安全分数
安全分数 38/100
风险评级
等级
- A
- B
- C
- F
严重性分布 (%)
隐私风险
2
用户/设备跟踪器
调研结果
高危
13
中危
28
信息
2
安全
2
关注
26
高危 Activity (com.oecPcWILaDAa.BRXFqEtFjb.zxgymepcActivity) is vulnerable to StrandHogg 2.0
已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (28) 更新到 29 或更高版本以在平台级别修复此问题。
高危 Activity (com.oecPcWILaDAa.BRXFqEtFjb.zkhyaunejahzkkbysActivity) is vulnerable to StrandHogg 2.0
已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (28) 更新到 29 或更高版本以在平台级别修复此问题。
高危 Activity (com.oecPcWILaDAa.BRXFqEtFjb.xsiafufqzyxceActivity) is vulnerable to StrandHogg 2.0
已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (28) 更新到 29 或更高版本以在平台级别修复此问题。
高危 Activity (com.ddtx.dingdatacontact.wallet.wxapi.WXEntryActivity) is vulnerable to StrandHogg 2.0
已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (28) 更新到 29 或更高版本以在平台级别修复此问题。
高危 Activity (com.oecPcWILaDAa.BRXFqEtFjb.wxapi.WXEntryActivity) is vulnerable to StrandHogg 2.0
已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (28) 更新到 29 或更高版本以在平台级别修复此问题。
高危 默认情况下,调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知,ECB模式很弱,因为它导致相同明文块的密文相同
默认情况下,调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知,ECB模式很弱,因为它导致相同明文块的密文相同 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode Files: Qgkcuvw56IPKf2YPvkLL/JRhN9IuSlchArAKyWXFj/BVr72sshpxfMJvnNq3LA/C1725.java, line(s) 68
高危 使用弱加密算法
使用弱加密算法 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: Qgkcuvw56IPKf2YPvkLL/Hdv8Yy2ZJuwEeEokgInb/BVr72sshpxfMJvnNq3LA/yEUVogJDaoB3ZYdhDTzJ/AbstractC1638.java, line(s) 12,19 Qgkcuvw56IPKf2YPvkLL/JRhN9IuSlchArAKyWXFj/BVr72sshpxfMJvnNq3LA/C1725.java, line(s) 272 Qgkcuvw56IPKf2YPvkLL/vTxTcCqSG1lChnS947FK/BVr72sshpxfMJvnNq3LA/Hdv8Yy2ZJuwEeEokgInb/C3209.java, line(s) 30,43 com/netease/nim/uikit/utils/DESUtil.java, line(s) 17,28
高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: Qgkcuvw56IPKf2YPvkLL/GLoXRM6c9E8VgyJ93LmL/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/jtNtfUWC3JPFi8wEWVdT/BVr72sshpxfMJvnNq3LA/C1473.java, line(s) 37,73 Qgkcuvw56IPKf2YPvkLL/GLoXRM6c9E8VgyJ93LmL/jtNtfUWC3JPFi8wEWVdT/EyxiQAFEkEJxvNW8bKCZ/EyxiQAFEkEJxvNW8bKCZ/C1588.java, line(s) 39 Qgkcuvw56IPKf2YPvkLL/JRhN9IuSlchArAKyWXFj/BVr72sshpxfMJvnNq3LA/C1725.java, line(s) 89 Qgkcuvw56IPKf2YPvkLL/kPPlmRS4L7Psdpu8w7qX/BVr72sshpxfMJvnNq3LA/IyeijXN6RJBPoCFpX6jO/AbstractC2965.java, line(s) 64 Qgkcuvw56IPKf2YPvkLL/kPPlmRS4L7Psdpu8w7qX/BVr72sshpxfMJvnNq3LA/eR8v11LgIErsyUESsE6Q/C3012.java, line(s) 19 com/ddtx/dingdatacontact/main/activity/MsgMigrationActivity.java, line(s) 122,364
高危 已启用远程WebView调试
已启用远程WebView调试 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing Files: Qgkcuvw56IPKf2YPvkLL/aCOC8YQVjNummGXxzcf5/BVr72sshpxfMJvnNq3LA/C2511.java, line(s) 69,10
高危 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击
不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#webview-server-certificate-verification Files: Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/C2391.java, line(s) 62,61 com/netease/nim/uikit/widget/H5WebView.java, line(s) 94,93
高危 WebView域控制不严格漏洞
WebView域控制不严格漏洞 Files: Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/C2395.java, line(s) 42,35,36,37,38,39,40,41,42,44,45,46,47 Qgkcuvw56IPKf2YPvkLL/aCOC8YQVjNummGXxzcf5/BVr72sshpxfMJvnNq3LA/AbstractC2514.java, line(s) 48,22 com/netease/nim/uikit/X5WebView.java, line(s) 37,34 com/netease/nim/uikit/business/session/activity/fragment/BaiFragment.java, line(s) 41,34,35,36,37,38,39,40,41,43,44,45,46 com/netease/nim/uikit/business/session/activity/fragment/JingFragment.java, line(s) 39,32,33,34,35,36,37,38,39,41,42,43,44 com/netease/nim/uikit/business/session/activity/fragment/TengFragment.java, line(s) 39,32,33,34,35,36,37,38,39,41,42,43,44 com/netease/nim/uikit/widget/H5WebView.java, line(s) 46,36,38,39,40,41,42,43,44,45,46,48,49,50,51
高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击
如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7 Files: Qgkcuvw56IPKf2YPvkLL/aCOC8YQVjNummGXxzcf5/BVr72sshpxfMJvnNq3LA/C2481.java, line(s) 120,156,5
高危 SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击
SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#android-network-apis Files: Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/C2380.java, line(s) 206,59,60,61,62,63,64 com/netease/yunxin/base/http/AsyncHttpURLConnection.java, line(s) 58,12
中危 应用程序可以安装在有漏洞的已更新 Android 版本上
Android 4.4-4.4.4, [minSdk=19] 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
中危 应用程序已启用明文网络流量
[android:usesCleartextTraffic=true] 应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。
中危 Activity (com.oecPcWILaDAa.BRXFqEtFjb.zxgymepcActivity) 未被保护。
[android:exported=true] 发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
中危 Activity (com.oecPcWILaDAa.BRXFqEtFjb.zkhyaunejahzkkbysActivity) 未被保护。
[android:exported=true] 发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
中危 Activity (com.oecPcWILaDAa.BRXFqEtFjb.xsiafufqzyxceActivity) 未被保护。
[android:exported=true] 发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
中危 Service (com.ddtx.dingdatacontact.LogoutService) 未被保护。
[android:exported=true] 发现 Service与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
中危 Service (com.netease.nimlib.job.NIMJobService) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.BIND_JOB_SERVICE [android:exported=true] 发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
中危 Service (com.xiaomi.mipush.sdk.PushMessageHandler) 未被保护。
[android:exported=true] 发现 Service与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
中危 Broadcast Receiver (com.xiaomi.push.service.receivers.NetworkStatusReceiver) 未被保护。
[android:exported=true] 发现 Broadcast Receiver与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
中危 Broadcast Receiver (com.netease.nimlib.mixpush.mi.MiPushReceiver) 未被保护。
[android:exported=true] 发现 Broadcast Receiver与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
中危 Broadcast Receiver (com.netease.nimlib.mixpush.mz.MZPushReceiver) 未被保护。
存在一个intent-filter。 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
中危 Service (com.ddtx.dingdatacontact.main.KeepAliveService) 未被保护。
[android:exported=true] 发现 Service与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
中危 Activity (com.ddtx.dingdatacontact.wallet.wxapi.WXEntryActivity) 未被保护。
[android:exported=true] 发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
中危 Activity-Alias (com.oecPcWILaDAa.BRXFqEtFjb.wxapi.WXEntryActivity) 未被保护。
[android:exported=true] 发现 Activity-Alias与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
中危 Broadcast Receiver (com.netease.nim.avchatkit.receiver.IncomingCallReceiver) 未被保护。
存在一个intent-filter。 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
中危 Service (com.meizu.cloud.pushsdk.NotificationService) 未被保护。
[android:exported=true] 发现 Service与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
中危 Service (com.huawei.hms.support.api.push.service.HmsMsgService) 未被保护。
[android:exported=true] 发现 Service与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
中危 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据
应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage Files: Qgkcuvw56IPKf2YPvkLL/IyeijXN6RJBPoCFpX6jO/BVr72sshpxfMJvnNq3LA/C1686.java, line(s) 243 Qgkcuvw56IPKf2YPvkLL/IyeijXN6RJBPoCFpX6jO/BVr72sshpxfMJvnNq3LA/IBhIQnJ5dgIodAU1uGio/C1656.java, line(s) 19 Qgkcuvw56IPKf2YPvkLL/JRhN9IuSlchArAKyWXFj/BVr72sshpxfMJvnNq3LA/C1746.java, line(s) 50,65,97 Qgkcuvw56IPKf2YPvkLL/JRhN9IuSlchArAKyWXFj/BVr72sshpxfMJvnNq3LA/C1766.java, line(s) 37 Qgkcuvw56IPKf2YPvkLL/JRhN9IuSlchArAKyWXFj/BVr72sshpxfMJvnNq3LA/e6Na8fnkVq7iBG5HSc3Q/C1692.java, line(s) 67 Qgkcuvw56IPKf2YPvkLL/NMAVc7oEDfENXOvn7hSt/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/C1793.java, line(s) 32 Qgkcuvw56IPKf2YPvkLL/NMAVc7oEDfENXOvn7hSt/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/C1797.java, line(s) 26 Qgkcuvw56IPKf2YPvkLL/NMAVc7oEDfENXOvn7hSt/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/C1807.java, line(s) 82,83 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/C2369.java, line(s) 7 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/C2375.java, line(s) 52 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/TjCbqG7qse28oiMyMmjq/Qgkcuvw56IPKf2YPvkLL/C2168.java, line(s) 25 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/kPPlmRS4L7Psdpu8w7qX/jtNtfUWC3JPFi8wEWVdT/C2320.java, line(s) 93 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/C2355.java, line(s) 21 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/C2360.java, line(s) 92,132,215 