How termuxhackers-id/sara works
SARA is a command-line educational Android malware-building tool. Its documented user-facing branches generate a Metasploit-based Trojan or customize a file-locker APK; the sampled source also shows APK modification, listener setup, and optional file hosting. The implementation is concentrated in sara.py. The excerpt is partial, so internal menu dispatch and several workflow connections are not inferred; the graph shows only relationships directly visible in the excerpt or README.
Main entry points: sara.py CLI Entry
Components 11
CLI
- CLI Entry
sara.py
APK Building
- Trojan Builder
sara.py - File Locker
sara.py - APK Operations
sara.py - APK Modifier
sara.py
Supporting Features
- Listener Setup
sara.py - File Upload
sara.py
Other components
- Researcher
- msfvenom
- apktool
- File Hosts
Connections 5
- Researcher → CLI Entry: runs
README.md - CLI Entry → CLI Entry: starts app
sara.py - Trojan Builder → msfvenom: generates APK
sara.py - APK Operations → apktool: decompiles
sara.py - File Upload → File Hosts: uploads file
sara.py