安全分析报告： fastservice v6.4.4

安全分数


安全分数 45/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

6

用户/设备跟踪器


调研结果

高危 6
中危 30
信息 3
安全 2
关注 42

高危 SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击 

SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#android-network-apis

Files:
com/zxy/tiny/core/HttpUrlConnectionFetcher.java, line(s) 55,18,19,20,21,22,23

高危 应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文 

应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/easemob/util/CryptoUtils.java, line(s) 64,67

高危 使用弱加密算法 

使用弱加密算法
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/chinaums/pppay/c/c.java, line(s) 19,43
com/easemob/util/CryptoUtils.java, line(s) 91,94
com/unionpay/utils/d.java, line(s) 15

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/easemob/util/CryptoUtils.java, line(s) 91,94

高危 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 

不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#webview-server-certificate-verification

Files:
com/chinaums/pppay/HelpActivity.java, line(s) 54,53

高危 应用程序包含隐私跟踪程序 

此应用程序有多个6隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 应用程序已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。

中危 应用程序数据可以被备份 

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Service (com.baidu.location.f) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.bdkj.fastdoor.wxapi.WXEntryActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity-Alias (com.bdkj.fastdoor.wxapi.WXPayEntryActivity) 未被保护。 

[android:exported=true]
发现 Activity-Alias与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.unionpay.UPPayWapActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.bdkj.push.getui.ChannelService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.bdkj.push.getui.GeTuiPushService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性 

(com.bdkj.push.GTPushLiveActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity (com.bdkj.push.GTPushLiveActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.chinaums.pppay.WelcomeActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Service (com.chinaums.pppay.service.CardService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_NFC_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.chinaums.pppay.quickpay.service.QuickPayService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.alipay.sdk.app.PayResultActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.alipay.sdk.app.AlipayResultActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性 

(com.igexin.sdk.GActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity (com.igexin.sdk.GActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.igexin.sdk.GService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/alimama/mobile/csdk/umupdate/a/c.java, line(s) 302
com/baidu/b/g.java, line(s) 26,80,82
com/baidu/mtjstatsdk/b/b.java, line(s) 121,126,186,189,200,205
com/baidu/vi/VDeviceAPI.java, line(s) 164,173
com/bdkj/common/utils/AndroidUtil.java, line(s) 140,145
com/bdkj/common/utils/ImageUtils.java, line(s) 1080
com/bdkj/fastdoor/global/AppUpdateManager.java, line(s) 668
com/bdkj/fastdoor/iteration/fragment/HeadImageClipFragment.java, line(s) 106
com/bdkj/fastdoor/iteration/util/takephoto/api/FileUtils.java, line(s) 9
com/bdkj/fastdoor/util/media/AudioRecorder.java, line(s) 31,35
com/bdkj/fastdoor/util/media/PlaySound.java, line(s) 94,98
com/chinaums/pppay/util/UpdateManager.java, line(s) 38,198,347
com/easemob/chat/core/s.java, line(s) 83
com/easemob/easeui/utils/EaseCommonUtils.java, line(s) 28
com/easemob/util/EasyUtils.java, line(s) 71
com/easemob/util/FileLogger.java, line(s) 175,175
com/easemob/util/PathUtil.java, line(s) 91
com/kbeanie/multipicker/core/PickerManager.java, line(s) 85
com/kbeanie/multipicker/core/threads/FileProcessorThread.java, line(s) 526
com/kbeanie/multipicker/utils/FileUtils.java, line(s) 68,28
com/qmuiteam/qmui/util/QMUIDisplayHelper.java, line(s) 218
com/sobot/network/http/download/SobotDownload.java, line(s) 206,153,193,217
com/tencent/a/a/a/a/b.java, line(s) 20,29,50,52
com/unionpay/utils/j.java, line(s) 31
com/yanzhenjie/permission/checker/StorageReadTest.java, line(s) 9
com/yanzhenjie/permission/checker/StorageWriteTest.java, line(s) 9
com/zxy/tiny/core/FileKit.java, line(s) 39,39
u/upd/a.java, line(s) 214

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/baidu/mtjstatsdk/BasicStoreTools.java, line(s) 9
com/bdkj/common/utils/constant/RegexConstants.java, line(s) 19,25
com/bdkj/fastdoor/iteration/FdConstant.java, line(s) 61,58,36,60
com/bdkj/fastdoor/iteration/activity/DrdOrderDetailActivity.java, line(s) 42
com/bdkj/fastdoor/iteration/activity/UserOrderDetailActivity.java, line(s) 75
com/bdkj/fastdoor/iteration/bean/ChatController.java, line(s) 90
com/bdkj/fastdoor/iteration/bean/CitySkillBean.java, line(s) 168
com/bdkj/fastdoor/iteration/fragment/MessagesFragment.java, line(s) 213
com/bdkj/fastdoor/iteration/fragment/SettingsNewFragment2.java, line(s) 67,58
com/bdkj/fastdoor/iteration/fragment/UserOrderDetailFragment.java, line(s) 125
com/bdkj/fastdoor/iteration/helper/ShareDialogHelper.java, line(s) 26
com/bdkj/fastdoor/iteration/huanxin/HxConstant.java, line(s) 18,32
com/bdkj/fastdoor/iteration/huanxin/applib/model/DefaultHXSDKModel.java, line(s) 13
com/bdkj/fastdoor/iteration/net/ApiConstant.java, line(s) 63
com/bdkj/fastdoor/iteration/util/FdUtils.java, line(s) 432
com/bdkj/fastdoor/module/order/act/ActWithDraw.java, line(s) 75,69,83
com/bdkj/fastdoor/util/media/UserSharedPreferencesHelper.java, line(s) 19
com/bdkj/fastdoor/util/tts/TtsClient.java, line(s) 26,24
com/chinaums/pppay/net/action/UploadPasswordAction.java, line(s) 9
com/easemob/chat/EMChatConfig.java, line(s) 17
com/easemob/chat/MessageEncoder.java, line(s) 33,36
com/easemob/cloud/HttpClientConfig.java, line(s) 25
com/easemob/easeui/utils/EaseSmileUtils.java, line(s) 18
com/easemob/util/CryptoUtils.java, line(s) 20
com/hjq/permissions/StartActivityManager.java, line(s) 9
com/meituan/android/walle/ChannelReader.java, line(s) 12
com/monch/lbase/orm/db/model/EntityTable.java, line(s) 32
com/monch/lbase/orm/db/model/MapProperty.java, line(s) 7
com/sobot/network/http/builder/PostFormBuilder.java, line(s) 48
com/sobot/network/http/builder/PostMultipartFormBuilder.java, line(s) 48
com/unionpay/tsmservice/data/Constant.java, line(s) 195,197
com/unionpay/tsmservice/data/ResultCode.java, line(s) 75,62
com/unionpay/tsmservice/mi/data/Constant.java, line(s) 142,146
com/unionpay/tsmservice/mi/data/ResultCode.java, line(s) 33,30
org/jivesoftware/smack/ConnectionConfiguration.java, line(s) 178
org/jivesoftware/smack/sasl/SASLFacebookConnect.java, line(s) 121,121