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/Hdv8Yy2ZJuwEeEokgInb/jtNtfUWC3JPFi8wEWVdT/C2331.java, line(s) 33,34 Qgkcuvw56IPKf2YPvkLL/Z9oFXB8VuU3oMwjCNxLI/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C2432.java, line(s) 64 Qgkcuvw56IPKf2YPvkLL/aCOC8YQVjNummGXxzcf5/BVr72sshpxfMJvnNq3LA/C2522.java, line(s) 198,402 Qgkcuvw56IPKf2YPvkLL/fB6AHnCVLlL8KA7Txh4R/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C2631.java, line(s) 26 Qgkcuvw56IPKf2YPvkLL/fB6AHnCVLlL8KA7Txh4R/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C2638.java, line(s) 10 Qgkcuvw56IPKf2YPvkLL/fB6AHnCVLlL8KA7Txh4R/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C2640.java, line(s) 48 Qgkcuvw56IPKf2YPvkLL/fB6AHnCVLlL8KA7Txh4R/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C2651.java, line(s) 52,218,413,212,285,289,407,422,468,482,567,586,601 Qgkcuvw56IPKf2YPvkLL/fB6AHnCVLlL8KA7Txh4R/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C2666.java, line(s) 40 Qgkcuvw56IPKf2YPvkLL/jtNtfUWC3JPFi8wEWVdT/BVr72sshpxfMJvnNq3LA/jtNtfUWC3JPFi8wEWVdT/C2794.java, line(s) 91 Qgkcuvw56IPKf2YPvkLL/k8GnVYXCjGq1GzChzmYB/BVr72sshpxfMJvnNq3LA/Qgkcuvw56IPKf2YPvkLL/C2861.java, line(s) 599,600 Qgkcuvw56IPKf2YPvkLL/k8GnVYXCjGq1GzChzmYB/BVr72sshpxfMJvnNq3LA/Qgkcuvw56IPKf2YPvkLL/C2897.java, line(s) 303,331,560 Qgkcuvw56IPKf2YPvkLL/kPPlmRS4L7Psdpu8w7qX/BVr72sshpxfMJvnNq3LA/eR8v11LgIErsyUESsE6Q/C3026.java, line(s) 19,72 Qgkcuvw56IPKf2YPvkLL/o8hcCUgB2fkmQy8XNVO2/BVr72sshpxfMJvnNq3LA/C3198.java, line(s) 239,374 Qgkcuvw56IPKf2YPvkLL/vTxTcCqSG1lChnS947FK/BVr72sshpxfMJvnNq3LA/IBhIQnJ5dgIodAU1uGio/C3223.java, line(s) 32,36,42,130,137,144 Qgkcuvw56IPKf2YPvkLL/vTxTcCqSG1lChnS947FK/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C3229.java, line(s) 119 Qgkcuvw56IPKf2YPvkLL/yEUVogJDaoB3ZYdhDTzJ/BVr72sshpxfMJvnNq3LA/C3275.java, line(s) 19,37,42,48,57 Qgkcuvw56IPKf2YPvkLL/yEUVogJDaoB3ZYdhDTzJ/BVr72sshpxfMJvnNq3LA/C3280.java, line(s) 59,27,31,55,86,106,110,114,118 Qgkcuvw56IPKf2YPvkLL/yEUVogJDaoB3ZYdhDTzJ/BVr72sshpxfMJvnNq3LA/C3296.java, line(s) 53 Qgkcuvw56IPKf2YPvkLL/yEUVogJDaoB3ZYdhDTzJ/BVr72sshpxfMJvnNq3LA/C3308.java, line(s) 246,311,328 Qgkcuvw56IPKf2YPvkLL/yEUVogJDaoB3ZYdhDTzJ/BVr72sshpxfMJvnNq3LA/C3322.java, line(s) 34,50 cn/bmob/v3/util/InstallUtil.java, line(s) 13 com/ddtx/dingdatacontact/file/browser/FileBrowserActivity.java, line(s) 25 com/ddtx/dingdatacontact/login/LoginActivity.java, line(s) 1210 com/ddtx/dingdatacontact/session/activity/FileDownloadActivity.java, line(s) 57 com/ddtx/dingdatacontact/session/utils/RedPackDialogUtil.java, line(s) 59 com/netease/nim/uikit/business/session/activity/WatchVideoActivity.java, line(s) 116 com/netease/nim/uikit/common/util/log/sdk/util/FileUtils.java, line(s) 48 com/netease/nim/uikit/common/util/storage/ExternalStorage.java, line(s) 73,143,144 com/netease/nim/uikit/common/util/storage/StorageUtil.java, line(s) 29,32 com/netease/nrtc/b.java, line(s) 1202 com/netease/nrtc/b/a.java, line(s) 94,121 com/netease/nrtc/c/b/b.java, line(s) 90 com/netease/nrtc/c/b/c.java, line(s) 24 com/netease/nrtc/engine/impl/e.java, line(s) 702 com/netease/nrtc/rec/impl/RecEngine.java, line(s) 35 com/netease/nrtc/utility/e.java, line(s) 120,121 com/netease/nrtc/utility/l.java, line(s) 37 com/netease/nrtc/video/b/a/a/d.java, line(s) 1058 com/netease/nrtc/video/c.java, line(s) 126 com/netease/util/common/SDCardUtils.java, line(s) 35,39 com/netease/yunxin/nos/c/i.java, line(s) 34 com/netease/yunxin/report/sdk/ReportManager.java, line(s) 78 com/utils/library/photo/GetSimplePhotoActivity.java, line(s) 64 jtNtfUWC3JPFi8wEWVdT/SJUmNRloONoe3yjsnfnl/Qgkcuvw56IPKf2YPvkLL/C6873.java, line(s) 295 jtNtfUWC3JPFi8wEWVdT/SJUmNRloONoe3yjsnfnl/gAZdDhmaX3FlQY6cKB43/C6951.java, line(s) 19,25,25
中危 应用程序使用不安全的随机数生成器
应用程序使用不安全的随机数生成器 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators Files: IBhIQnJ5dgIodAU1uGio/aJ96qew8PQrQhOfPhAsQ/AbstractC0389.java, line(s) 7 IBhIQnJ5dgIodAU1uGio/aJ96qew8PQrQhOfPhAsQ/C0384.java, line(s) 6 IBhIQnJ5dgIodAU1uGio/aJ96qew8PQrQhOfPhAsQ/C0385.java, line(s) 10 IBhIQnJ5dgIodAU1uGio/aJ96qew8PQrQhOfPhAsQ/C0390.java, line(s) 7 IBhIQnJ5dgIodAU1uGio/aJ96qew8PQrQhOfPhAsQ/C0392.java, line(s) 7 IBhIQnJ5dgIodAU1uGio/feSavHttN7ZPplfVhpGB/C0500.java, line(s) 16 Qgkcuvw56IPKf2YPvkLL/JRhN9IuSlchArAKyWXFj/BVr72sshpxfMJvnNq3LA/C1760.java, line(s) 3 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/TjCbqG7qse28oiMyMmjq/C2171.java, line(s) 10 Qgkcuvw56IPKf2YPvkLL/o8hcCUgB2fkmQy8XNVO2/BVr72sshpxfMJvnNq3LA/C3183.java, line(s) 26 Qgkcuvw56IPKf2YPvkLL/yEUVogJDaoB3ZYdhDTzJ/BVr72sshpxfMJvnNq3LA/C3279.java, line(s) 5 com/ddtx/dingdatacontact/paypassword/KeyBoardAdapter.java, line(s) 13 com/netease/nim/uikit/common/ui/barrage/BarrageSurfaceView.java, line(s) 18 com/netease/nim/uikit/extension/GuessAttachment.java, line(s) 4 com/netease/nrtc/monitor/b.java, line(s) 17 com/netease/share/media/a.java, line(s) 16 com/netease/yunxin/nos/a/d.java, line(s) 16 com/netease/yunxin/report/sdk/event/AbsEvent.java, line(s) 3 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/C5024.java, line(s) 4 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/C5030.java, line(s) 7 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/C5038.java, line(s) 5 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/C5045.java, line(s) 6 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/C5047.java, line(s) 3 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/dVYt6VUbYakTcfJxB1Lx/AbstractC5427.java, line(s) 9 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/o8hcCUgB2fkmQy8XNVO2/BVr72sshpxfMJvnNq3LA/AbstractC5776.java, line(s) 7 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/o8hcCUgB2fkmQy8XNVO2/BVr72sshpxfMJvnNq3LA/AbstractC5781.java, line(s) 6
中危 SHA-1是已知存在哈希冲突的弱哈希
SHA-1是已知存在哈希冲突的弱哈希 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: Qgkcuvw56IPKf2YPvkLL/GLoXRM6c9E8VgyJ93LmL/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/jtNtfUWC3JPFi8wEWVdT/BVr72sshpxfMJvnNq3LA/C1477.java, line(s) 30 Qgkcuvw56IPKf2YPvkLL/GLoXRM6c9E8VgyJ93LmL/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/jtNtfUWC3JPFi8wEWVdT/BVr72sshpxfMJvnNq3LA/C1478.java, line(s) 25 Qgkcuvw56IPKf2YPvkLL/GLoXRM6c9E8VgyJ93LmL/jtNtfUWC3JPFi8wEWVdT/EyxiQAFEkEJxvNW8bKCZ/EyxiQAFEkEJxvNW8bKCZ/C1581.java, line(s) 18 Qgkcuvw56IPKf2YPvkLL/k8GnVYXCjGq1GzChzmYB/BVr72sshpxfMJvnNq3LA/Qgkcuvw56IPKf2YPvkLL/C2944.java, line(s) 604 Qgkcuvw56IPKf2YPvkLL/o8hcCUgB2fkmQy8XNVO2/BVr72sshpxfMJvnNq3LA/C3192.java, line(s) 175,218 cn/bmob/v3/datatype/up/UpYunUtils.java, line(s) 27 cn/bmob/v3/realtime/Client.java, line(s) 160 com/netease/yunxin/nos/a/d.java, line(s) 89
中危 IP地址泄露
IP地址泄露 Files: Qgkcuvw56IPKf2YPvkLL/GLoXRM6c9E8VgyJ93LmL/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/jtNtfUWC3JPFi8wEWVdT/Qgkcuvw56IPKf2YPvkLL/C1501.java, line(s) 29 Qgkcuvw56IPKf2YPvkLL/GLoXRM6c9E8VgyJ93LmL/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/o8hcCUgB2fkmQy8XNVO2/C1532.java, line(s) 21 Qgkcuvw56IPKf2YPvkLL/PKhbKKbUqovqWGJ28s5J/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/Qgkcuvw56IPKf2YPvkLL/AbstractC1824.java, line(s) 61,70 Qgkcuvw56IPKf2YPvkLL/fB6AHnCVLlL8KA7Txh4R/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C2643.java, line(s) 173,173 Qgkcuvw56IPKf2YPvkLL/k8GnVYXCjGq1GzChzmYB/BVr72sshpxfMJvnNq3LA/Qgkcuvw56IPKf2YPvkLL/C2888.java, line(s) 44 Qgkcuvw56IPKf2YPvkLL/k8GnVYXCjGq1GzChzmYB/BVr72sshpxfMJvnNq3LA/Qgkcuvw56IPKf2YPvkLL/C2950.java, line(s) 84 Qgkcuvw56IPKf2YPvkLL/vTxTcCqSG1lChnS947FK/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C3229.java, line(s) 346,348 com/netease/nrtc/monitor/statistics/b/a/a.java, line(s) 82 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/InterfaceC5021.java, line(s) 25 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/Qgkcuvw56IPKf2YPvkLL/C5084.java, line(s) 15 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/o8hcCUgB2fkmQy8XNVO2/C5124.java, line(s) 16 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/o8hcCUgB2fkmQy8XNVO2/C5125.java, line(s) 15,54,54 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/o8hcCUgB2fkmQy8XNVO2/C5129.java, line(s) 13 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/o8hcCUgB2fkmQy8XNVO2/C5132.java, line(s) 14 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/o8hcCUgB2fkmQy8XNVO2/C5135.java, line(s) 15 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/o8hcCUgB2fkmQy8XNVO2/C5141.java, line(s) 14 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/CeAxNSkgF2Nj71jdBNMU/InterfaceC5148.java, line(s) 