安全分析报告：
安全分数
安全分数 39/100
风险评级
等级
- A
- B
- C
- F
严重性分布 (%)
隐私风险
3
用户/设备跟踪器
调研结果
高危
6
中危
14
信息
3
安全
1
关注
8
高危 基本配置不安全地配置为允许到所有域的明文流量。
Scope: *
高危 该文件是World Writable。任何应用程序都可以写入文件
该文件是World Writable。任何应用程序都可以写入文件 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2 Files: g5/c.java, line(s) 24
高危 WebView域控制不严格漏洞
WebView域控制不严格漏洞 Files: com/important/business/ui/page/mine/NoticeWebViewActivity.java, line(s) 41,38 com/just/agentweb/a.java, line(s) 40,22
高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7 Files: com/important/business/ui/page/main/WebViewHtmlDataActivity.java, line(s) 19,7 com/important/business/ui/page/mine/NoticeWebViewActivity.java, line(s) 31,7,8 mb/e0.java, line(s) 133,10,11 mb/t.java, line(s) 92,11,12
高危 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击
不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#webview-server-certificate-verification Files: fc/b.java, line(s) 109,108
高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: g7/a.java, line(s) 59 tc/h0.java, line(s) 83 z4/q0.java, line(s) 90
中危 基本配置配置为信任系统证书。
Scope: *
中危 应用程序已启用明文网络流量
[android:usesCleartextTraffic=true] 应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。
中危 Activity (androidx.compose.ui.tooling.PreviewActivity) 未被保护。
[android:exported=true] 发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。
中危 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.DUMP [android:exported=true] 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。
中危 应用程序使用不安全的随机数生成器
应用程序使用不安全的随机数生成器 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators Files: b7/p0.java, line(s) 4 com/compose/subscribe/view/ReHeader.java, line(s) 16 e7/b.java, line(s) 14 ie/c0.java, line(s) 10 og/a.java, line(s) 3 og/b.java, line(s) 3 pg/a.java, line(s) 3 y5/r1.java, line(s) 7 z7/t.java, line(s) 14
中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10 Files: b4/d.java, line(s) 31 b4/p.java, line(s) 95 b4/x.java, line(s) 68 com/arialyy/aria/core/task/AbsTask.java, line(s) 16 com/getdeploy/requestbody/dc/AttentionData.java, line(s) 121 com/getdeploy/requestbody/dc/HotShortVideoItem.java, line(s) 171 com/important/business/PlayerApplication.java, line(s) 36 com/important/business/bean/login/AutoRegisterEntity.java, line(s) 213 v/a0.java, line(s) 44 x/p0.java, line(s) 24 z3/h.java, line(s) 79
中危 SHA-1是已知存在哈希冲突的弱哈希
SHA-1是已知存在哈希冲突的弱哈希 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: org/repackage/a/a/a/a/c.java, line(s) 107
中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2 Files: com/arialyy/aria/orm/DelegateFind.java, line(s) 4,72 com/arialyy/aria/orm/DelegateUpdate.java, line(s) 4,70 com/arialyy/aria/orm/DelegateWrapper.java, line(s) 4,52 com/arialyy/aria/orm/SqlHelper.java, line(s) 5,6,43 com/arialyy/aria/orm/SqlUtil.java, line(s) 5,65 f5/a.java, line(s) 6,7,79 le/a.java, line(s) 5,6,43 org/greenrobot/greendao/database/f.java, line(s) 4,41 z7/l.java, line(s) 6,80
中危 MD5是已知存在哈希冲突的弱哈希
MD5是已知存在哈希冲突的弱哈希 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: c5/p.java, line(s) 40 com/arialyy/aria/util/CommonUtil.java, line(s) 307,424,498,599 f3/g.java, line(s) 48 g5/y.java, line(s) 187,205 ie/a0.java, line(s) 76 ie/c0.java, line(s) 37 te/h.java, line(s) 232,238 z4/c0.java, line(s) 36 z4/d0.java, line(s) 18,61,74