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/bdkj/fastdoor/iteration/fragment/CommonWebFragment.java, line(s) 161,185
com/bdkj/fastdoor/iteration/fragment/CourierWebPageFragment.java, line(s) 137,136
com/bdkj/fastdoor/iteration/fragment/ServiceDetailFragment.java, line(s) 144,143
com/chinaums/pppay/quickpay/ScanCodePayWebView.java, line(s) 72,104,60,92
com/unionpay/WebViewJavascriptBridge.java, line(s) 34,31

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
ch/imvs/sdes4j/srtp/SrtpSDesFactory.java, line(s) 25
com/baidu/b/d/c.java, line(s) 9
com/novell/sasl/client/DigestMD5SaslClient.java, line(s) 298
com/unionpay/utils/UPUtils.java, line(s) 17
com/unionpay/utils/b.java, line(s) 163
org/jivesoftware/smack/util/StringUtils.java, line(s) 350
org/jivesoftware/smackx/entitycaps/EntityCapsManager.java, line(s) 105
org/repackage/a/a/a/a/c.java, line(s) 58

中危 IP地址泄露 

IP地址泄露


Files:
com/baidu/mtjstatsdk/b/b.java, line(s) 21,22
com/chinaums/pppay/app/a.java, line(s) 25
com/chinaums/pppay/util/Common.java, line(s) 577,579
com/easemob/chat/core/p.java, line(s) 27
com/yanzhenjie/permission/checker/SipTest.java, line(s) 20
org/bitlet/weupnp/GatewayDiscover.java, line(s) 24

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
ch/imvs/sdes4j/SDesFactory.java, line(s) 3
ch/imvs/sdes4j/srtp/SrtpSDesFactory.java, line(s) 6
com/alimama/mobile/csdk/umupdate/a/i.java, line(s) 19
com/alimama/mobile/csdk/umupdate/b/d.java, line(s) 18
com/baidu/b/c/b/b.java, line(s) 7
com/bdkj/common/core/BaseActivity.java, line(s) 24
com/chinaums/pppay/util/StringUtil.java, line(s) 4
com/easemob/chat/EMChat.java, line(s) 16
com/easemob/chat/EMRandomDelay.java, line(s) 3
com/easemob/chat/EMSmartHeartBeat.java, line(s) 17
com/easemob/chat/core/EMConnectionManager.java, line(s) 31
com/easemob/chat/core/j.java, line(s) 23
com/hjq/permissions/PermissionFragment.java, line(s) 14
com/pingplusplus/android/PingppUtil.java, line(s) 20
com/sobot/network/http/HttpUtils.java, line(s) 20
com/zhy/autolayout/widget/MetroLayout.java, line(s) 15
com/zxy/tiny/core/FileKit.java, line(s) 14
org/jivesoftware/smack/util/StringUtils.java, line(s) 17
u/upd/g.java, line(s) 13

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/easemob/chat/EMEncryptUtils.java, line(s) 66
com/easemob/util/ImageUtils.java, line(s) 102,139
com/yanzhenjie/permission/checker/RecordAudioTest.java, line(s) 18

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/alimama/mobile/csdk/umupdate/a/j.java, line(s) 33
com/baidu/b/d/b.java, line(s) 25
com/bdkj/common/net/http/HttpUtils.java, line(s) 275
com/bdkj/common/utils/FileUtil.java, line(s) 837
com/bdkj/common/utils/MD5Util.java, line(s) 22,36,61
com/bdkj/common/utils/MD5Utils.java, line(s) 24,28
com/chinaums/pppay/unify/UnifyMd5.java, line(s) 54,81
com/easemob/util/CryptoUtils.java, line(s) 78
com/monch/lbase/orm/db/assit/Encrypt.java, line(s) 36
com/novell/sasl/client/DigestMD5SaslClient.java, line(s) 184,209
com/tencent/mm/a/b.java, line(s) 10
org/jivesoftware/smack/sasl/SASLFacebookConnect.java, line(s) 65
u/upd/n.java, line(s) 34,51,71

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/bdkj/fastdoor/iteration/huanxin/db/DbOpenHelper.java, line(s) 4,5,33
com/bdkj/fastdoor/iteration/huanxin/db/DemoDBManager.java, line(s) 6,60
com/easemob/chat/core/i.java, line(s) 6,7,164
com/easemob/chat/core/s.java, line(s) 8,9,96
com/monch/lbase/orm/db/assit/Querier.java, line(s) 4,15
com/sobot/network/http/db/SobotDBHelper.java, line(s) 4,5,57

中危 此应用程序可能会请求root（超级用户）权限 

此应用程序可能会请求root（超级用户）权限
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/chinaums/pppay/util/DeviceUtil.java, line(s) 24,45,65,24

中危 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
com/bdkj/fastdoor/iteration/fragment/CommonWebFragment.java, line(s) 196,185
com/chinaums/pppay/HelpActivity.java, line(s) 42,47
com/chinaums/pppay/WebViewActivity.java, line(s) 37,42