12,5,13,14,15,6,7,8,9,10,11,16 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/Efj3Hj6GJUerdeYrJwz2/C5191.java, line(s) 13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,42,41,12,35,36,37,38,39,40 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/Efj3Hj6GJUerdeYrJwz2/C5197.java, line(s) 86,88,90,113,133,115,92,103,105,107,109,111,117,94,135,84,119,99,101,96,149,147,131,121,123,125,127,129 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/Efj3Hj6GJUerdeYrJwz2/C5214.java, line(s) 20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,49,48,19,42,43,44,45,46,47 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/Efj3Hj6GJUerdeYrJwz2/C5217.java, line(s) 21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,50,49,20,43,44,45,46,47,48 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/Efj3Hj6GJUerdeYrJwz2/C5223.java, line(s) 13,12 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/Efj3Hj6GJUerdeYrJwz2/C5250.java, line(s) 5,6,7 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/Efj3Hj6GJUerdeYrJwz2/C5253.java, line(s) 57,35 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/Efj3Hj6GJUerdeYrJwz2/InterfaceC5213.java, line(s) 10,33,34 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/Efj3Hj6GJUerdeYrJwz2/InterfaceC5255.java, line(s) 28,22,18,19,20,14,21,15,16,17,24,23,25 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/Efj3Hj6GJUerdeYrJwz2/vELil3WjdxXzKaPJfTye/InterfaceC5181.java, line(s) 5,7,6,8,11,9,10 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/Efj3Hj6GJUerdeYrJwz2/wnDf9QBs2ZpHdEpwvKae/InterfaceC5184.java, line(s) 5,6 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/FA5rwhYD9DIwA49HVDhw/InterfaceC5269.java, line(s) 13 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/G2vx6Tg8NHzN49G3cRhb/InterfaceC5294.java, line(s) 223,241,20,233,188,189,190,191,192,193,294,295,273,274 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/JMaHVfbuYRbdEYVpombv/InterfaceC5307.java, line(s) 14,15,18,19,20,21,16,17,22,23,24,25,8 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/KjFP4OrQAA6kjjsVsvGu/C5308.java, line(s) 18 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/KjFP4OrQAA6kjjsVsvGu/C5312.java, line(s) 16 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/O8Hl6n283xEcAhZJFlYs/C5318.java, line(s) 21 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/O8Hl6n283xEcAhZJFlYs/InterfaceC5325.java, line(s) 32,63 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/Qw8m3iaTBzgbYdmGkXnx/InterfaceC5353.java, line(s) 21,7,14,15,16,17,18,19,20,8,9,10,11,12,13,22,23,5,6,24,25,26,27,28,29,30,31,32,33 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/WCHp1GbF8O5QtmN9DJYZ/InterfaceC5382.java, line(s) 17 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/XM933NLazoQrZzYPEIOD/InterfaceC5398.java, line(s) 40 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/YzomKTK2MbuVP93cRLK1/n6o4fki2EzuaA8OXddWt/C5399.java, line(s) 108,110,146,80,128,72,116,118,120,114,140,144,142,90,154,100,124,82,122,76,104,112,126,130,152,134,106,94,98,92,156,86,88,84,132,150,96,74,102,136,138,148,78 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/YzomKTK2MbuVP93cRLK1/n6o4fki2EzuaA8OXddWt/C5402.java, line(s) 68,70,72,95,115,97,74,85,87,89,91,93,99,76,117,66,101,81,83,78,131,129,113,103,105,107,109,111 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/ZIIoGMxqbPEDxAPcoYlL/InterfaceC5411.java, line(s) 43 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/aJ96qew8PQrQhOfPhAsQ/InterfaceC5415.java, line(s) 14,16 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/dVYt6VUbYakTcfJxB1Lx/InterfaceC5432.java, line(s) 13,12,10 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/j4oct3oUXAceId3LOCF7/InterfaceC5441.java, line(s) 129 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/jmmMTGlrMbvq4T2X9CSO/InterfaceC5475.java, line(s) 34 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/lL46y9SRvMfxXNbpXUrL/InterfaceC5483.java, line(s) 5,6,7,8,9,10,11,12 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/li5LdfKoJcnBu8PmVYVy/InterfaceC5507.java, line(s) 51,29 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/mZ7UQBfggevJjjy4T8MR/InterfaceC5544.java, line(s) 22 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/nA6hVPn9KIlkAwAYcz71/InterfaceC5559.java, line(s) 25 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/oelc8pJtwDBm9XPmYLiH/InterfaceC5561.java, line(s) 8,9 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/qRxDOnQO9ladYSiy3HgS/InterfaceC5577.java, line(s) 37 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/wQIzENwaxFL4FLKj6KFQ/C5579.java, line(s) 56 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/wmVR7ScSkSKBMRv9IBBW/InterfaceC5586.java, line(s) 5,6,7,8,9,10 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/wtlNcTnuxjdtApJ6EVHr/InterfaceC5587.java, line(s) 43
中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2 Files: Qgkcuvw56IPKf2YPvkLL/k8GnVYXCjGq1GzChzmYB/BVr72sshpxfMJvnNq3LA/Qgkcuvw56IPKf2YPvkLL/AbstractC2879.java, line(s) 5,19 Qgkcuvw56IPKf2YPvkLL/k8GnVYXCjGq1GzChzmYB/BVr72sshpxfMJvnNq3LA/Qgkcuvw56IPKf2YPvkLL/C2947.java, line(s) 5,6,26 cn/bmob/v3/util/BmobDbOpenHelper.java, line(s) 4,5,29
中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件
应用程序创建临时文件。敏感信息永远不应该被写进临时文件 Files: IBhIQnJ5dgIodAU1uGio/Arojwi8DVCeCgjcs3aEi/C0085.java, line(s) 295,296,348 Qgkcuvw56IPKf2YPvkLL/jtNtfUWC3JPFi8wEWVdT/BVr72sshpxfMJvnNq3LA/jtNtfUWC3JPFi8wEWVdT/C2794.java, line(s) 179 jtNtfUWC3JPFi8wEWVdT/fvKEMrwWZDqWQV7Ar8Aj/C7408.java, line(s) 153
中危 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等
文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10 Files: Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/C1408.java, line(s) 75 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/C1337.java, line(s) 30 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/C1346.java, line(s) 65 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/C1368.java, line(s) 37 Qgkcuvw56IPKf2YPvkLL/PKhbKKbUqovqWGJ28s5J/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/Qgkcuvw56IPKf2YPvkLL/C1831.java, line(s) 25 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/C2375.java, line(s) 94,99 Qgkcuvw56IPKf2YPvkLL/kPPlmRS4L7Psdpu8w7qX/BVr72sshpxfMJvnNq3LA/kPPlmRS4L7Psdpu8w7qX/C3072.java, line(s) 36 cn/bmob/v3/datatype/up/ParallelUploader.java, line(s) 36 cn/bmob/v3/datatype/up/Params.java, line(s) 22,11,26 cn/bmob/v3/http/bean/Migration.java, line(s) 73 com/ddtx/dingdatacontact/AppConstant.java, line(s) 34 com/netease/nim/uikit/rest/SignUtil.java, line(s) 16,15 com/netease/nim/uikit/utils/AesUtil.java, line(s) 13 com/netease/nrtc/a.java, line(s) 31 com/netease/nrtc/engine/rawapi/RtcParameters.java, line(s) 128 com/netease/nrtc/internal/ClientSocks5Info.java, line(s) 57 com/netease/nrtc/internal/NEMediaEngineConfig.java, line(s) 451 com/netease/yunxin/report/sdk/report/AbsEventReport.java, line(s) 34,31 jtNtfUWC3JPFi8wEWVdT/EyxiQAFEkEJxvNW8bKCZ/o8hcCUgB2fkmQy8XNVO2/SJUmNRloONoe3yjsnfnl/C6124.java, line(s) 34,36
中危 MD5是已知存在哈希冲突的弱哈希
MD5是已知存在哈希冲突的弱哈希 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: Qgkcuvw56IPKf2YPvkLL/BVr72sshpxfMJvnNq3LA/C0913.java, line(s) 23 Qgkcuvw56IPKf2YPvkLL/JRhN9IuSlchArAKyWXFj/BVr72sshpxfMJvnNq3LA/C1732.java, line(s) 17,42,52 Qgkcuvw56IPKf2YPvkLL/NMAVc7oEDfENXOvn7hSt/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/C1801.java, line(s) 56 Qgkcuvw56IPKf2YPvkLL/aCOC8YQVjNummGXxzcf5/BVr72sshpxfMJvnNq3LA/C2522.java, line(s) 541 Qgkcuvw56IPKf2YPvkLL/fB6AHnCVLlL8KA7Txh4R/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C2628.java, line(s) 609 Qgkcuvw56IPKf2YPvkLL/fB6AHnCVLlL8KA7Txh4R/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/VxSUPYPFtsA6ek3bSCyw/C2617.java, line(s) 36 Qgkcuvw56IPKf2YPvkLL/kPPlmRS4L7Psdpu8w7qX/BVr72sshpxfMJvnNq3LA/eR8v11LgIErsyUESsE6Q/C3016.java, line(s) 26 Qgkcuvw56IPKf2YPvkLL/n6o4fki2EzuaA8OXddWt/BVr72sshpxfMJvnNq3LA/C3138.java, line(s) 162,387 Qgkcuvw56IPKf2YPvkLL/o8hcCUgB2fkmQy8XNVO2/BVr72sshpxfMJvnNq3LA/C3183.java, line(s) 48 Qgkcuvw56IPKf2YPvkLL/o8hcCUgB2fkmQy8XNVO2/BVr72sshpxfMJvnNq3LA/C3192.java, line(s) 37,155,245 Qgkcuvw56IPKf2YPvkLL/vTxTcCqSG1lChnS947FK/BVr72sshpxfMJvnNq3LA/Hdv8Yy2ZJuwEeEokgInb/C3211.java, line(s) 60 Qgkcuvw56IPKf2YPvkLL/vTxTcCqSG1lChnS947FK/BVr72sshpxfMJvnNq3LA/Hdv8Yy2ZJuwEeEokgInb/C3218.java, line(s) 348 Qgkcuvw56IPKf2YPvkLL/vTxTcCqSG1lChnS947FK/BVr72sshpxfMJvnNq3LA/IBhIQnJ5dgIodAU1uGio/C3224.java, line(s) 750 Qgkcuvw56IPKf2YPvkLL/yEUVogJDaoB3ZYdhDTzJ/BVr72sshpxfMJvnNq3LA/C3274.java, line(s) 284 cn/bmob/v3/datatype/up/UpYunUtils.java, line(s) 50,69,116 cn/bmob/v3/http/RequestUtils.java, line(s) 52,82 cn/bmob/v3/util/EncryptMD5.java, line(s) 19,39,58 cn/bmob/v3/util/EncryptUtils.java, line(s) 81 com/netease/nim/uikit/common/util/string/MD5.java, line(s) 10,31 com/netease/nim/uikit/rest/SignUtil.java, line(s) 63 com/netease/util/common/MD5Utils.java, line(s) 9 com/netease/yunxin/base/crypto/MD5.java, line(s) 19 com/netease/yunxin/nos/c/e.java, line(s) 22
