安全分析报告： Youcine V0D v1.0

安全分数


安全分数 45/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

0

用户/设备跟踪器


调研结果

高危 5
中危 17
信息 3
安全 2
关注 0

高危 Activity (com.applisto.appcloner.classes.DefaultProvider$MyActivity) is vulnerable to StrandHogg 2.0 

已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时，其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部，从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (27) 更新到 29 或更高版本以在平台级别修复此问题。

高危 默认情况下，调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知，ECB模式很弱，因为它导致相同明文块的密文相同 

默认情况下，调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知，ECB模式很弱，因为它导致相同明文块的密文相同
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
botX/OoOo.java, line(s) 42
com/applisto/appcloner/classes/util/SimpleCrypt.java, line(s) 49

高危 启用了调试配置。生产版本不能是可调试的 

启用了调试配置。生产版本不能是可调试的
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
andhook/lib/BuildConfig.java, line(s) 3,8

高危 该文件是World Readable。任何应用程序都可以读取文件 

该文件是World Readable。任何应用程序都可以读取文件
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
botX/OoOo.java, line(s) 96

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
g3/a.java, line(s) 85

中危 应用程序已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。

中危 应用程序数据可以被备份 

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Broadcast Receiver (com.shtvreb.hometv.utils.BootUpReceiver) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.google.android.exoplayer2.scheduler.PlatformScheduler$PlatformSchedulerService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Content Provider (com.applisto.appcloner.classes.DefaultProvider) 未被保护。 

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.applisto.appcloner.service.RemoteService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.applisto.appcloner.classes.DefaultProvider$DefaultReceiver) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.applisto.appcloner.classes.DefaultProvider$MyActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.applisto.appcloner.classes.FakeCamera$FakeCameraReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
c1/g.java, line(s) 79
com/applisto/appcloner/classes/DataDirectoryFtpServer.java, line(s) 23
com/applisto/appcloner/classes/util/MultiProcessPreferences.java, line(s) 20
f1/d.java, line(s) 37
f1/p.java, line(s) 95
f1/x.java, line(s) 84
obfuse3/obfuse/NPStringFog3.java, line(s) 7

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
e2/c.java, line(s) 7,8,24
e2/d.java, line(s) 7,48
q0/a.java, line(s) 5,6,7,8,130
y2/c.java, line(s) 8,9,113
z3/h.java, line(s) 6,25
z3/n.java, line(s) 9,10,101

中危 IP地址泄露 

IP地址泄露


Files:
com/applisto/appcloner/classes/DefaultProvider.java, line(s) 2932,2932
com/applisto/appcloner/classes/HostsBlocker.java, line(s) 150

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
p7/a.java, line(s) 3
p7/b.java, line(s) 3
q7/a.java, line(s) 3
z3/n.java, line(s) 29
z3/t.java, line(s) 14

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
andhook/lib/xposed/XposedHelpers.java, line(s) 1080

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/applisto/appcloner/classes/BundleObb.java, line(s) 80
com/applisto/appcloner/classes/FakeCamera.java, line(s) 423

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/applisto/appcloner/classes/Utils.java, line(s) 405

