MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
There seems to be a problem with yara-python in the current build. I am getting compile errors running setup.sh. Also manually performing the yara-python install from the tools/yara-python directory gave me the following error below at _ERROR_.
I had yara-python installed and attempted it with apt install and pip install of both python2.7 and python3 but still no luck. APKiD would fail with an error telling me that yara-python failed to meet the requirement of yara-python==3.5.0.999.
Eventually I was able to correct the issue by manually cloning APKiD from https://github.com/rednaga/APKiD and quoting out the APKiD section in your setup.sh file. Hope this helps.
:EDIT: System is Kali Linux 2016.2 Rolling Release
_ERROR_
yara-python.c: In function ‘yara_callback’:
yara-python.c:602:18: error: ‘CALLBACK_MSG_MODULE_IMPORTED’ undeclared (first use in this function)
if (message == CALLBACK_MSG_MODULE_IMPORTED && modules_callback == NULL)
^~~~~~~~
yara-python.c:602:18: note: each undeclared identifier is reported only once for each function it appears in
yara-python.c:727:60: error: ‘YR_MATCH {aka struct _YR_MATCH}’ has no member named ‘data_length’; did you mean ‘chain_length’?
object = PyBytes_FromStringAndSize((char*) m->data, m->data_length);
^~
yara-python.c: In function ‘handle_error’:
yara-python.c:940:10: error: ‘ERROR_INVALID_EXTERNAL_VARIABLE_TYPE’ undeclared (first use in this function)
case ERROR_INVALID_EXTERNAL_VARIABLE_TYPE:
^~~~~~~~
error: command 'x86_64-linux-gnu-gcc' failed with exit status 1
There seems to be a problem with yara-python in the current build. I am getting compile errors running setup.sh. Also manually performing the yara-python install from the tools/yara-python directory gave me the following error below at _ERROR_. I had yara-python installed and attempted it with apt install and pip install of both python2.7 and python3 but still no luck. APKiD would fail with an error telling me that yara-python failed to meet the requirement of yara-python==3.5.0.999.
Eventually I was able to correct the issue by manually cloning APKiD from https://github.com/rednaga/APKiD and quoting out the APKiD section in your setup.sh file. Hope this helps. :EDIT: System is Kali Linux 2016.2 Rolling Release
_ERROR_ yara-python.c: In function ‘yara_callback’: yara-python.c:602:18: error: ‘CALLBACK_MSG_MODULE_IMPORTED’ undeclared (first use in this function) if (message == CALLBACK_MSG_MODULE_IMPORTED && modules_callback == NULL) ^
~~~~~~~ yara-python.c:602:18: note: each undeclared identifier is reported only once for each function it appears in yara-python.c:727:60: error: ‘YR_MATCH {aka struct _YR_MATCH}’ has no member named ‘data_length’; did you mean ‘chain_length’? object = PyBytes_FromStringAndSize((char*) m->data, m->data_length); ^~ yara-python.c: In function ‘handle_error’: yara-python.c:940:10: error: ‘ERROR_INVALID_EXTERNAL_VARIABLE_TYPE’ undeclared (first use in this function) case ERROR_INVALID_EXTERNAL_VARIABLE_TYPE: ^~~~~~~~error: command 'x86_64-linux-gnu-gcc' failed with exit status 1