中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞
不安全的Web视图实现。可能存在WebView任意代码执行漏洞 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5 Files: Qgkcuvw56IPKf2YPvkLL/k8GnVYXCjGq1GzChzmYB/BVr72sshpxfMJvnNq3LA/EyxiQAFEkEJxvNW8bKCZ/C2814.java, line(s) 82,72
中危 应用程序包含隐私跟踪程序
此应用程序有多个2隐私跟踪程序。跟踪器可以跟踪设备或用户,是终端用户的隐私问题。
中危 此应用可能包含硬编码机密信息
从应用程序中识别出以下机密确保这些不是机密或私人信息 openinstall统计的 "com.openinstall.APP_KEY" : "ghbfm3" 友盟统计的 "UMENG_CHANNEL" : "feige" 高德地图的 "com.amap.api.v2.apikey" : "ebf5cca88fcb41cdb50868b487b2b990" E95E4A5F737059DC60DFC7AD95B3D8139515620C 64210519E59C80E70FA7E9AB72243049FEB8DEECC146B9B1 3DF91610A83441CAEA9863BC2DED5D5AA8253AA10A2EF1C98B9AC8B57F1117A72BF2C7B9E7C1AC4D77FC94CADC083E67984050B75EBAE5DD2809BD638016F723 4099B5A457F9D69F79213D094C4BCD4D4262210B 0620048D28BCBD03B6249C99182B7C8CD19700C362C46A01 5EEEFCA380D02919DC2C6558BB6D8A5D 70B5E1E14031C1F70BBEFE96BDDE66F451754B4CA5F48DA241F331AA396B8D1839A855C1769B1EA14BA53308B5E2723724E090E02DB9 026108BABB2CEEBCF787058A056CBE0CFE622D7723A289E08A07AE13EF0D10D171DD8D 2AA058F73A0E33AB486B0F610410C53A7F132310 b28ef557ba31dfcbdd21ac46e2a91e3c304f44cb87058ada2cb815151e610046 0095E9A9EC9B297BD4BF36E059184F f7e1a085d69b3ddecbbcab5c36b857b97994afbbfa3aea82f9574c0b3d0782675159578ebad4594fe67107108180b449167123e84c281613b7cf09328cc8a6e13c167a8b547c8d28e0a3ae1e2bb3a675916ea37f0bfa213562f1fb627a01243bcca4f1bea8519089a883dfe15ae59f06928b665e807b552564014c3bfecf492a 6127C24C05F38A0AAAF65C0EF02C b6c88e9dae374bcba9eeb8936a040f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f15230bccb292b982a2eb840bf0581cf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af09d98727705120c921bb5e9e26296a3cdcf2f35757a0eafd87b830e7 B3312FA7E23EE7E4988E056BE3F82D19181D9C6EFE8141120314088F5013875AC656398D8A2ED19D2A85C8EDD3EC2AEF 0370F6E9D04D289C4E89913CE3530BFDE903977D42B146D539BF1BDE4E9C92 040060F05F658F49C1AD3AB1890F7184210EFD0987E307C84C27ACCFB8F9F67CC2C460189EB5AAAA62EE222EB1B35540CFE902374601E369050B7C4E42ACBA1DACBF04299C3460782F918EA427E6325165E9EA10E3DA5F6C42E9C55215AA9CA27A5863EC48D8E0286B 03CE10490F6A708FC26DFE8C3D27C4F94E690134D5BFF988D8D28AAEAEDE975936C66BAC536B18AE2DC312CA493117DAA469C640CAF3 021cc0370d824a51b7c8180485c27b38 04A1455B334DF099DF30FC28A169A467E9E47075A90F7E650EB6B7A45C7E089FED7FBA344282CAFBD6F7E319F7C0B0BD59E2CA4BDB556D61A5 1053CDE42C14D696E67687561517533BF3F83345 6A941977BA9F6A435199ACFC51067ED587F519C5ECB541B8E44111DE1D40 c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd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ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b 0452DCB034293A117E1F4FF11B30F7199D3144CE6DFEAFFEF2E331F296E071FA0DF9982CFEA7D43F2E 340E7BE2A280EB74E2BE61BADA745D97E8F7C300 044A96B5688EF573284664698968C38BB913CBFC8223A628553168947D59DCC912042351377AC5FB32 07ff9b7aeeff969173c45b285fe0fecdbaae244576ff7a2796a36f1c0c11adb4 A9FB57DBA1EEA9BC3E660A909D838D718C397AA3B561A6F7901E0E82974856A7 FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E088A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9A63A3620FFFFFFFFFFFFFFFF e2f856b9f9a4fd4cb2795aeaf83268e4bff189aaec05d691ffde76e075b82648 0066647EDE6C332C7F8C0923BB58213B333B20E9CE4281FE115F7D8F90AD D35E472036BC4FB7E13C785ED201E065F98FCFA5B68F12A32D482EC7EE8658E98691555B44C59311 0228F9D04E900069C8DC47A08534FE76D2B900B7D7EF31F5709F200C4CA205 00FD0D693149A118F651E6DCE6802085377E5F882D1B510B44160074C1288078365A0396C8E681 00F50B028E4D696E676875615175290472783FB1 AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA703308717D4D9B009BC66842AECDA12AE6A380E62881FF2F2D82C68528AA6056583A48F0 70390085352083305199547718019018437840920882647164081035322601458352298396601 100997906755055304772081815535925224869841082572053457874823515875577147990529272777244152852699298796483356699682842027972896052747173175480590485607134746852141928680912561502802222185647539190902656116367847270145019066794290930185446216399730872221732889830323194097355403213400972588322876850946740663962 00E4E6DB2995065C407D9D39B8D0967B96704BA8E9C90B 8CF83642A709A097B447997640129DA299B1A47D1EB3750BA308B0FE64F5FBD3 115792089210356248762697446949407573530086143415290314195533631308867097853951 03eea2bae7e1497842f2de7769cfe9c989c072ad696f48034a 91771529896554605945588149018382750217296858393520724172743325725474374979801 64210519e59c80e70fa7e9ab72243049feb8deecc146b9b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d4826087d31755748c767515c367b99 0400C6858E06B70404E9CD9E3ECB662395B4429C648139053FB521F828AF606B4D3DBAA14B5E77EFE75928FE1DC127A2FFA8DE3348B3C1856A429BF97E7E31C2E5BD66011839296A789A3BC0045C8A5FB42C7D1BD998F54449579B446817AFBD17273E662C97EE72995EF42640C550B9013FAD0761353C7086A272C24088BE94769FD16650 0713612DCDDCB40AAB946BDA29CA91F73AF958AFD9 040369979697AB43897789566789567F787A7876A65400435EDB42EFAFB2989D51FEFCE3C80988F41FF883 57896044618658097711785492504343953926634992332820282019728792003956564823193 714114B762F2FF4A7912A6D2AC58B9B5C2FCFE76DAEB7129 03375D4CE24FDE434489DE8746E71786015009E66E38A926DD 7BC86E2102902EC4D5890E8B6B4981ff27E0482750FEFC03 64033881142927202683649881450433473985931760268884941288852745803908878638612 1f3bdba585295d9a1110d1df1f9430ef8442c5018976ff3437ef91b81dc0b8132c8d5c39c32d0e004a3092b7d327c0e7a4d26d2c7b69b58f9066652911e457779de 03188da80eb03090f67cbf20eb43a18800f4ff0afd82ff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fed96c85bd58c58aadbd465c172a4c9a794d8eb2f86cbc7bcee6caf4c7a2c5f 04161FF7528B899B2D0C28607CA52C5B86CF5AC8395BAFEB13C02DA292DDED7A83 6EE3CEEB230811759F20518A0930F1A4315A827DAC 020ffa963cdca8816ccc33b8642bedf905c3d358573d3f27fbbd3b3cb9aaaf D6031998D1B3BBFEBF59CC9BBFF9AEE1 AD107E1E9123A9D0D660FAA79559C51FA20D64E5683B9FD1B54B1597B61D0A75E6FA141DF95A56DBAF9A3C407BA1DF15EB3D688A309C180E1DE6B85A1274A0A66D3F8152AD6AC2129037C9EDEFDA4DF8D91E8FEF55B7394B7AD5B7D0B6C12207C9F98D11ED34DBF6C6BA0B2C8BBC27BE6A00E0A0B9C49708B3BF8A317091883681286130BC8985DB1602E714415D9330278273C7DE31EFDC7310F7121FD5A07415987D9ADC0A486DCDF93ACC44328387315D75E198C641A480CD86A1B9E587E8BE60E69CC928B2B9C52172E413042E9B23F10B0E16E79763C9B53DCF4BA80A29E3FB73C16B8E75B97EF363E2FFA31F71CF9DE5384E71B81C0AC4DFFE0C10E64F 22123dc2395a05caa7423daeccc94760a7d462256bd56916 4230baa077b401374d0fc012375047e79ea0790d58d095ef18d97d95470c738d D35E472036BC4FB7E13C785ED201E065F98FCFA6F6F40DEF4F92B9EC7893EC28FCD412B1F1B32E24 24B7B137C8A14D696E6768756151756FD0DA2E5C 036b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296 469A28EF7C28CCA3DC721D044F4496BCCA7EF4146FBF25C9 103FAEC74D696E676875615175777FC5B191EF30 29818893917731240733471273240314769927240550812383695689146495261604565990247 74D59FF07F6B413D0EA14B344B20A2DB049B50C3 7167EFC92BB2E3CE7C8AAAFF34E12A9C557003D7C73A6FAF003F99F6CC8482E540F7 8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B31F166E6CAC0425A7CF3AB6AF6B7FC3103B883202E9046565 023809B2B7CC1B28CC5A87926AAD83FD28789E81E2C9E3BF10 p0frH2rtlSUlqSQ3y9NVDL8UopNj+k+fhEXfO5o2R2LU9ZncIixImnHlTYIfakbSfRb3feNLxvgz4Idb9exz3BWmbIgj/b1TPe17bwhWxws2v1rhLxYyHSwRwSzDEN5PtvkJDlSy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d29778100c65a1da1783716588dce2b8b4aee8e228f1896 A335926AA319A27A1D00896A6773A4827ACDAC73 4230017757A767FAE42398569B746325D45313AF0766266479B75654E65F 6b016c3bdcf18941d0d654921475ca71a9db2fb27d1d37796185c2942c0a B4050A850C04B3ABF54132565044B0B7D7BFD8BA270B39432355FFB4 8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B412B1DA197FB71123ACD3A729901D1A71874700133107EC50 aa8130e0-66fc-11e0-bad0-0002a5d5c51b 04017232BA853A7E731AF129F22FF4149563A419C26BF50A4C9D6EEFAD612601DB537DECE819B7F70F555A67C427A8CD9BF18AEB9B56E0C11056FAE6A3 0101BAF95C9723C57B6C21DA2EFF2D5ED588BDD5717E212F9D 28091019353058090096996979000309560759124368558014865957655842872397301267595 FFFFFFFE0000000075A30D1B9038A115 5F49EB26781C0EC6B8909156D98ED435E45FD59918 9ae05717296782a46d66ab0fd295e3e7 040D9029AD2C7E5CF4340823B2A87DC68C9E4CE3174C1E6EFDEE12C07D58AA56F772C0726F24C6B89E4ECDAC24354B9E99CAA3F6D3761402CD 