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
"username" : "UserName"
"password" : "Senha"
"password" : "Password"
9a04f079-9840-4286-ab92-e65be0885f95
nZWtL6D4gxleEjTgRsiZreZ8nNC9qRwx6BC0WIWuyNpCzY/YJalfUgLEw4LPgFs0T+snumNuJ4BOD
DhMMFWW6FA22jYzIDlJ0wz0ImjPyBHon78I2i05aWapGoo9cFqJ3R40a8DvJK70+QfR7UZna/qgqRPdH0WkCCMVxbOj9VnyXKVYmBB08A5c=
nlwr5ETjezBRsKULS6ZJWAU8xvoIPcBxwGQRaC5I0iNvycX7oSARkPgQQQNKjwHJgQugIBGYiVLwY
n6ILXhSq+P2Ae7qsIh4HV0REDDQ314F/QQmVQhaYmuwAAAABJRU5ErkJggg==
nsw0NDQ0NDQ0FUesnYpIOBE4BTsKt2ewLTEyYDCfK0MfeUYzYO8ROjmQsca3o2lrYFJm2AXuAL81s
nd7qkHRn2vssMU5VdE3xYVka86jITBsDMNuBGM2mjDa9lhqhj7ifnqmsbvLfG5CH0PGDUkNXMvqV4
nAP7xsB0qOvNGAL+5kIrOvBGghKD60AgQmEYAONDD9oSiM98ndOlrwNdAPL4fjn7G/UKyedoX+C60
n4EPbNtXMNgNzgO0pJjfLc54Q9QnnUoOaUIYAPh3VtjxGkQhzM+wXdSDCxzgR/iipbLkIXQNuy2sY
nYfAXeebVnyGCJC3JuHeGh1/vFx2nMjvh++m8iTvax9jMPgHOBv5OMXlE0tICyhR86SYXchted46h
tXLJ9BeQwwen2aVdH+n0sriSGheI/WFZ1E3aAoWrvdw=
nzHYAd4WORoWsA241sxkhgw8jJi6SHgPuC+lQifwMvAu8ZGavhnYmptVM+CLc4RUzgEm42eiehP2E
edef8ba9-79d6-4ace-a3c8-27dcd51d21ed
n5cgy1k4ASf3A5cAFuJXKKaF9KpBPgDvM7KP4g1oIIGkCMADcBJwb2p8KOMvMPoUaCCBpALgfmBba
nJ2k5MBi65DXhQ6iwE5b0BHBP6FLXhB3AUWa2u5ImSNKdNMFPcp2Z7YYKaoCkmcDa0CWuCVuBu8zs
Y29tLmFwcGxpc3RvLmFwcGNsb25lci5jbGFzc2VzLnNlY29uZGFyeQ==
n78C8qoIPewXwOcK9V1kHzIi2qlRGLEB3LDSVx3KgP3rEWSlxHzAZt8OgljPjEvkcWGJmr4dyoA/A
nnEP6ewBXAAflTa7oYJUhwJEetmtGlXCvCL+m3LNYblk7NznmCXnpivcDfARoGWQz+wH3PlZaTRjs
nJBUhcameExFCkEhow4NEJCIST32oW4TEg3ogbg+NklAaSl1KFG2lNGlJimqU0/P3sGZ0nLNn9qx9
nbz2PpFXK5obQPvYskh5WPqaG9rXnkDRR0q6cAjxZdP59oQNQA84ADshpO6vozBsB4DAP2/2KzrwR
nbmhoaGhoaMig8M5S0hTgENxxYMk8kg9v+nAPg34ys79CB6GnkDt8Q5KGon97Er8nPxu1LWU8UsbB
n2olwU2SXZdN1AtzmEfwtI+49oSQRspqj1yT9EUqAMoahx3rYvpW8MLONwFzglxT7WyQ97eOMmX0M
njY7OJr0mLOpwiHpt4BgUi6Q3PCZi8h1SSjpR0vaM9LxEkHSMh69dMRHz7agGfUSIhqhzKG50dHiJ
n+ZGkpzrId6ak3RlpLm1xz5kePn0QOrZ5A3H9GIMf80wHeZ+l7OZo6Qh7HwFWh45t3iCsKEiATkXo
n+AxcP7sT90e4wsx2lRLoVkh6KOeOs1Z8IekeSce3yWOWpL9T0tglaWGb+w/x8OmdyoJXQPCPkDTc
nEWYD347Bz/VmtmYM96cSWoCWRCLMJVsE38naNXQ+k30gdExyI+kVj3Z1fpu0Jssdnp1GWxEkHSTp
noCasBeYxdhEKpQwBfJ50pb7yY2abgNmki7C4F0QoQ4DC2slIhFm4VchWLJb0nGeaa3F9QicidEUf
dc932331180af43c77a07b805a1fb2bd
nxtAB6Dkkzc+55W9DaF97Fkkv5BBgPHxbUjgkvZgS+F2SbgztX10o9cGJpAXA1cB03BOr94DlZvZT
nCXBIWXMAAC4jAAAuIwF4pT92AAAHk0lEQVR42u2dW6wdUxjHf98pirqURElc6tIihKZOL0rqLiEl

