain 2024-05-17 11:17

I suggest that 360 open source all its products, and then become the leading enterprise in the domestic open source industry through open source, leading everyone to compete with foreign enterprises

Who will fight me for three hundred rounds 2024-06-28 11:25

Who said that Google is a technology company? Google has always been an advertising company, but other people have strong technology.

gamedot 2024-05-17 11:14

Old Zhou is deeply concerned about Huawei's great cause of open source. He is not a Huawei person, but has Huawei's soul.

bhzhu203 2024-06-18 15:36

This is very useful. After the graphical interface server core, Panic, the graphical interface is stuck and cannot be moved. If there is no valid information, you can output specific error information with a blue screen

Flat wave 2024-06-28 21:01

Who is his own? Does he treat you as his own? It's just leek

zhuzhua 2024-05-21 10:08

I'm laughing to death. Those who have been deeply kidnapped dare not pay? Who will use the domestic open source framework of small companies in the future will be 213!!! Wait for harvesting later

osc_566335 2024-05-30 14:12

Sure enough, there are a lot of low-end farmers. In the era of localization, they haven't even played with the domestic ecosystem. Although things are not so good, you should spray on the idea. Don't show your ignorance and make people laugh.

Francesca 2024-06-15 15:56

Isn't this still six fingers

osc_65130168 2024-06-28 09:42

You are too one-sided. Google is not just a technology company, or a pure technology company. There is no doubt that Google is strong in technology and has a deep foundation. But! It is also a business integrating cloud computing, software and hardware. Cross operating system, browser, search engine, navigation and positioning, video, cloud computing services, artificial intelligence, storage, database, intelligent hardware and wearable devices and other technical fields, and then companies with financial payment field, patent technology holding, investment, and cutting-edge technology research and development and reserves have quite deep foundation and background. I don't mean to say how strong it is, but to say that in a certain field it can certainly be pursued or even surpassed, but it is difficult to be defeated or replaced. For example, Nokia is thought to be dead in the attack, but do you know that the capital behind others is still full of oil because of their patents and resources? People's knowledge has faded out of the field of mobile phones.

Wang, chief passer-by of Kaiyuan China 2024-06-28 10:26

Which is the best in China?

Monkeys think of apes 2024-05-31 18:31

You can cheat your brother. Just don't cheat yourself

MARA Mobile end application reverse engineering framework

Software Introduction

Supported Features

APK Reverse Engineering

APK Anti aliasing

APK analysis

APK Manifest analysis

Domain analysis

safety analysis

code

comment

{{formatAllHtml(o.title)}}

{{formatAllHtml(o.title)}}

Awesome software

Hot content

Popular comments of the whole site

Others are still watching

Software Author

Hot News

OSCHINA Community

Online tools

Introduction

QQ group

Public account

Video number

Software Introduction

Supported Features

APK Reverse Engineering

APK Anti aliasing

APK analysis

APK Manifest analysis

Domain analysis

safety analysis

code

comment

Awesome software

Hot content

Popular comments of the whole site

Others are still watching

Software Author

Recommendation of similar software

Hot News

OSCHINA Community

Online tools

Introduction

QQ group

Public account

Video number