25FBC363582DCEC065080CA8287AAFF09788A66DC3A9E C302F41D932A36CDA7A3463093D18DB78FCE476DE1A86294 31a92ee2029fd10d901b113e990710f0d21ac6b6 92ab66dfd063a1ce9170a6f424b3a7ac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b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c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f64ED579528D38120EAE12196D5 3EE30B568FBAB0F883CCEBD46D3F3BB8A2A73513F5EB79DA66190EB085FFA9F492F375A97D860EB4 c97445f45cdef9f0d3e05e1e585fc297235b82b5be8ff3efca67c59852018192 7BC382C63D8C150C3C72080ACE05AFA0C2BEA28E4FB22787139165EFBA91F90F8AA5814A503AD4EB04A8C7DD22CE2826 038D16C2866798B600F9F08BB4A8E860F3298CE04A5798 108576C80499DB2FC16EDDF6853BBB278F6B6FB437D9 06973B15095675534C7CF7E64A21BD54EF5DD3B8A0326AA936ECE454D2C 0403F0EBA16286A2D57EA0991168D4994637E8343E3600D51FBC6C71A0094FA2CDD545B11C5C0C797324F1 b368b110e3b565fe97c91f786e11bc48754cc8e4e6f21d8a94a68ac6ad67aaaf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f14ad2f0e5eb3c4f3a0bcd5c1592cc4492662ad53191c92905255d4990656 C302F41D932A36CDA7A3462F9E9E916B5BE8F1029AC4ACC1 11839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd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ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551 B99B99B099B323E02709A4D696E6768756151751 02F40E7E2221F295DE297117B7F3D62F5C6A97FFCB8CEFF1CD6BA8CE4A9A18AD84FFABBD8EFA59332BE7AD6756A66E294AFD185A78FF12AA520E4DE739BACA0C7FFEFF7F2955727A E87579C11079F43DD824993C2CEE5ED3 3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f e8b4011604095303ca3b8099982be09fcb9ae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c06c8400-8e06-11e0-9cb6-0002a5d5c51b 13D56FFAEC78681E68F9DEB43B35BEC2FB68542E27897B79 db48223fd9e143f7e133c57f5d08a4e38549ce3ebd921fe3b4003c26e5e35bed 10B51CC12849B234C75E6DD2028BF7FF5C1CE0D991A1 02197B07845E9BE2D96ADB0F5F3C7F2CFFBD7A3EB8B6FEC35C7FD67F26DDF6285A644F740A2614 FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551 040503213F78CA44883F1A3B8162F188E553CD265F23C1567A16876913B0C2AC245849283601CCDA380F1C9E318D90F95D07E5426FE87E45C0E8184698E45962364E34116177DD2259 0289FDFBE4ABE193DF9559ECF07AC0CE78554E2784EB8C1ED1A57A 115792089237316195423570985008687907853269984665640564039457584007913129639319 f6040d0e807aaec325ecf44823765544e92905158169f694b282bf17388632cf95a83bae7d2d235c1f039b0df1dcca5fda619b6f7f459f2ff8d70ddb7b601592fe29fcae58c028f319b3b12495e67aa5390942a997a8cb572c8030b2df5c2b622608bea02b0c3e5d4dff3f72c9e3204049a45c0760cd3604af8d57f0e0c693cc 659EF8BA043916EEDE8911702B22 10C0FB15760860DEF1EEF4D696E676875615175D 5D9306BACD22B7FAEB09D2E049C6E2866C5D1677762A8F2F2DC9A11C7F7BE8340AB2237C7F2A0 E95E4A5F737059DC60DF5991D45029409E60FC09 07A11B09A76B562144418FF3FF8C2570B8 F518AA8781A8DF278ABA4E7D64B7CB9D49462353 bb392ec0-8d4d-11e0-a896-0002a5d5c51b 520883949DFDBC42D3AD198640688A6FE13F41349554B49ACC31DCCD884539816F5EB4AC8FB1F1A6 4bdecdf772491e35c4e8b48f88aee22bae1311984f2e1da4dfad0b78ee7f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fab6832576cbbfed50d99f0249c3fee58b94ba0038c7ae84c8c832f2c FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E088A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE649286651ECE65381FFFFFFFFFFFFFFFF 027B680AC8B8596DA5A4AF8A19A0303FCA97FD7645309FA2A581485AF6263E313B79A2F5 043AE9E58C82F63C30282E1FE7BBF43FA72C446AF6F4618129097E2C5667C2223A902AB5CA449D0084B7E5B3DE7CCC01C9 00C9517D06D5240D3CFF38C74B20B6CD4D6F9DD4D9 92974c6802419e4d18b5ec536cbfa167b8e8eff09ec4c8510a5b95750b1e0c82 4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f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fd7f53811d75122952df4a9c2eece4e7f611b7523cef4400c31e3f80b6512669455d402251fb593d8d58fabfc5f5ba30f6cb9b556cd7813b801d346ff26660b76b9950a5a49f9fe8047b1022c24fbba9d7feb7c61bf83b57e7c6a8a6150f04fb83f6d3c51ec3023554135a169132f675f3ae2b61d72aeff22203199dd14801c7 77E2B07370EB0F832A6DD5B62DFC88CD06BB84BE 3081a0adab3018d57165e6dd24074bdbac640f6dbe21a9e24d3474a87ebf38b8 04188DA80EB03090F67CBF20EB43A18800F4FF0AFD82FF101207192B95FFC8DA78631011ED6B24CDD573F977A11E794811 7830A3318B603B89E2327145AC234CC594CBDD8D3DF91610A83441CAEA9863BC2DED5D5AA8253AA10A2EF1C98B9AC8B57F1117A72BF2C7B9E7C1AC4D77FC94CA 1A62BA79D98133A16BBAE7ED9A8E03C32E0824D57AEF72F88986874E5AAE49C27BED49A2A95058068426C2171E99FD3B43C5947C857D 51DEF1815DB5ED74FCC34C85D709 DB7C2ABF62E35E668076BEAD2088 db53fcdc9ab71e9bdd4eab257fe1aba7989ad2b24fbe3a85dfef72ea1dd6bae2 4B337D934104CD7BEF271BF60CED1ED20DA14C08B3BB64F18A60888D CFA0478A54717B08CE64805B76E5B14249A77A4838469DF7F7DC987EFCCFB11D 033C258EF3047767E7EDE0F1FDAA79DAEE3841366A132E163ACED4ED2401DF9C6BDCDE98E8E707C07A2239B1B097 0108B39E77C4B108BED981ED0E890E117C511CF072 036768ae8e18bb92cfcf005c949aa2c6d94853d0e660bbf854b1c9505fe95a 8e722de3125bddb05580164bfe20b8b432216a62926c57502ceede31c47816edd1e89769124179d0b695106428815065 0479BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798483ADA7726A3C4655DA4FBFC0E1108A8FD17B448A68554199C47D08FFB10D4B8 258EAFA5-E914-47DA-95CA-C5AB0DC85B11 0163F35A5137C2CE3EA6ED8667190B0BC43ECD69977702709B 04DB4FF10EC057E9AE26B07D0280B7F4341DA5D1B1EAE06C7D9B2F2F6D9C5628A7844163D015BE86344082AA88D95E2F9D 29C41E568B77C617EFE5902F11DB96FA9613CD8D03DB08DA aa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab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d7374168ffe3471b60a857686a19475d3bfa2ff 00FDFB49BFE6C3A89FACADAA7A1E5BBC7CC1C2E5D831478814 AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA703308717D4D9B009BC66842AECDA12AE6A380E62881FF2F2D82C68528AA6056583A48F3 023b1660dd701d0839fd45eec36f9ee7b32e13b315dc02610aa1b636e346df671f790f84c5e09b05674dbb7e45c803dd 03F7061798EB99E238FD6F1BF95B48FEEB4854252B 0021A5C2C8EE9FEB5C4B9A753B7B476B7FD6422EF1F3DD674761FA99D6AC27C8A9A197B272822F6CD57A55AA4F50AE317B13545F A59A749A11242C58C894E9E5A91804E8FA0AC64B56288F8D47D51B1EDC4D65444FECA0111D78F35FC9FDD4CB1F1B79A3BA9CBEE83A3F811012503C8117F98E5048B089E387AF6949BF8784EBD9EF45876F2E6A5A495BE64B6E770409494B7FEE1DBB1E4B2BC2A53D4F893D418B7159592E4FFFDF6969E91D770DAEBD0B5CB14C00AD68EC7DC1E5745EA55C706C4A1C5C88964E34D09DEB753AD418C1AD0F4FDFD049A955E5D78491C0B7A2F1575A008CCD727AB376DB6E695515B05BD412F5B8C2F4C77EE10DA48ABD53F5DD498927EE7B692BBBCDA2FB23A516C5B4533D73980B2A3B60E384ED200AE21B40D273651AD6060C13D97FD69AA13C5611A51B9085 E95E4A5F737059DC60DFC7AD95B3D8139515620F DB7C2ABF62E35E7628DFAC6561C5 7fffffffffffffffffffffff800000cfa7e8594377d414c03821bc582063 e43bb460f0b80cc0c0b075798e948060f8321b7d 00E8BEE4D3E2260744188BE0E9C723 173cf86fe9894a0f70dadd09d4fd88c380836099d4939f8c3754361bdc16a32b a5a15e08f251d517524383ba61f489d3 07A526C63D3E25A256A007699F5447E32AE456B50E 0401F481BC5F0FF84A74AD6CDF6FDEF4BF6179625372D8C0C5E10025E399F2903712CCF3EA9E3A1AD17FB0B3201B6AF7CE1B05 D7C134AA264366862A18302575D1D787B09F075797DA89F57EC8C0FC 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F 004D696E67687561517512D8F03431FCE63B88F4 d80f18e8081b624cc64985f87f70118f1702985d2e10dbc985ee7be334fd3c7d 127021248288932417465907042777176443525787653508916535812817507265705031260985098497423188333483401180925999995120988934130659205614996724254121049274349357074920312769561451689224110579311248812610229678534638401693520013288995000362260684222750813532307004517341633685004541062586971416883686778842537820383 AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA70330870553E5C414CA92619418661197FAC10471DB1D381085DDADDB58796829CA90069 C302F41D932A36CDA7A3463093D18DB78FCE476DE1A86297 002757A1114D696E6768756151755316C05E0BD4 0402FE13C0537BBC11ACAA07D793DE4E6D5E5C94EEE80289070FB05D38FF58321F2E800536D538CCDAA3D9 2E45EF571F00786F67B0081B9495A3D95462F5DE0AA185EC 4A6E0856526436F2F88DD07A341E32D04184572BEB710 1b9fa3e518d683c6b65763694ac8efbaec6fab44f2276171a42726507dd08add4c3b3f4c1ebc5b1222ddba077f722943b24c3edfa0f85fe24d0c8c01591f0be6f63 04A3E8EB3CC1CFE7B7732213B23A656149AFA142C47AAFBC2B79A191562E1305F42D996C823439C56D7F7B22E14644417E69BCB6DE39D027001DABE8F35B25C9BE D09E8800291CB85396CC6717393284AAA0DA64BA 02A29EF207D0E9B6C55CD260B306C7E007AC491CA1B10C62334A9E8DCD8D20FB7 36DF0AAFD8B8D7597CA10520D04B 00689918DBEC7E5A0DD6DFC0AA55C7 00FC1217D4320A90452C760A58EDCD30C8DD069B3C34453837A34ED50CB54917E1C2112D84D164F444F8F74786046A 04BED5AF16EA3F6A4F62938C4631EB5AF7BDBCDBC31667CB477A1A8EC338F94741669C976316DA6321 c469684435deb378c4b65ca9591e2a5763059a2e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cc22d6dfb95c6b25e49c0d6364a4e5980c393aa21668d953 