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
百度地图的=> "com.baidu.lbsapi.API_KEY" : "yrOnAzhynliXtSLx6tKi3lU7HrCgv3s7"
个推–推送服务的=> "PUSH_APPID" : "tqB4oQHhCHAcJNTPNtpec3"
个推–推送服务的=> "GETUI_APPID" : "tqB4oQHhCHAcJNTPNtpec3"
环信 SDK的=> "EASEMOB_APPKEY" : "kfw#fastservice"
友盟统计的=> "UMENG_APPKEY" : "555576c1e0f55a9341000d83"
凭证信息=> "HUAWEI_APP_ID" : "10651363"
"sobot_ding_cai_sessionoff" : "Percakapan berakhir, tidak ada umpan balik"
"sobot_ding_cai_sessionoff" : "Fine della conversazione, nessun feedback"
"sobot_ding_cai_sessionoff" : "Conversation ended, you can't send feedback"
"sobot_ding_cai_sessionoff" : "Perbincangan tamat, tidak dapat maklumbalas"
"password" : "Password"
"session" : "Conversation"
Ok6j+A2TySWNmuZms7cji8eTdxYMoxuugbsghZT5Oss=
5d4c3a98dc0455e67ae60df6a6336e07
MxmVut7Ui09MCvgOTcmgB+cDXhq+g0vPxG5Sz+OVkfI=
54aa526e7a37d8ba2311a1d3d2ab79b3fbeaf3ebb9e7da9e7cdd9be1ae5a53595f47
c594cfa74e477137857119a39770a469
8cc1d6ed5e1b2cc00489215aec3fc2eac008e767b0215981cb5e
0a1f76a2c9e03f95624c2b5ccc0a576e
32123412389012345678909123645643
700e5c0da3f55e358dc50e5c7dc4f28c
60179d81e99d5c5f4fde8b3a8d8f5a3f
861693111300f060355040713085368616e67686169311730
afb5c903f4e04ab6abc29b6e786b4e57
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
xEnhGUsoTZBpTWr1EDFuV3vlVBcruXRIL66RJOcXxc3+nI1MV36bxw+029L6U3yZsqm9e84fCPDHly7XXFPx2j5wADK2DUlw7tVRDMJPI2499C6cPa4ROWFWcfJ+CbfbMfmYGvwdvHsTqZM3rl4slJpl7dSZjhxDWCIWYeGepY0=
081580c9eda84844925bb224523d25f7
64c2f89fdffa16729c9779f99562bc189d2ce4722ba0faedb11aa22d0d9db228fda
32123412389012345678906785435643
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
0f060355040713085368616e676861693117
62de5fde0ffa4d18833045c8240daadd
555576c1e0f55a9341000d83
08eb9b5c67474d027fa03ce35109b11604083ab6bb4df2c46240f879f
Hy+xe9oDskKv5ZSkV4gLlCEW+t5gJOlzVd2oYYSJ9PY=
ddca00de95d24a5db125db9e3d268b4c
adad2053635dccc3923b7b03fee2efddf3b2d5af5d8c2700403d4e95fe7ea16c83797aa0254eda0ee0f0110151e7b47c69363c44837d823e374bf7f6246f83b9f0f1a51c3cc2f17d0b61d3e0f6a04713088470f1cc44d4b255a58b2b2f5967ddca241b84a5a56aefb11493c57e5fd6820dc42d8ea570d2a539e95d4909d8688c6c774dd92d035817f7af9e2160186ddfe3905d0dd924f1f48b82adc1fc91345724576cf8860f5d280ca5de99a959a833ef4901447d7a48132531fdd51c7c2831
d4624c36b6795d1d99dcf0547af5443d
d5d56e572212691f5319df32fb466e0ac08b9feb01b4f7fb9a81aeafeb2320e15df17ffa8fde1a96dedf4501eb3790ecbaa93be8ff1d842a2169eab74c90f502cb2984013aff0268e84cc0c015faa2c8e009615f7cd11873303c9a920c4794cc7985d311852514245accbfe85ee71e58aef52acd265c41994f63231e360d3f89
bf3992645415bb33a11f7530184678d112e8af360a6238e14bcf3db60bb288bb67a5fb6a218ab9d4d3b63791a48dff4bd284f23097b610f7c856fd563bbf2f3975eeb12a469a64ba110cf86a28b1a8ec7e6e2bb921ec649380d1727bcafdbfc367788158cf25d2c1c3fdb17595e981950b0db2b8aa1e636d669b1362c357eddbc03772baa25ee58ac1819d30a310ef8116a72ed23518449cf5f854d0810e06f7127b40ad4338787ca4c4491d637e677dc317494c6148bb7e58b832fada2798ef
1001a3e74c601e3beb1b7ae4f9ab2872a0aaf1dbc2cba89c7528cd
92a864886f70d010101050003818d0030818902818100c42e6236d5054ffccaa
f6e50617931173015060355040b130e4368696e6120556e696
b1ff56cef0e21c87260c63ce3ca868bf5974c14
f6d1a626ceb1d21cb96643307d0568fc
c449e1194b284d90694d6af510316e577be554172bb974482fae9124e717c5cdfe9c8d4c577e9bc70fb4dbd2fa537c99b2a9bd7bce1f08f0c7972ed75c53f1da3e700032b60d4970eed5510cc24f236e3df42e9c3dae1139615671f27e09b7db31f9981afc1dbc7b13a99337ae5e2c949a65edd4998e1c4358221661e19ea58d
6X8Y4XdM2Vhvn0KfzcEatGnWaNU=
623759189ABADEF019775540
b1fdf62b0f540fca5458b063af9354925a6c3505a18ff164b6b195f6e517eaee1fb783
e94ddc285669ec06b8a405dd4341eac4ea7030203010001300d06092a864886f70d010105050003818
123456789ABCDEF009876543
IW07cwaTAhAm741v3TDuuvW/i8SGwkKPuxFbXhtyegk=
a5f219925e874aea2f9576fff2346144
9e1f3460bee3886ec3aaf6ad8530a2a442214dea2211ffe069a9fb6822700abd64be681d0a5aaead41812ce9478b7e1bebdce0f7ded1d9ff46b3bddbda179749d175071c0829fb79959b75b008c83dff86fedad40ebe59c90c358dc5081ac63a1a5b4629bcfc8bb5ef945342a15bdef9a49fe82e53c25df77834baef97f5a89d
6e696f6e5061793111300f06035504031308556e696f6e5061
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
d9255940da7b6cd07483f4b4243fd1825b2705
f6e5061793111300f06035504031308556e696f6e50617930819f300d060
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
0000000023456789abcdef12123456786789abcd
17f1fc3c2086752a423ad49628259794cc54a82fe96ba4c66475319bc795c8342025d8da4ac2
11300f060355040813085368616e67686169311130
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
f8K5HQ82hreMKpawCmtAikMcvoTfGm/pSPtHgwUvsPk=
3634385a3078310b300906035504061302383631
536C79B93ACFBEA950AE365D8CE1AEF91FEA9535
e772a7ba31dc574f7adb3a0b8a05bc7780146fed534b72e2c921ab5e11791608d44212f323a3c233f8721cf8546ade8c4dc8162b79005489ee821b4d3875eb048f762359c077094cc013e1f85fb45068500d1e4b31a060eed42aede6f2872f3f4110adc443be174410618bf4b75e5122ea7e17ed3c1dd5929d3ae84c1c1c1295
D75BB2802E61738A9A03BF014F927D9A
7ea1fab66f2e5a07de633eb318eea17c
bbc724824a7c915914a92df9daf7db2a
7851a2394cdbd97c36ff59be4c985bd5
15060355040a130e4368696e6120556e696f6e50617931173015060355040b130e4
3015060355040a130e4368696e6120556e696