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
a1/a.java, line(s) 406
a2/a.java, line(s) 63
andhook/lib/AndHook.java, line(s) 103,151,57
andhook/lib/HookHelper.java, line(s) 34,71,94,146,157,170,191,212,233,268,273,81
andhook/lib/xposed/XposedBridge.java, line(s) 29,25
andhook/lib/xposed/XposedHelpers.java, line(s) 461,472,483,494,505,516,527,538,549,560,575,586,597,608,619,630,641,652,663,674,685,696,707,718,729,740,751,762,773,784,795,806,817,828,839,850,861,874,887,900,921,936
b1/d.java, line(s) 75,108
b1/e.java, line(s) 542,566,585
c6/a.java, line(s) 30
com/applisto/appcloner/classes/AppClonerNative.java, line(s) 21
com/applisto/appcloner/classes/ApplicationWrapper.java, line(s) 33,193,199,206,213,220,60,72,88,100,112,124,136,148,160,187
com/applisto/appcloner/classes/AutoPressButtons.java, line(s) 51,71,75,97,106,111,117,123,137,139,149,181,132,165,169,184,214
com/applisto/appcloner/classes/AutoRotateControls.java, line(s) 19,20,24,42,48,40,55
com/applisto/appcloner/classes/BluetoothControls.java, line(s) 19,20,40,43,48,54,62,65,46,68
com/applisto/appcloner/classes/BootReceiver.java, line(s) 14,22
com/applisto/appcloner/classes/BundleFilesDirectories.java, line(s) 18,27,33,41,49,63,44,67
com/applisto/appcloner/classes/BundleObb.java, line(s) 19,24,32,35,46,52,72,75
com/applisto/appcloner/classes/CalculatorActivity.java, line(s) 49,59,121,246
com/applisto/appcloner/classes/ClearCacheOnExitProvider.java, line(s) 15,20
com/applisto/appcloner/classes/ClearCacheOnExitService.java, line(s) 18,24
com/applisto/appcloner/classes/ClearCacheReceiver.java, line(s) 15
com/applisto/appcloner/classes/CloneSettings.java, line(s) 75,241,50,88,93,253
com/applisto/appcloner/classes/CrashHandler.java, line(s) 80,87,95,106,110,24,66,89,97
com/applisto/appcloner/classes/DataDirectoryFtpServer.java, line(s) 31,51,57,62,71,91,140,69,83,126,147
com/applisto/appcloner/classes/DatabaseEditor.java, line(s) 28,48,54,59,112,95,119
com/applisto/appcloner/classes/DefaultFontProvider.java, line(s) 24,38,40,59
com/applisto/appcloner/classes/DefaultProvider.java, line(s) 57,77,224,226,265,294,323,361,379,389,588,636,1132,1184,1232,1795,1831,1858,1864,2723,5817,6837,7362,7886,7931,8471,9041,9089,9610,9658,10254,10302,10874,10922,11553,11601,12200,12248,12749,12760,12776,12787,12813,12817,12825,12829,12846,12877,12889,358,73,256,285,314,384,544,1140,1884,2598,2739,3108,12782,12793,12805,12836,12853,12863,12869,12881,12892,12936,12955
com/applisto/appcloner/classes/DisableCameras.java, line(s) 25,47,65,83,102,108,127,141,30,60,78,95,122,134
com/applisto/appcloner/classes/DisableClipboardAccess.java, line(s) 65,69,78,100,116,124,150,159,163,167,175,183,188,193,211,215,219,223,227,231,237,247,252,262,278,294,321,327,331,335,354,369,86,152,202,264,296,338,356,371
com/applisto/appcloner/classes/FacebookLoginBehavior.java, line(s) 13,17,34
com/applisto/appcloner/classes/FacebookMessengerProvider.java, line(s) 29,31
com/applisto/appcloner/classes/FakeCalculator.java, line(s) 13,21,28,31
com/applisto/appcloner/classes/FakeCamera.java, line(s) 60,85,92,102,110,146,160,178,187,246,270,303,317,335,368,379,386,394,509,120,298,310,330,401,406,537
com/applisto/appcloner/classes/FileAccessMonitor.java, line(s) 18,41