010090512DA9AF72B08349D98A5DD4C7B0532ECA51CE03E2D10F3B7AC579BD87E909AE40A6F131E9CFCE5BD967 3FCDA526B6CDF83BA1118DF35B3C31761D3545F32728D003EEB25EFE96 85E25BFE5C86226CDB12016F7553F9D0E693A268 04009D73616F35F4AB1407D73562C10F00A52830277958EE84D1315ED31886 C49D360886E704936A6678E1139D26B7819F7E90 115792089237316195423570985008687907853073762908499243225378155805079068850323 FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E088A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3DC2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F83655D23DCA3AD961C62F356208552BB9ED529077096966D670C354E4ABC9804F1746C08CA18217C32905E462E36CE3BE39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9DE2BCBF6955817183995497CEA956AE515D2261898FA051015728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6BF12FFA06D98A0864D87602733EC86A64521F2B18177B200CBBE117577A615D6C770988C0BAD946E208E24FA074E5AB3143DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D788719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA993B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934063199FFFFFFFFFFFFFFFF 255705fa2a306654b1f4cb03d6a750a30c250102d4988717d9ba15ab6d3e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c49d360886e704936a6678e1139d26b7819f7e90 3826F008A8C51D7B95284D9D03FF0E00CE2CD723A 047B6AA5D85E572983E6FB32A7CDEBC14027B6916A894D3AEE7106FE805FC34B44 6C01074756099122221056911C77D77E77A777E7E7E77FCB 71FE1AF926CF847989EFEF8DB459F66394D90F32AD3F15E8
信息 应用程序记录日志信息,不得记录敏感信息
应用程序记录日志信息,不得记录敏感信息 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs Files: GLoXRM6c9E8VgyJ93LmL/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/IBhIQnJ5dgIodAU1uGio/C0004.java, line(s) 7,32,12,47,17,37,22,52,27,42 GLoXRM6c9E8VgyJ93LmL/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/View$OnTouchListenerC0017.java, line(s) 58 IBhIQnJ5dgIodAU1uGio/Arojwi8DVCeCgjcs3aEi/C0053.java, line(s) 45,59,64,69,74,79,84,89,99,104,149,154,164,180,185,190,195,200,205,210,231 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/ComponentCallbacks2C1427.java, line(s) 179,199,249,256 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/FRESJxXoGGzOQXA4fw58/C0940.java, line(s) 26 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/FRESJxXoGGzOQXA4fw58/yEUVogJDaoB3ZYdhDTzJ/C0914.java, line(s) 33 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/PozzyVIVhspp4KfUu7tV/C0957.java, line(s) 49,54,57,63,68 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/fvKEMrwWZDqWQV7Ar8Aj/C1029.java, line(s) 65 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/fvKEMrwWZDqWQV7Ar8Aj/gAZdDhmaX3FlQY6cKB43/AbstractC0999.java, line(s) 72,103 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/fvKEMrwWZDqWQV7Ar8Aj/gAZdDhmaX3FlQY6cKB43/AbstractC1015.java, line(s) 71,102 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/ghLBTWQ8n7lG6PP2UNku/C1034.java, line(s) 106 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/ghLBTWQ8n7lG6PP2UNku/C1037.java, line(s) 92 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/ghLBTWQ8n7lG6PP2UNku/C1038.java, line(s) 252 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/ghLBTWQ8n7lG6PP2UNku/C1041.java, line(s) 32,55,86 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/ghLBTWQ8n7lG6PP2UNku/C1043.java, line(s) 16 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/ghLBTWQ8n7lG6PP2UNku/FragmentC1045.java, line(s) 110 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/IyeijXN6RJBPoCFpX6jO/C1068.java, line(s) 40 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/IyeijXN6RJBPoCFpX6jO/C1086.java, line(s) 122 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/IyeijXN6RJBPoCFpX6jO/C1098.java, line(s) 99 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/IyeijXN6RJBPoCFpX6jO/C1123.java, line(s) 20 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/IyeijXN6RJBPoCFpX6jO/C1132.java, line(s) 39 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/aCOC8YQVjNummGXxzcf5/AbstractC1151.java, line(s) 40 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/aCOC8YQVjNummGXxzcf5/AbstractC1160.java, line(s) 38 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/aCOC8YQVjNummGXxzcf5/C1163.java, line(s) 57,133,135,140,147 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/aCOC8YQVjNummGXxzcf5/yEUVogJDaoB3ZYdhDTzJ/C1142.java, line(s) 86 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/aCOC8YQVjNummGXxzcf5/yEUVogJDaoB3ZYdhDTzJ/C1145.java, line(s) 96 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/vTxTcCqSG1lChnS947FK/EyxiQAFEkEJxvNW8bKCZ/C1169.java, line(s) 125,141,222,253,335,419 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/vTxTcCqSG1lChnS947FK/EyxiQAFEkEJxvNW8bKCZ/C1184.java, line(s) 74,89 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/vTxTcCqSG1lChnS947FK/EyxiQAFEkEJxvNW8bKCZ/C1190.java, line(s) 133,178,185,190,278,281 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/vTxTcCqSG1lChnS947FK/EyxiQAFEkEJxvNW8bKCZ/C1193.java, line(s) 49,54 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/vTxTcCqSG1lChnS947FK/EyxiQAFEkEJxvNW8bKCZ/C1201.java, line(s) 122 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/vTxTcCqSG1lChnS947FK/EyxiQAFEkEJxvNW8bKCZ/C1210.java, line(s) 188,195,207,214,232,249,251,256,265,268,273,293,303,313 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/vTxTcCqSG1lChnS947FK/EyxiQAFEkEJxvNW8bKCZ/C1215.java, line(s) 44 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/vTxTcCqSG1lChnS947FK/n6o4fki2EzuaA8OXddWt/C1236.java, line(s) 27 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/vTxTcCqSG1lChnS947FK/n6o4fki2EzuaA8OXddWt/C1239.java, line(s) 71,92,97,102 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/vTxTcCqSG1lChnS947FK/n6o4fki2EzuaA8OXddWt/C1246.java, line(s) 42 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/C1359.java, line(s) 38 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/C1372.java, line(s) 40 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/C1393.java, line(s) 56 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/NMAVc7oEDfENXOvn7hSt/C1265.java, line(s) 149 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/NMAVc7oEDfENXOvn7hSt/C1269.java, line(s) 58,69,75,102,112,122 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/PKhbKKbUqovqWGJ28s5J/RunnableC1293.java, line(s) 93 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/RunnableC1374.java, line(s) 282,372 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/Z9oFXB8VuU3oMwjCNxLI/C1305.java, line(s) 45 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/Z9oFXB8VuU3oMwjCNxLI/ExecutorServiceC1298.java, line(s) 89 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/kPPlmRS4L7Psdpu8w7qX/C1317.java, line(s) 90,100,152,161,170,185,220,241,248 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/yEUVogJDaoB3ZYdhDTzJ/kPPlmRS4L7Psdpu8w7qX/C1330.java, line(s) 129,159 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/vTxTcCqSG1lChnS947FK/C1413.java, line(s) 164,249 Qgkcuvw56IPKf2YPvkLL/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/vTxTcCqSG1lChnS947FK/C1420.java, line(s) 563,583,597 Qgkcuvw56IPKf2YPvkLL/IyeijXN6RJBPoCFpX6jO/BVr72sshpxfMJvnNq3LA/C1690.java, line(s) 110 Qgkcuvw56IPKf2YPvkLL/JRhN9IuSlchArAKyWXFj/BVr72sshpxfMJvnNq3LA/C1787.java, line(s) 151 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/C2397.java, line(s) 224,329 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/JRhN9IuSlchArAKyWXFj/C2115.java, line(s) 53 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/TjCbqG7qse28oiMyMmjq/C2171.java, line(s) 157 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/Z9oFXB8VuU3oMwjCNxLI/EyxiQAFEkEJxvNW8bKCZ/C2181.java, line(s) 190 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/ghLBTWQ8n7lG6PP2UNku/Qgkcuvw56IPKf2YPvkLL/C2211.java, line(s) 29,33 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/k8GnVYXCjGq1GzChzmYB/Qgkcuvw56IPKf2YPvkLL/C2245.java, line(s) 91,96,99 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/k8GnVYXCjGq1GzChzmYB/Qgkcuvw56IPKf2YPvkLL/C2258.java, line(s) 315,318 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/C2347.java, line(s) 248,249,261 Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/Hdv8Yy2ZJuwEeEokgInb/C2332.java, line(s) 12,17,22 Qgkcuvw56IPKf2YPvkLL/Z9oFXB8VuU3oMwjCNxLI/BVr72sshpxfMJvnNq3LA/n6o4fki2EzuaA8OXddWt/C2448.java, line(s) 75 Qgkcuvw56IPKf2YPvkLL/fB6AHnCVLlL8KA7Txh4R/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C2635.java, line(s) 64 