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
com/alimama/mobile/MMAdView.java, line(s) 65
com/alimama/mobile/csdk/umupdate/a/b.java, line(s) 145
com/alimama/mobile/csdk/umupdate/a/g.java, line(s) 27,38,42,33,21,46,50,54,58
com/alimama/mobile/csdk/umupdate/a/j.java, line(s) 70
com/alimama/mobile/csdk/umupdate/models/Promoter.java, line(s) 350
com/baidu/b/c.java, line(s) 140,148
com/baidu/b/g.java, line(s) 40
com/baidu/mtjstatsdk/b/b.java, line(s) 150,157,237,245,293,299,309,315,327,340,357,30,93,99,109,115,133,168,223,232,265
com/baidu/mtjstatsdk/b/d.java, line(s) 26,34,61,98,61,78
com/bdkj/common/net/http/config/LogStrategy.java, line(s) 49,20
com/bdkj/common/utils/AndroidUtil.java, line(s) 33,37,162,195,199
com/bdkj/common/utils/ExitUtils.java, line(s) 51
com/bdkj/common/utils/ImageUtils.java, line(s) 1034
com/bdkj/common/utils/MD5Util.java, line(s) 24,168,178,186,195,203,216
com/bdkj/common/utils/SpanUtils.java, line(s) 862,875
com/bdkj/common/utils/log/AndroidLogTool.java, line(s) 8,13,23,28,18,33
com/bdkj/common/utils/log/Logger.java, line(s) 48,369,175,372,366,375
com/bdkj/fastdoor/iteration/huanxin/FdHXNotifier.java, line(s) 229,247
com/bdkj/fastdoor/iteration/huanxin/FdHxSdkHelper.java, line(s) 132
com/bdkj/fastdoor/iteration/huanxin/applib/model/HXNotifier.java, line(s) 91,104,252,241
com/bdkj/fastdoor/iteration/net/imagedownloader/ImageListenerWrapper.java, line(s) 19,23,25
com/bdkj/fastdoor/iteration/util/imageglider/GliderOption.java, line(s) 143
com/bdkj/fastdoor/iteration/util/takephoto/ImageChooserCompat.java, line(s) 48,51,55
com/bdkj/fastdoor/iteration/util/takephoto/api/ImageChooserManager.java, line(s) 141
com/bdkj/fastdoor/iteration/util/takephoto/api/MediaChooserManager.java, line(s) 116
com/bdkj/fastdoor/iteration/util/takephoto/threads/ImageProcessorThread.java, line(s) 46
com/bdkj/fastdoor/iteration/util/takephoto/threads/MediaProcessorThread.java, line(s) 79,102,106,107,108,126,130,216,235,252,271,281,282,283,308,324,326,364
com/bdkj/fastdoor/iteration/view/ClipZoomImageView.java, line(s) 261
com/bdkj/fastdoor/iteration/view/FdViews/FillPhotoView.java, line(s) 104
com/bdkj/fastdoor/iteration/view/ParallaxListView.java, line(s) 37
com/bdkj/fastdoor/views/pickerview/lib/WheelView.java, line(s) 319
com/bdkj/push/getui/ChannelService.java, line(s) 22
com/bdkj/push/manager/GTPushManager.java, line(s) 148,164,53
com/chinaums/pppay/ActivityPayCodeRiskVerifySmsCode.java, line(s) 196
com/chinaums/pppay/ActivitySelectInstall.java, line(s) 222
com/chinaums/pppay/DisplayViewPayActivity.java, line(s) 199,203,638,640,659,1028,1070,1080,1108,2110,189,666,869
com/chinaums/pppay/IdentityVerifyActivity.java, line(s) 301,305,802
com/chinaums/pppay/SetPasswordActivity.java, line(s) 306,325,343
com/chinaums/pppay/VerifySmsCodeActivity.java, line(s) 271
com/chinaums/pppay/app/NetManager.java, line(s) 187,224,252,261,265
com/chinaums/pppay/quickpay/DialogQuickPayActivity.java, line(s) 360,574,637
com/chinaums/pppay/quickpay/QuickPayInputPasswordActivity.java, line(s) 320,323,331,369
com/chinaums/pppay/quickpay/ScanCodePayActivity.java, line(s) 541
com/chinaums/pppay/unify/UnifyPayPlugin.java, line(s) 77,83
com/chinaums/pppay/unify/UnifyUtils.java, line(s) 112,116,71
com/chinaums/pppay/util/LogUtil.java, line(s) 21,24,44,47,67,70,90,93,113,116
com/chinaums/securitykeypad/c.java, line(s) 16,10
com/easemob/a/a.java, line(s) 41,70,99,106,116,52,75,77,95,127,129,138,141,144,154,157,169,172
com/easemob/analytics/EMActiveCollector.java, line(s) 38,51,54,58,65,69
com/easemob/analytics/EMLoginCollector.java, line(s) 16,20,24
com/easemob/analytics/EMMessageCollector.java, line(s) 11
com/easemob/analytics/EMPerformanceCollector.java, line(s) 19,23,27,31,38,42,46,50,54
com/easemob/b/a.java, line(s) 94,97,101,104,106
com/easemob/chat/EMCallerJingleSession.java, line(s) 43,51,62,66,120,137
com/easemob/chat/EMChat.java, line(s) 61,131,64,67,74,79,80,93,143
com/easemob/chat/EMChatConfig.java, line(s) 77,80,87,125,126,166,132,136
com/easemob/chat/EMChatManager.java, line(s) 110,115,116,131,151,168,192,225,230,265,270,303,414,454,577,622,633,682,769,906,961,1089,1099,1106,1158,1164,1267,416,699,928,1316,1324,630
com/easemob/chat/EMChatRoomManager.java, line(s) 118,210,216,234,240,244,255,351,364,441,485,496,503,510,529,545,552,557,107,401,251
