A comprehensive mobile application reverse engineering and analysis framework for security testing against OWASP mobile threats.
MARA is a Mobile Application Reverse engineering and Analysis Framework that bundles together commonly used tools for reverse engineering and analyzing mobile applications. It helps security professionals and developers test mobile apps against OWASP mobile security threats by providing a unified toolkit for tasks like decompilation, deobfuscation, vulnerability scanning, and manifest analysis.
Mobile application developers, security professionals, and penetration testers who need to assess the security of Android applications and identify vulnerabilities based on OWASP standards.
Developers choose MARA because it integrates multiple specialized reverse engineering and analysis tools into a single framework, simplifying the workflow and making security testing more efficient compared to using each tool individually.
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Consolidates multiple reverse engineering tools like baksmali, apktool, enjarify, and jadx into a single framework, streamlining the workflow for security assessments.
Performs static source code analysis based on OWASP Mobile Top 10 and checklist, ensuring compliance with industry security standards for vulnerability detection.
Supports mass analysis of APK, DEX, or JAR files, making it efficient for handling multiple applications in large-scale security audits.
The framework is in its very early stages, as stated in the README, leading to potential instability, incomplete features, and limited documentation.
Focuses solely on Android applications with tools like apktool and baksmali, offering no support for iOS or cross-platform mobile app analysis.
Requires installing multiple prerequisites and external tools, with installation guided via a separate wiki, which can be cumbersome and time-consuming.