Qgkcuvw56IPKf2YPvkLL/fB6AHnCVLlL8KA7Txh4R/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C2636.java, line(s) 222 Qgkcuvw56IPKf2YPvkLL/kPPlmRS4L7Psdpu8w7qX/BVr72sshpxfMJvnNq3LA/eR8v11LgIErsyUESsE6Q/C3019.java, line(s) 48,38,77,54,70,62,43 Qgkcuvw56IPKf2YPvkLL/vTxTcCqSG1lChnS947FK/BVr72sshpxfMJvnNq3LA/EyxiQAFEkEJxvNW8bKCZ/C3202.java, line(s) 106 QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/C3380.java, line(s) 26,41,44 QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/C3381.java, line(s) 108,112,136,272,295,327,333,343,453 QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C3351.java, line(s) 52 QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/o8hcCUgB2fkmQy8XNVO2/C3358.java, line(s) 25,33,56 QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/o8hcCUgB2fkmQy8XNVO2/C3360.java, line(s) 33,336 QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/o8hcCUgB2fkmQy8XNVO2/C3363.java, line(s) 44 QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/o8hcCUgB2fkmQy8XNVO2/C3365.java, line(s) 77 SJUmNRloONoe3yjsnfnl/jtNtfUWC3JPFi8wEWVdT/BVr72sshpxfMJvnNq3LA/C3437.java, line(s) 147,169 cn/bmob/v3/BmobInstallationManager.java, line(s) 124,117 cn/bmob/v3/BmobObject.java, line(s) 46 cn/bmob/v3/BmobQuery.java, line(s) 336,366,445 cn/bmob/v3/BmobWrapper.java, line(s) 31 cn/bmob/v3/datatype/BmobFile.java, line(s) 89,96,105,116,123,346,186,377 cn/bmob/v3/datatype/up/BlockUploader.java, line(s) 205,237 cn/bmob/v3/datatype/up/ParallelUploader.java, line(s) 157 cn/bmob/v3/datatype/up/UpYunUploader.java, line(s) 81,110,119 cn/bmob/v3/datatype/up/UploadManager.java, line(s) 97,99,105,107,109,116,131 cn/bmob/v3/http/BmobClient.java, line(s) 88,92,126,138,141,173,283,295,346,351,355,364,397,408,420,278,292,111,113 cn/bmob/v3/http/BmobFactory.java, line(s) 234,283,280 cn/bmob/v3/http/BmobURL.java, line(s) 130,131,132 cn/bmob/v3/http/RequestUtils.java, line(s) 44 cn/bmob/v3/http/RxBmob.java, line(s) 146,151,156,161,245,262,267,578,585,611,643 cn/bmob/v3/http/cache/CENPolicyQuery.java, line(s) 29,36 cn/bmob/v3/http/cache/NECPolicyQuery.java, line(s) 29,48 cn/bmob/v3/http/cache/PolicyQuery.java, line(s) 72,83,88,161,168,207,43,50,174,204 cn/bmob/v3/http/interceptor/RequestInterceptor.java, line(s) 22,25,36 cn/bmob/v3/http/interceptor/ResponseInterceptor.java, line(s) 66,69,72,86,40,49,57,89,92 cn/bmob/v3/http/rx/PolicyAction1.java, line(s) 44,50,39 cn/bmob/v3/realtime/Client.java, line(s) 180,204,206,239,281,301,314,320,325,341,343,345,350,382,395 cn/bmob/v3/update/BmobUpdateAgent.java, line(s) 287,296 cn/bmob/v3/update/UpdateResponse.java, line(s) 28 cn/bmob/v3/util/BLog.java, line(s) 50 cn/bmob/v3/util/BmobResource.java, line(s) 32,31 cn/bmob/v3/util/CacheManager.java, line(s) 81,84,103,108,127,185,189 cn/bmob/v3/util/EncryptUtils.java, line(s) 150,48 cn/bmob/v3/util/HtmlUtils.java, line(s) 33 cn/bmob/v3/util/ManifestUtils.java, line(s) 135,148 cn/bmob/v3/util/ZipUtil.java, line(s) 60 com/ddtx/dingdatacontact/contact/activity/QrcodeActivity.java, line(s) 121 com/ddtx/dingdatacontact/contact/activity/UserProfileActivity.java, line(s) 826 com/ddtx/dingdatacontact/contact/activity/UserProfileSettingActivity.java, line(s) 149,271 com/ddtx/dingdatacontact/login/LoginActivity.java, line(s) 478,482,493,497,621,627,629,1086,1676 com/ddtx/dingdatacontact/main/activity/MainActivity.java, line(s) 382,759 com/ddtx/dingdatacontact/main/activity/WelcomeActivity.java, line(s) 360,398 com/ddtx/dingdatacontact/moments/widget/MyPullToRefreshListView.java, line(s) 205 com/ddtx/dingdatacontact/pcardpackage/PCardPacketActivity.java, line(s) 148,360 com/ddtx/dingdatacontact/receiver/CustomNotificationReceiver.java, line(s) 26,28 com/netease/nim/uikit/api/model/main/LoginSyncDataStatusObserver.java, line(s) 25,27,36,50,88 com/netease/nim/uikit/business/contact/core/model/ContactDataAdapter.java, line(s) 263 com/netease/nim/uikit/business/contact/core/provider/MsgDataProvider.java, line(s) 25 com/netease/nim/uikit/business/contact/core/provider/UserDataProvider.java, line(s) 21 com/netease/nim/uikit/business/session/activity/CaptureVideoActivity.java, line(s) 138,156,175,210,240,372,461,497 com/netease/nim/uikit/business/session/activity/VoiceTrans.java, line(s) 115,124 com/netease/nim/uikit/business/session/emoji/EmoticonPickerView.java, line(s) 185,225 com/netease/nim/uikit/business/session/emoji/EmoticonView.java, line(s) 43,94,103 com/netease/nim/uikit/business/session/fragment/MessageFragment.java, line(s) 337 com/netease/nim/uikit/business/session/module/input/InputPanel.java, line(s) 662 com/netease/nim/uikit/business/session/viewholder/MsgViewHolderBase.java, line(s) 139 com/netease/nim/uikit/business/team/activity/AdvancedTeamInfoActivity.java, line(s) 1424,1432 com/netease/nim/uikit/common/adapter/TAdapter.java, line(s) 157 com/netease/nim/uikit/common/framework/infra/ManagedTask.java, line(s) 69 com/netease/nim/uikit/common/http/HttpClientWrapper.java, line(s) 143,153,170,180,155,160,182,187 com/netease/nim/uikit/common/ui/dialog/DialogMaker.java, line(s) 67 com/netease/nim/uikit/common/ui/drop/DropManager.java, line(s) 65,125 com/netease/nim/uikit/common/ui/imageview/BaseZoomableImageView.java, line(s) 223 com/netease/nim/uikit/common/util/file/AttachmentStore.java, line(s) 371 com/netease/nim/uikit/common/util/log/LogUtil.java, line(s) 15 com/netease/nim/uikit/common/util/log/sdk/wrapper/NimLog.java, line(s) 8,12 com/netease/nim/uikit/common/util/media/ImageUtil.java, line(s) 115 com/netease/nim/uikit/common/util/sys/NetworkUtil.java, line(s) 394,644 com/netease/nim/uikit/impl/cache/ChatRoomMemberCache.java, line(s) 37,216,239 com/netease/nim/uikit/impl/cache/DataCacheManager.java, line(s) 20,45 com/netease/nim/uikit/impl/cache/FriendDataCache.java, line(s) 118 com/netease/nim/uikit/impl/cache/NimUserInfoCache.java, line(s) 73,91,79 com/netease/nim/uikit/impl/cache/RobotInfoCache.java, line(s) 63,78,113 com/netease/nim/uikit/impl/cache/TeamDataCache.java, line(s) 151,155,177,181,203,207,27,123,125 com/netease/nim/uikit/rest/SignUtil.java, line(s) 58 com/netease/nim/uikit/support/glide/NIMGlideModule.java, line(s) 23 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/C5803.java, line(s) 6 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/EyxiQAFEkEJxvNW8bKCZ/NnxeS3e4Ty6LF8PuncNN/C4493.java, line(s) 80,154,171,205,219 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/EyxiQAFEkEJxvNW8bKCZ/hETm1kiI5VEPUJjLsBwZ/C4615.java, line(s) 114,165,281,282,308 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/EyxiQAFEkEJxvNW8bKCZ/mqCE1bXFmRtKzkDb4HX9/C4653.java, line(s) 169 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/EyxiQAFEkEJxvNW8bKCZ/mqCE1bXFmRtKzkDb4HX9/C4654.java, line(s) 29,30,44,53,54,63,64,73,75,76,77,78,80,81,82,83,86,87,92,93,98,100,102,105,110,115,116,119,120,123,125,127,128,129 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/C5037.java, line(s) 263,264,265,654 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/EyxiQAFEkEJxvNW8bKCZ/BVr72sshpxfMJvnNq3LA/C5041.java, line(s) 20,23,92,108 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/Qgkcuvw56IPKf2YPvkLL/C5082.java, line(s) 159 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/Qgkcuvw56IPKf2YPvkLL/C5084.java, line(s) 73,100 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/Qgkcuvw56IPKf2YPvkLL/C5087.java, line(s) 88,90 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/Qgkcuvw56IPKf2YPvkLL/C5088.java, line(s) 201,199,245 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/Qgkcuvw56IPKf2YPvkLL/C5089.java, line(s) 141,169,223,283 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/QnYfQeHdNQCxDqweFsut/jtNtfUWC3JPFi8wEWVdT/Qgkcuvw56IPKf2YPvkLL/aCOC8YQVjNummGXxzcf5/C5075.java, line(s) 20,59 gAZdDhmaX3FlQY6cKB43/EyxiQAFEkEJxvNW8bKCZ/jtNtfUWC3JPFi8wEWVdT/T8ykEdHk76PLf9XXxnNS/C5370.java, line(s) 14 gAZdDhmaX3FlQY6cKB43/n6o4fki2EzuaA8OXddWt/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/C5885.java, line(s) 11,12,13,14,15,16,17,18,19,20,43 jtNtfUWC3JPFi8wEWVdT/IBhIQnJ5dgIodAU1uGio/BVr72sshpxfMJvnNq3LA/jtNtfUWC3JPFi8wEWVdT/C6293.java, line(s) 108,377,378 jtNtfUWC3JPFi8wEWVdT/IBhIQnJ5dgIodAU1uGio/BVr72sshpxfMJvnNq3LA/jtNtfUWC3JPFi8wEWVdT/C6297.java, line(s) 277 jtNtfUWC3JPFi8wEWVdT/IBhIQnJ5dgIodAU1uGio/BVr72sshpxfMJvnNq3LA/jtNtfUWC3JPFi8wEWVdT/C6333.java, line(s) 60,66,71,87,90,96,109,114,119 jtNtfUWC3JPFi8wEWVdT/IBhIQnJ5dgIodAU1uGio/EyxiQAFEkEJxvNW8bKCZ/C6362.java, line(s) 1814,1823 jtNtfUWC3JPFi8wEWVdT/IBhIQnJ5dgIodAU1uGio/jtNtfUWC3JPFi8wEWVdT/C6448.java, line(s) 243,360,435,835,876 jtNtfUWC3JPFi8wEWVdT/IBhIQnJ5dgIodAU1uGio/jtNtfUWC3JPFi8wEWVdT/C6452.java, line(s) 222,230 jtNtfUWC3JPFi8wEWVdT/IBhIQnJ5dgIodAU1uGio/jtNtfUWC3JPFi8wEWVdT/C6459.java, line(s) 144,303,311 jtNtfUWC3JPFi8wEWVdT/IBhIQnJ5dgIodAU1uGio/jtNtfUWC3JPFi8wEWVdT/gAZdDhmaX3FlQY6cKB43/C6435.java, line(s) 396 jtNtfUWC3JPFi8wEWVdT/IBhIQnJ5dgIodAU1uGio/jtNtfUWC3JPFi8wEWVdT/gAZdDhmaX3FlQY6cKB43/yEUVogJDaoB3ZYdhDTzJ/C6410.java, line(s) 348 jtNtfUWC3JPFi8wEWVdT/SJUmNRloONoe3yjsnfnl/EyxiQAFEkEJxvNW8bKCZ/C6749.java, line(s) 175,185,206,213,226,232,271,279 jtNtfUWC3JPFi8wEWVdT/SJUmNRloONoe3yjsnfnl/ghLBTWQ8n7lG6PP2UNku/C6979.java, line(s) 82 jtNtfUWC3JPFi8wEWVdT/SJUmNRloONoe3yjsnfnl/uBxhKOW4DO2Ev5toateA/C7181.java, line(s) 1386 jtNtfUWC3JPFi8wEWVdT/TjCbqG7qse28oiMyMmjq/C7304.java, line(s) 17