com/easemob/chat/EMChatService.java, line(s) 26,38,57,60,33
com/easemob/chat/EMCmdManager.java, line(s) 27,33,37,40
com/easemob/chat/EMContactManager.java, line(s) 85,92,101,126,137,145,219,257,267,347,356,359,368,383,403,413,415,425,438,255,448,272
com/easemob/chat/EMConversation.java, line(s) 332,177
com/easemob/chat/EMConversationManager.java, line(s) 103,142,158,200,231,291,307,311,355,368
com/easemob/chat/EMCustomerService.java, line(s) 49,79,106,156
com/easemob/chat/EMEncryptUtils.java, line(s) 15,29,37,39,41,43,53,56,71,83,85,87,89,21,60,93
com/easemob/chat/EMExtraService.java, line(s) 40
com/easemob/chat/EMGCMBroadcastReceiver.java, line(s) 14
com/easemob/chat/EMGroupManager.java, line(s) 139,146,156,163,173,182,201,206,211,218,220,233,238,240,250,255,260,265,270,275,350,402,428,437,466,536,648,651,654,676,741,746,786,810,864,881,974,986,996,1043,1174,1184,1234,1301,1314,1321,1329,1332,1335,1340,1351,1356,1358,1362,1369,1385,1399,1413,1443,1462,1471,1491,1507,1522,1533,1540,1552,1561,1574,1583,1593,1599,1603,1631,1642,1650,766,778
com/easemob/chat/EMGroupMessageListener.java, line(s) 28,32,57,60,71
com/easemob/chat/EMHeartBeatReceiver.java, line(s) 19
com/easemob/chat/EMJingleStreamManager.java, line(s) 175,228,243,257,284,293,230,289,219,223
com/easemob/chat/EMMessage.java, line(s) 183,194,233,245,256,533
com/easemob/chat/EMMessageHandler.java, line(s) 65,101,178,208,234,296,56,200
com/easemob/chat/EMMessageListener.java, line(s) 56,65,130,145,195,198,212,219
com/easemob/chat/EMMessageUtils.java, line(s) 33,39,46,52,59,65,76,80,84,90
com/easemob/chat/EMMonitorReceiver.java, line(s) 17
com/easemob/chat/EMMultiUserChatManager.java, line(s) 50,337
com/easemob/chat/EMMultiUserChatProcessor.java, line(s) 44,68,71,73
com/easemob/chat/EMNotifier.java, line(s) 287,326,357,415,427,438,447,466,313
com/easemob/chat/EMOfflineMessageHandler.java, line(s) 33,36,76,79,128
com/easemob/chat/EMPresenceHandler.java, line(s) 79,103,118,96,107
com/easemob/chat/EMPushNotificationHelper.java, line(s) 44,47,57,70,86,127,133,143,146,227,230,67,136,202,224
com/easemob/chat/EMReceiveMessageThread.java, line(s) 93,121,147,113
com/easemob/chat/EMReceiverJingleSession.java, line(s) 76,95,101,122,126,132,143,175,169,49,105,164,65
com/easemob/chat/EMRecvAckListener.java, line(s) 51,54,62,65,74,83,87
com/easemob/chat/EMRosterListener.java, line(s) 25,31,36,48,66,77
com/easemob/chat/EMRosterStorageImpl.java, line(s) 31,37,67,75,87,101,61
com/easemob/chat/EMSDKLocalTest.java, line(s) 13,18,22,27
com/easemob/chat/EMSendMessageRunnable.java, line(s) 133,143,148,158,159,246,257,271,299,325,329,370,375,382,390,403,421,426,447,459,464,479,497,509,528,544,550,581,600,625,665,677,710,715,724,729,750,815,442,467,552,709,803,878
com/easemob/chat/EMSessionHandler.java, line(s) 40
com/easemob/chat/EMSessionManager.java, line(s) 80,105,107,111,113,300,309,394,479,519,530,150,160,170,180,190,206,215,225,234,269,277,288,294,311,259
com/easemob/chat/EMSmartHeartBeat.java, line(s) 68,72,79,106,113,131,134,136,147,150,152,185,190,199,209,212,250,256,272,273,287,292,323,328,161,204,221,227
com/easemob/chat/EMVoiceCallManager.java, line(s) 58,117,269,276,282,251,340,498,279,475
com/easemob/chat/EMVoiceCallSession.java, line(s) 104,216,308,314,99,248,259
com/easemob/chat/ImageMessageBody.java, line(s) 48
com/easemob/chat/MessageEncoder.java, line(s) 224,356,370,342,375
com/easemob/chat/StartServiceReceiver.java, line(s) 11
com/easemob/chat/SwipeCmdProcessor.java, line(s) 24,39,44,50,51,55
com/easemob/chat/VideoMessageBody.java, line(s) 58
com/easemob/chat/VoiceMessageBody.java, line(s) 39
com/easemob/chat/core/EMConnectionManager.java, line(s) 101,140,154,215,217,226,276,344,360,368,370,385,396,402,409,427,441,453,456,461,472,476,525,535,542,546,548,598,607,641,654,739,756,178,184,189,206,278,349,364,419,522,538,551,561,564,567,570,585,625,263
com/easemob/chat/core/c.java, line(s) 146,158,164,168,175,184,189,191,193,194,198,212,113
com/easemob/chat/core/d.java, line(s) 39,41,58,113,115
com/easemob/chat/core/i.java, line(s) 112,117,127,160,256,677,707,765,787,813,903,938,987,1004,1025,1050,1058,1107,1129,1248,1258,1289,1308,1328,1341,1357,1381,1391,1413,1420,1432,1477,1495,1505,1575,190,299,319,689,722,907,920,953,1232,238