com/applisto/appcloner/classes/GmailSupport.java, line(s) 39,45,48,61,122,135,166,171,183,193,209,211,221,223,239,242,250,50,126,130,139,176,195
com/applisto/appcloner/classes/HeadphonesEventReceiver.java, line(s) 13,25,30,19,38
com/applisto/appcloner/classes/HostMapper.java, line(s) 34,43,56,71,83,102,121,97,106
com/applisto/appcloner/classes/HostsBlocker.java, line(s) 90,108,112,132,157,160,175,229,257,265,273,281,344,355,364,373,384,397,491,99,291,336,387,505
com/applisto/appcloner/classes/InterruptionFilterControls.java, line(s) 24,25,29,44,51,52,65,71,57,74
com/applisto/appcloner/classes/LaunchTileService.java, line(s) 14,19,26
com/applisto/appcloner/classes/LoadLibraryWorkaround.java, line(s) 18,23,43,39
com/applisto/appcloner/classes/LogcatViewer.java, line(s) 48,52,316,62,151
com/applisto/appcloner/classes/MediaMountEjectReceiver.java, line(s) 13,24
com/applisto/appcloner/classes/MyControlsProviderService.java, line(s) 40,55,60,70,74,80
com/applisto/appcloner/classes/NotificationDots.java, line(s) 28,36,41,91,117,123,139,145,157,53,62,112,151,163
com/applisto/appcloner/classes/NotificationOptions.java, line(s) 163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,197,206,208,227,252,278,293,298,322,327,339,372,373,378,400,404,409,414,418,422,426,430,434,451,463,467,472,476,482,490,494,499,502,505,508,511,588,591,651,665,696,740,817,871,911,918,930,937,959,108,229,232,258,347,384,456,484,618,653,667,698,715,750,754,796,820,850,858,899,1173,1181,1222,1242
com/applisto/appcloner/classes/PasswordActivity.java, line(s) 85,344,354,359,452,474,488,93,125,144,204,242,259,278,294,348,429,435,460,468,482
com/applisto/appcloner/classes/PasswordProtectApp.java, line(s) 12,18,20,27,30
com/applisto/appcloner/classes/PenEventReceiver.java, line(s) 12,18,23,33
com/applisto/appcloner/classes/PersistentApp.java, line(s) 13,17,22
com/applisto/appcloner/classes/PersistentAppAccessibilityService.java, line(s) 20
com/applisto/appcloner/classes/PersistentAppService.java, line(s) 18
com/applisto/appcloner/classes/PictureInPicture.java, line(s) 23,27,30,36,48,56,66,76,58,80
com/applisto/appcloner/classes/PowerEventReceiver.java, line(s) 12,18,22,25,28,31,33,41
com/applisto/appcloner/classes/PreferenceEditor.java, line(s) 27,29,32,50,63,71
com/applisto/appcloner/classes/ScreenSaver.java, line(s) 36,44,50,59,78,104,118,193,84,99,112,126
com/applisto/appcloner/classes/SecretDialerCodeReceiver.java, line(s) 15,24
com/applisto/appcloner/classes/SetBrightnessOnStart.java, line(s) 23,24,28,42,50,93,63,72,87,100,109
com/applisto/appcloner/classes/ShowOnLockScreen.java, line(s) 14,18,26
com/applisto/appcloner/classes/Signatures.java, line(s) 35,39,49,52,91,98,124,136,141,78,84,119,128,131,157,166,185,197
com/applisto/appcloner/classes/SplashScreenActivity.java, line(s) 94,60,71,89,101
com/applisto/appcloner/classes/StartActivity1.java, line(s) 20,37
com/applisto/appcloner/classes/StartForOutgoingCallReceiver.java, line(s) 19,26
com/applisto/appcloner/classes/ToastFilter.java, line(s) 25,29,53,60,83,77,85
com/applisto/appcloner/classes/UsbDeviceAttachedReceiver.java, line(s) 13,21
com/applisto/appcloner/classes/Utils.java, line(s) 79,82,94,97,533,546,112,116,131,168,178,185,194,215,227,317,426,479,552,568,601,637,650,713,762
com/applisto/appcloner/classes/WhatsAppSupport.java, line(s) 20,31,53,65,56,60,67,84