信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它
此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard Files: Qgkcuvw56IPKf2YPvkLL/vTxTcCqSG1lChnS947FK/BVr72sshpxfMJvnNq3LA/QnYfQeHdNQCxDqweFsut/C3229.java, line(s) 10,390 Qgkcuvw56IPKf2YPvkLL/yEUVogJDaoB3ZYdhDTzJ/BVr72sshpxfMJvnNq3LA/C3272.java, line(s) 4,24
安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4 Files: Qgkcuvw56IPKf2YPvkLL/GLoXRM6c9E8VgyJ93LmL/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/jtNtfUWC3JPFi8wEWVdT/QnYfQeHdNQCxDqweFsut/C1508.java, line(s) 31,30,25 Qgkcuvw56IPKf2YPvkLL/PKhbKKbUqovqWGJ28s5J/BVr72sshpxfMJvnNq3LA/BVr72sshpxfMJvnNq3LA/n6o4fki2EzuaA8OXddWt/C1846.java, line(s) 59,136,58,57,57,134,134 com/netease/yunxin/base/http/HttpStack.java, line(s) 41,43 com/netease/yunxin/nos/c/c.java, line(s) 52,69 com/netease/yunxin/nos/c/g.java, line(s) 133,135 com/netease/yunxin/report/a/b.java, line(s) 134,136
安全 此应用程序可能具有Root检测功能
此应用程序可能具有Root检测功能 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1 Files: Qgkcuvw56IPKf2YPvkLL/QnYfQeHdNQCxDqweFsut/BVr72sshpxfMJvnNq3LA/uBxhKOW4DO2Ev5toateA/Hdv8Yy2ZJuwEeEokgInb/jtNtfUWC3JPFi8wEWVdT/C2331.java, line(s) 181,181,182 Qgkcuvw56IPKf2YPvkLL/k8GnVYXCjGq1GzChzmYB/BVr72sshpxfMJvnNq3LA/Qgkcuvw56IPKf2YPvkLL/C2897.java, line(s) 805,26,26,26,26,26 com/netease/nrtc/utility/l.java, line(s) 91,91,92
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (roomserver.netease.im) 通信。
{'ip': '59.111.248.65', 'country_short': 'CN', 'country_long': 'China', 'region': 'Guangdong', 'city': 'Guangzhou', 'latitude': '23.127361', 'longitude': '113.264252'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (m0.api.upyun.com) 通信。
{'ip': '218.92.216.56', 'country_short': 'CN', 'country_long': 'China', 'region': 'Jiangsu', 'city': 'Yancheng', 'latitude': '33.385559', 'longitude': '120.125282'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (wannos.127.net) 通信。
{'ip': '223.252.196.42', 'country_short': 'CN', 'country_long': 'China', 'region': 'Guangdong', 'city': 'Guangzhou', 'latitude': '23.127361', 'longitude': '113.264252'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (p0.api.upyun.com) 通信。
{'ip': '183.136.236.254', 'country_short': 'CN', 'country_long': 'China', 'region': 'Zhejiang', 'city': 'Hangzhou', 'latitude': '30.293650', 'longitude': '120.161423'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (api-push.meizu.com) 通信。
{'ip': '14.152.79.165', 'country_short': 'CN', 'country_long': 'China', 'region': 'Guangdong', 'city': 'Dongguan', 'latitude': '23.048889', 'longitude': '113.744720'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (io.codenow.cn) 通信。
{'ip': '106.75.70.127', 'country_short': 'CN', 'country_long': 'China', 'region': 'Shanghai', 'city': 'Shanghai', 'latitude': '31.224333', 'longitude': '121.469139'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (appgallery.cloud.huawei.com) 通信。
{'ip': '49.4.35.16', 'country_short': 'CN', 'country_long': 'China', 'region': 'Beijing', 'city': 'Beijing', 'latitude': '39.907501', 'longitude': '116.397232'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (resolver.msg.xiaomi.net) 通信。
{'ip': '118.26.252.209', 'country_short': 'CN', 'country_long': 'China', 'region': 'Beijing', 'city': 'Beijing', 'latitude': '39.907501', 'longitude': '116.397232'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (www.time.ac.cn) 通信。
{'ip': '210.72.145.8', 'country_short': 'CN', 'country_long': 'China', 'region': 'Beijing', 'city': 'Mentougou', 'latitude': '39.939171', 'longitude': '116.091667'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (imtest4.netease.im) 通信。
{'ip': '59.111.241.163', 'country_short': 'CN', 'country_long': 'China', 'region': 'Guangdong', 'city': 'Guangzhou', 'latitude': '23.127361', 'longitude': '113.264252'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (cn.register.xmpush.xiaomi.com) 通信。
{'ip': '118.26.252.220', 'country_short': 'CN', 'country_long': 'China', 'region': 'Beijing', 'city': 'Beijing', 'latitude': '39.907501', 'longitude': '116.397232'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (statistic.live.126.net) 通信。
{'ip': '183.131.177.121', 'country_short': 'CN', 'country_long': 'China', 'region': 'Zhejiang', 'city': 'Hangzhou', 'latitude': '30.293650', 'longitude': '120.161423'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (m.toutiao.com) 通信。
{'ip': '58.216.15.88', 'country_short': 'CN', 'country_long': 'China', 'region': 'Jiangsu', 'city': 'Changzhou', 'latitude': '31.783331', 'longitude': '119.966667'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (qyqa.netease.com) 通信。
{'ip': '59.111.96.241', 'country_short': 'CN', 'country_long': 'China', 'region': 'Zhejiang', 'city': 'Hangzhou', 'latitude': '30.293650', 'longitude': '120.161423'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (v0.api.upyun.com) 通信。
{'ip': '218.92.216.56', 'country_short': 'CN', 'country_long': 'China', 'region': 'Jiangsu', 'city': 'Yancheng', 'latitude': '33.385559', 'longitude': '120.125282'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (store.hispace.hicloud.com) 通信。
{'ip': '49.4.47.241', 'country_short': 'CN', 'country_long': 'China', 'region': 'Beijing', 'city': 'Beijing', 'latitude': '39.907501', 'longitude': '116.397232'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (nosup-hz1.127.net) 通信。
{'ip': '45.127.129.16', 'country_short': 'CN', 'country_long': 'China', 'region': 'Guangdong', 'city': 'Guangzhou', 'latitude': '23.127361', 'longitude': '113.264252'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (imtest.netease.im) 通信。
{'ip': '59.111.209.232', 'country_short': 'CN', 'country_long': 'China', 'region': 'Guangdong', 'city': 'Guangzhou', 'latitude': '23.127361', 'longitude': '113.264252'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (nrtc.netease.im) 通信。
{'ip': '59.111.248.65', 'country_short': 'CN', 'country_long': 'China', 'region': 'Guangdong', 'city': 'Guangzhou', 'latitude': '23.127361', 'longitude': '113.264252'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (www.ntsc.ac.cn) 通信。
{'ip': '159.226.242.43', 'country_short': 'CN', 'country_long': 'China', 'region': 'Beijing', 'city': 'Mentougou', 'latitude': '39.939171', 'longitude': '116.091667'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (lbs.netease.im) 通信。
{'ip': '115.238.119.88', 'country_short': 'CN', 'country_long': 'China', 'region': 'Guangdong', 'city': 'Guangzhou', 'latitude': '23.127361', 'longitude': '113.264252'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (www.163.com) 通信。
{'ip': '58.215.158.203', 'country_short': 'CN', 'country_long': 'China', 'region': 'Jiangsu', 'city': 'Wuxi', 'latitude': '31.568871', 'longitude': '120.288567'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (www.jd.com) 通信。
{'ip': '222.186.184.150', 'country_short': 'CN', 'country_long': 'China', 'region': 'Jiangsu', 'city': 'Zhenjiang', 'latitude': '32.209171', 'longitude': '119.434174'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (www.taobao.com) 通信。
{'ip': '117.68.34.227', 'country_short': 'CN', 'country_long': 'China', 'region': 'Anhui', 'city': "Lu'an", 'latitude': '31.650000', 'longitude': '118.525002'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (norma-external-collect.meizu.com) 通信。
{'ip': '183.60.176.112', 'country_short': 'CN', 'country_long': 'China', 'region': 'Guangdong', 'city': 'Guangzhou', 'latitude': '23.127361', 'longitude': '113.264252'}
关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (dr.netease.im) 通信。
{'ip': '183.131.177.88', 'country_short': 'CN', 'country_long': 'China', 'region': 'Zhejiang', 'city': 'Hangzhou', 'latitude': '30.293650', 'longitude': '120.161423'}