com/easemob/chat/core/j.java, line(s) 214,248,252,338,485,260,431,234
com/easemob/chat/core/l.java, line(s) 142,112,123,144
com/easemob/chat/core/p.java, line(s) 237,252,263,265,506
com/easemob/chat/core/s.java, line(s) 86,106,122,135
com/easemob/cloud/EMHttpClient.java, line(s) 82,88
com/easemob/cloud/HttpClientManager.java, line(s) 100,168,237
com/easemob/cloud/HttpFileManager.java, line(s) 68,70,74,204,267,280,334,349,531,108,168,270,306,359,433,442,484,560,581,595
com/easemob/debug/DebugHelper.java, line(s) 41,90,37,65,81,83,86,115
com/easemob/easeui/adapter/EaseContactAdapter.java, line(s) 139,175,176,207,211,219
com/easemob/easeui/adapter/EaseConversationAdapter.java, line(s) 106,107
com/easemob/easeui/model/EaseNotifier.java, line(s) 92,107,256,243
com/easemob/easeui/model/EaseVoiceRecorder.java, line(s) 76,119,57,69
com/easemob/easeui/ui/EaseChatFragment.java, line(s) 482,495
com/easemob/easeui/ui/EaseShowBigImageActivity.java, line(s) 48,50,65,141,125
com/easemob/easeui/ui/EaseShowVideoActivity.java, line(s) 36,47
com/easemob/easeui/utils/EaseCommonUtils.java, line(s) 98
com/easemob/easeui/utils/EaseImageUtils.java, line(s) 11,17
com/easemob/easeui/widget/chatrow/EaseChatRowVideo.java, line(s) 85
com/easemob/easeui/widget/chatrow/EaseChatRowVoice.java, line(s) 61
com/easemob/easeui/widget/chatrow/EaseChatRowVoicePlayClickListener.java, line(s) 147,110
com/easemob/easeui/widget/photoview/PhotoViewAttacher.java, line(s) 253,273,307,660,695,712,39
com/easemob/media/AVNative.java, line(s) 15,20,86,87,90,92,97,102,107
com/easemob/media/EIce.java, line(s) 121,130,134,138
com/easemob/media/EMVideoCallBridge.java, line(s) 13
com/easemob/media/WebRtcAudioRecord.java, line(s) 32,36
com/easemob/media/WebRtcAudioTrack.java, line(s) 38,42
com/easemob/util/CryptoUtils.java, line(s) 70,97
com/easemob/util/EMLog.java, line(s) 54,57,60,66,78,81,84,91,108,111,114,128,131,134,146,149,152,157
com/easemob/util/EasyUtils.java, line(s) 101,105
com/easemob/util/FileLogger.java, line(s) 109,283,287,290,349,353,68,374,376,378,401
com/easemob/util/HanziToPinyin.java, line(s) 308,331
com/easemob/util/ImageUtils.java, line(s) 50,95,97,106,118,126,143,153,154,162
com/easemob/util/NetUtils.java, line(s) 27,32,35,99,104,107,161
com/easemob/util/VoiceRecorder.java, line(s) 112,138,93,105
com/kbeanie/multipicker/api/ContactPicker.java, line(s) 133
com/kbeanie/multipicker/utils/FileUtils.java, line(s) 25,65
com/kbeanie/multipicker/utils/LogUtils.java, line(s) 9,15
com/kbeanie/multipicker/utils/StreamHelper.java, line(s) 22,78
com/lrz/coroutine/LLog.java, line(s) 30,37,44,51,16,23,58,65
com/lrz/coroutine/flow/Observable.java, line(s) 387
com/lrz/coroutine/flow/ObservableSet.java, line(s) 113
com/lrz/coroutine/flow/net/HttpClient.java, line(s) 60,101,138
com/lrz/coroutine/flow/net/ReqObservable.java, line(s) 176
com/lrz/coroutine/handler/CoroutineLRZScope.java, line(s) 174,190,234,242,257,265,303,315,329,348,356,193
com/lrz/coroutine/handler/HandlerLRZThread.java, line(s) 108
com/lrz/coroutine/handler/LJob.java, line(s) 95
com/monch/lbase/orm/Log.java, line(s) 43,76,126,159,64,97,147,180,22,29,50,83,133,166,36,69,119,152,57,90,140,173
com/monch/lbase/orm/db/TableManager.java, line(s) 71,76,104,177,70,75,92,93,101,109,110,163,164,176,182,183,223
com/monch/lbase/orm/db/assit/Querier.java, line(s) 12,18,24,13,19,25
com/monch/lbase/orm/db/assit/Transaction.java, line(s) 29,17,23,24,28
com/monch/lbase/orm/db/impl/DataBaseSQLiteImpl.java, line(s) 233,234,266,267
com/monch/lbase/orm/db/impl/SQLStatement.java, line(s) 111,148,197,248,466,153,253,91,92,110,143,144,147,152,183,184,196,243,244,247,252,286,287,312,313,328,333,336,391,392,445,454,465,446,455
com/monch/lbase/orm/db/utils/DataUtil.java, line(s) 91,92
com/nineoldandroids/animation/PropertyValuesHolder.java, line(s) 148,176,222,240,242,259,261,297,299,425,427,515,517
com/pingplusplus/android/PaymentActivity.java, line(s) 148,149,151,225,233,416,436,485,640,800,855,937,1031,1086,1204,1222,1238,1290,1303,1342,1353,1398,844
com/pingplusplus/android/Pingpp.java, line(s) 72,107,117,128,247,257,88,112,123,132,152
com/pingplusplus/android/PingppLog.java, line(s) 28,43
com/pingplusplus/android/PingppUtil.java, line(s) 52
com/pingplusplus/android/PingppWebView.java, line(s) 363,191