com/applisto/appcloner/classes/WifiControls.java, line(s) 19,20,24,41,44,49,55,63,66,47,69
com/applisto/appcloner/classes/freeform/FreeFormWindow.java, line(s) 34,37,41,54
com/applisto/appcloner/classes/freeform/FreeFormWindowActivity.java, line(s) 31,47,50,70,90,53,83
com/applisto/appcloner/classes/util/IActivityManagerHook.java, line(s) 16
com/applisto/appcloner/classes/util/IPackageManagerHook.java, line(s) 19
com/applisto/appcloner/classes/util/Log.java, line(s) 27,34,76,83,41,48,13,20,55,62,69
com/applisto/appcloner/classes/util/MultiProcessPreferences.java, line(s) 35,52
com/applisto/appcloner/classes/util/activity/ActivityLifecycleListener.java, line(s) 30,35
com/applisto/appcloner/classes/util/activity/OnAppExitListener.java, line(s) 19,26
com/applisto/appcloner/classes/util/activity/ResumePauseActivityLifecycleListener.java, line(s) 22,33
com/applisto/appcloner/classes/util/activity/StartExitAppEventReceiver.java, line(s) 23,42,51,64,37,59,70
com/applisto/appcloner/hooking/Hooking.java, line(s) 28,39,66,81,92,76,85,113,130,135
com/applisto/appcloner/service/RemoteService.java, line(s) 38,84,94,104,113
com/swift/sandhook/ClassNeverCall.java, line(s) 17
com/swift/sandhook/HookLog.java, line(s) 18,26,30,14,10,22
com/swift/sandhook/PendingHookHandler.java, line(s) 49,44
com/swift/sandhook/SandHook.java, line(s) 171
com/swift/sandhook/utils/FileUtils.java, line(s) 80,86
com/swift/sandhook/utils/ReflectionUtils.java, line(s) 21
com/swift/sandhook/utils/Unsafe.java, line(s) 93,32
com/swift/sandhook/wrapper/HookWrapper.java, line(s) 237,334,621,204,297
d1/b.java, line(s) 48
d1/j.java, line(s) 58,156,158,164,170
d1/l.java, line(s) 49
e1/c.java, line(s) 106
e1/e.java, line(s) 55,106
f1/h.java, line(s) 285,299,597
f1/i.java, line(s) 51
f1/k.java, line(s) 14
f1/z.java, line(s) 61
g1/i.java, line(s) 110,153
g1/j.java, line(s) 83,130,142,165,174,187,201,230,239
h1/e.java, line(s) 41,55,66,76
h1/i.java, line(s) 108
i1/a.java, line(s) 139
j1/c.java, line(s) 15
j1/d.java, line(s) 38
j1/f.java, line(s) 98
j1/s.java, line(s) 82
j1/t.java, line(s) 37
java/io/ByteArrayOutputStrean.java, line(s) 13,17,18,36,20
l1/a.java, line(s) 82
m/d.java, line(s) 206
m1/b0.java, line(s) 184
m1/c.java, line(s) 58,73
m1/d.java, line(s) 15
m1/k.java, line(s) 173,182,271,283,293,311,331,333,351,356,363,370,387,390
m1/m.java, line(s) 108,128,212,301,340,361,385
m1/n.java, line(s) 44,53
m1/r.java, line(s) 61
m1/z.java, line(s) 114,117,127,134,139
p/f.java, line(s) 429
q1/a.java, line(s) 87,94,101,112
q1/d.java, line(s) 21
q1/j.java, line(s) 40
s1/e.java, line(s) 35,60,91
s1/f.java, line(s) 11
s1/k.java, line(s) 153
s1/l.java, line(s) 201
s1/n.java, line(s) 92
s1/o.java, line(s) 182,188
t1/d.java, line(s) 43,48,51,59,66
v1/h.java, line(s) 14
w1/i.java, line(s) 57,100
y0/v.java, line(s) 13,120

信息 此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改 

此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/applisto/appcloner/classes/DisableClipboardAccess.java, line(s) 51,184,189,197,8,90

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/applisto/appcloner/classes/DisableClipboardAccess.java, line(s) 8,90,84,332

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/shtvreb/hometv/remote/RetroConfection.java, line(s) 30,28

安全 此应用程序没有隐私跟踪程序 

此应用程序不包括任何用户或设备跟踪器。在静态分析期间没有找到任何跟踪器。

安全评分: ( Youcine V0D 1.0)