com/pingplusplus/android/b.java, line(s) 57,70
com/pingplusplus/android/e.java, line(s) 29
com/pingplusplus/android/f.java, line(s) 127
com/pingplusplus/android/k.java, line(s) 31,40,51,83
com/pingplusplus/android/l.java, line(s) 112
com/pingplusplus/android/wap/JDPayWebView.java, line(s) 108,136
com/pingplusplus/android/wap/YeepayWebView.java, line(s) 102
com/qmuiteam/qmui/qqface/QMUIQQFaceView.java, line(s) 734,943,766,817,821,836
com/qmuiteam/qmui/util/QMUIDrawableHelper.java, line(s) 157
com/qmuiteam/qmui/util/QMUIKeyboardHelper.java, line(s) 31
com/qmuiteam/qmui/util/QMUINotchHelper.java, line(s) 46,59,62,357,359,361,43,56
com/qmuiteam/qmui/widget/QMUIAnimationListView.java, line(s) 535,144,173
com/qmuiteam/qmui/widget/QMUITabSegment.java, line(s) 440
com/qmuiteam/qmui/widget/dialog/QMUIBottomSheet.java, line(s) 130
com/qmuiteam/qmui/widget/popup/QMUIBasePopup.java, line(s) 165,266
com/qmuiteam/qmui/widget/pullRefreshLayout/QMUIPullRefreshLayout.java, line(s) 290,329,389,369,396,412,447
com/qmuiteam/qmui/widget/section/QMUIStickySectionAdapter.java, line(s) 503
com/qmuiteam/qmui/widget/textview/QMUILinkTextView.java, line(s) 88,162,166,172,195,199
com/qmuiteam/qmui/widget/webview/QMUIWebView.java, line(s) 241,249,251
com/sobot/network/http/cookie/PersistentCookieStore.java, line(s) 139,148,151
com/sobot/network/http/download/SobotDownloadTask.java, line(s) 98
com/sobot/network/http/log/LoggerInterceptor.java, line(s) 42,44,45,46,48,51,54,57,59,70,71,72,74,78,80,82,85
com/sobot/network/http/log/SobotNetLogUtils.java, line(s) 44,50,56,62,70,76,79,85,91,97,103,109,115,121,127,133
com/sobot/network/http/upload/SobotUpload.java, line(s) 73,84,92,104,112
com/sobot/network/http/upload/SobotUploadTask.java, line(s) 84,93,117
com/sobot/network/http/utils/L.java, line(s) 10
com/tencent/a/a/a/a/b.java, line(s) 27,33,49,39,57
com/tencent/a/a/a/a/c.java, line(s) 31,45
com/tencent/a/a/a/a/d.java, line(s) 22,31
com/tencent/a/a/a/a/e.java, line(s) 22,31
com/tencent/a/a/a/a/h.java, line(s) 16,42,63,46
com/unionpay/b/d.java, line(s) 25
com/unionpay/b/g.java, line(s) 25
com/unionpay/utils/j.java, line(s) 20,26,22,18,24
com/xonami/javaBells/DefaultJingleSession.java, line(s) 90,85
com/xonami/javaBells/JinglePacketHandler.java, line(s) 126,133
com/yanzhenjie/permission/ApLog.java, line(s) 55,61,67,91,97,103,37,43,49,19,25,31,73,79,85
com/zhy/autolayout/utils/L.java, line(s) 11
com/zxy/tiny/common/Logger.java, line(s) 11
de/measite/smack/AndroidDebugger.java, line(s) 45,54,65,72,77,83,88,94,148
gov/nist/core/GenericObjectList.java, line(s) 237,246
gov/nist/core/InternalErrorHandler.java, line(s) 9,15,24,25
org/greenrobot/eventbus/BackgroundPoster.java, line(s) 40
org/greenrobot/eventbus/EventBus.java, line(s) 290,429,431,440,172
org/greenrobot/eventbus/util/AsyncExecutor.java, line(s) 98
org/greenrobot/eventbus/util/ErrorDialogConfig.java, line(s) 34
org/greenrobot/eventbus/util/ErrorDialogManager.java, line(s) 188
org/greenrobot/eventbus/util/ExceptionToResourceMapping.java, line(s) 26
org/jivesoftware/smack/PacketReader.java, line(s) 50
org/jivesoftware/smack/Roster.java, line(s) 180,186,208
org/jivesoftware/smack/SASLAuthentication.java, line(s) 160,211,244
org/jivesoftware/smack/ServerTrustManager.java, line(s) 230
org/jivesoftware/smack/SmackConfiguration.java, line(s) 161
org/jivesoftware/smack/XMPPConnection.java, line(s) 162,169,227,700,721,728,377,385
org/jivesoftware/smack/debugger/ConsoleDebugger.java, line(s) 42,51,62,69,74,80,85,91,145
org/jivesoftware/smack/debugger/FileDebugger.java, line(s) 43,44,54,55,66,67,74,75,81,82,89,90,96,97,104,105,160
org/jivesoftware/smack/parsing/ExceptionLoggingCallback.java, line(s) 10,12
org/jivesoftware/smack/util/Base64.java, line(s) 352,358,359,360,410,437,798,1013,1014,309
org/jivesoftware/smack/util/Cache.java, line(s) 227,245
org/jivesoftware/smack/util/PacketParserUtils.java, line(s) 379,416,430
org/jivesoftware/smack/util/StringUtils.java, line(s) 352,358
org/jivesoftware/smackx/ConfigureProviderManager.java, line(s) 49,70
org/jivesoftware/smackx/muc/MultiUserChat.java, line(s) 86,113
u/upd/b.java, line(s) 37,43,22,28,30,10,16,49,55,61,67,69
uk/co/senab/photoview/PhotoViewAttacher.java, line(s) 56
uk/co/senab/photoview/log/LoggerDefault.java, line(s) 18,23,48,53,28,33,8,13,38,43

信息 此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改 

此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/bdkj/fastdoor/tools/AddressUpdateManager.java, line(s) 23,65,65,86,7
com/bdkj/fastdoor/tools/ClipboardUtil.java, line(s) 24,24,32,32,34,44,46,71,71,72,75,78,78,79,5

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/bdkj/fastdoor/tools/ClipboardUtil.java, line(s) 5,107,111,115,119,129,169

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/bdkj/common/net/http/ssl/HttpSslFactory.java, line(s) 101,53,99,99
com/sobot/network/http/SobotOkHttpUtils.java, line(s) 60,59,58,58
com/unionpay/a/b.java, line(s) 29,28,27,27

安全 此应用程序可能具有Root检测功能 

此应用程序可能具有Root检测功能
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/chinaums/pppay/net/base/a.java, line(s) 47
com/chinaums/pppay/util/DeviceUtil.java, line(s) 81,89,85,89,89,89,89,171
com/unionpay/UPPayAssistEx.java, line(s) 206

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (sissi.pingxx.com) 通信。 

{'ip': '124.237.176.59', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (verify.baidubce.com) 通信。 

{'ip': '106.11.226.79', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '苏州', 'latitude': '31.311365', 'longitude': '120.617691'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (w.m.taobao.com) 通信。 

{'ip': '59.82.31.142', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (aip.baidubce.com) 通信。 

{'ip': '106.11.226.79', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '苏州', 'latitude': '31.311365', 'longitude': '120.617691'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (mpos.quanminfu.com) 通信。 

{'ip': '180.169.95.130', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.jdpay.com) 通信。 

{'ip': '106.11.226.79', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (qr-test1.chinaums.com) 通信。 

{'ip': '58.220.70.29', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '扬州', 'latitude': '32.397221', 'longitude': '119.435600'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (h5.m.taobao.com) 通信。 

{'ip': '106.11.226.79', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '镇江', 'latitude': '32.209366', 'longitude': '119.434372'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (m.amap.com) 通信。 

{'ip': '106.11.226.79', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cb.kfw.net) 通信。 

{'ip': '60.205.120.116', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api3.kfw.net) 通信。 

{'ip': '60.205.120.116', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.kfw.net) 通信。 

{'ip': '60.205.120.116', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (dwz.cn) 通信。 

{'ip': '124.237.176.59', 'country_short': 'CN', 'country_long': '中国', 'region': '河北', 'city': '保定', 'latitude': '38.851109', 'longitude': '115.490280'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (sns.whalecloud.com) 通信。 

{'ip': '203.119.169.82', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apitest.kfw.net) 通信。 

{'ip': '60.205.120.116', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api.kfw.net) 通信。 

{'ip': '60.205.120.116', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (mobilegw.alipaydev.com) 通信。 

{'ip': '110.75.132.131', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (shouyin.yeepay.com) 通信。 

{'ip': '103.143.19.4', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (h5pay.jd.com) 通信。 

{'ip': '36.110.181.142', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (mobiletest.yeepay.com) 通信。 

{'ip': '58.83.141.75', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api.sobot.com) 通信。 

{'ip': '203.107.41.32', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (sdk.open.phone.igexin.com) 通信。 

{'ip': '115.227.15.235', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '嘉兴', 'latitude': '30.752199', 'longitude': '120.750000'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ulogs.umengcloud.com) 通信。 

{'ip': '223.109.148.141', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '南京', 'latitude': '32.061668', 'longitude': '118.777992'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api1.kfw.net) 通信。 

{'ip': '60.205.120.116', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (npic.kfw.net) 通信。 

{'ip': '27.221.77.41', 'country_short': 'CN', 'country_long': '中国', 'region': '山东', 'city': '青岛', 'latitude': '36.098610', 'longitude': '120.371941'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.easemob.com) 通信。 

{'ip': '218.94.206.175', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '苏州', 'latitude': '31.311365', 'longitude': '120.617691'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (c-hzgt2.getui.com) 通信。 

{'ip': '115.227.15.15', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '嘉兴', 'latitude': '30.752199', 'longitude': '120.750000'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (qr.95516.com) 通信。 

{'ip': '58.220.75.72', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '扬州', 'latitude': '32.397221', 'longitude': '119.435600'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (7xj3tk.com1.z0.glb.clouddn.com) 通信。 

{'ip': '106.63.18.141', 'country_short': 'CN', 'country_long': '中国', 'region': '天津', 'city': '天津', 'latitude': '39.142181', 'longitude': '117.176102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (img.sobot.com) 通信。 

{'ip': '183.204.245.217', 'country_short': 'CN', 'country_long': '中国', 'region': '河南', 'city': '南阳', 'latitude': '32.994720', 'longitude': '112.532784'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (statistics.pingxx.com) 通信。 

{'ip': '121.43.73.154', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.chinaums.com) 通信。 

{'ip': '58.220.70.6', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '扬州', 'latitude': '32.397221', 'longitude': '119.435600'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (netpay.cmbchina.com) 通信。 

{'ip': '58.33.159.101', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api2t.kfw.net) 通信。 

{'ip': '60.205.120.116', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.95516.com) 通信。 

{'ip': '58.220.75.72', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '扬州', 'latitude': '32.397221', 'longitude': '119.435600'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (qr-test2.chinaums.com) 通信。 

{'ip': '139.196.88.82', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (u.eqxiu.com) 通信。 

{'ip': '61.170.44.188', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api2.kfw.net) 通信。 

{'ip': '60.205.120.116', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (log.umsns.com) 通信。 

{'ip': '59.82.29.162', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (qr.chinaums.com) 通信。 

{'ip': '150.158.221.208', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api6.kfw.net) 通信。 

{'ip': '60.205.120.116', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (kfw.net) 通信。 

{'ip': '60.205.120.116', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

安全评分: ( fastservice 6.4.4)