中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage Files: bin/mt/signature/KillerApplication.java, line(s) 78 c5/s.java, line(s) 12,29 com/arialyy/aria/util/CommonUtil.java, line(s) 229,226,233 com/arialyy/aria/util/FileUtil.java, line(s) 43,285 com/huantansheng/easyphotos/ui/EasyPhotosActivity.java, line(s) 233,235,275 com/huantansheng/easyphotos/ui/PuzzleSelectorActivity.java, line(s) 228 com/important/business/ui/page/main/UserMangerActivity.java, line(s) 225 com/important/business/ui/page/shortVideo/MyPublishVideoActivity.java, line(s) 439 eb/a.java, line(s) 66,64 hc/b.java, line(s) 154 ie/k.java, line(s) 74 tc/q.java, line(s) 42 te/a.java, line(s) 117,126 v3/k.java, line(s) 7 x4/a.java, line(s) 36 ya/a.java, line(s) 272 ye/e.java, line(s) 100 z4/v.java, line(s) 27,110 z4/x.java, line(s) 36,58
中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件
应用程序创建临时文件。敏感信息永远不应该被写进临时文件 Files: com/huantansheng/easyphotos/ui/EasyPhotosActivity.java, line(s) 264 l2/b.java, line(s) 137 ya/a.java, line(s) 97
中危 IP地址泄露
IP地址泄露 Files: c5/g.java, line(s) 140,144,150,159 i7/c.java, line(s) 9 ld/c.java, line(s) 153 x4/a.java, line(s) 9 z4/b.java, line(s) 60
中危 应用程序包含隐私跟踪程序
此应用程序有多个3隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。
中危 此应用可能包含硬编码机密信息
从应用程序中识别出以下机密确保这些不是机密或私人信息 友盟统计的=> "UMENG_CHANNEL" : "kunyao" 凭证信息=> "com.taobao.android.hotfix.APPSECRET" : "98aee0d1e9124d899fea675b00365580" 凭证信息=> "com.taobao.android.hotfix.RSASECRET" : "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" "digits_username" : "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ" nYlJfy7r+FUC0ZliKdzyrQ0RyVLby5/IPRcSM5mFMDYdGSX33+fO4bP4hmhcxgU88Fj9ghnl4LJzN nBBYEFAr7xVZ1+BxQ+8MYx6hbGXPizYzbMA0GCSqGSIb3DQEBCwUAA4IBAQDUrtovD5/mCNERTeda nMDYzNDMzWhgPMjEyNDAzMTYwNjM0MzNaMH0xDDAKBgNVBAYTA1BSQzEQMA4GA1UECBMHUWluZ2hh 4tGn8lMI7dS1s9CVYfMaH0bEtcTbl0PXVRGnKjH52zsi8Z3tyH64PZABZBBfEzIEPrC 16a09e667f3bcc908b2fb1366ea957d3e3adec17512775099da2f590b0667322a 6494330ca1a164591b383f15 nggEPADCCAQoCggEBAOmYB7ySvWrs1YV9jPF29XV19YnPeosYCR4Ujrf7JzjvWiaiT7H4N2onbC9F nRGV2aWNlc0dyb3VwMRcwFQYDVQQDEw5IYXJyaXNNYXJ0aW5lejCCASIwDQYJKoZIhvcNAQEBBQAD neXSwmAsvJjI8Fc2jXH59ioNIAjxRc8HxpXnZ3BBbyxtn7HY5HmBGQX0CAwEAAaMhMB8wHQYDVR0O nRwRyWEzxKLMhTJCfPh7k8+oObaI3c1qK26Pzo9j6D2harkhO1xtaOtkyx6crOnnzdzPfS1zPaSv2 bd5891334f2b5aa4-a5368dc0c067cdf4-329df6dc4831b115-c0a33310af06f8f4 n9qO2bHeJblS+zesHYujgPhuU2TdACpPSQn9n0mdkZ8aBJbhr/7n04VoQoOPtQC5F1+3qQyra+d0J nBAgTB1FpbmdoYWkxDzANBgNVBAcTBlNpcGluZzEaMBgGA1UEChMRWGlhb21pQ29ycG9yYXRpb24x nFTATBgNVBAsTDERldmljZXNHcm91cDEXMBUGA1UEAxMOSGFycmlzTWFydGluZXowIBcNMjQwNDA5 nHtyVdtLMH6wd84uUrlNY9kPaVGIioAwgzj6FJ9vNKSaLDke0J3J+W2k8nIre5D0o8QllBOGLuQq1 naTEPMA0GA1UEBxMGU2lwaW5nMRowGAYDVQQKExFYaWFvbWlDb3Jwb3JhdGlvbjEVMBMGA1UECxMM edef8ba9-79d6-4ace-a3c8-27dcd51d21ed eDWowITDNUKgND6PfQfA3OMTJ0nm640L 9a04f079-9840-4286-ab92-e65be0885f95 MIIDmzCCAoOgAwIBAgIERdAsKTANBgkqhkiG9w0BAQsFADB9MQwwCgYDVQQGEwNQUkMxEDAOBgNV
信息 应用程序记录日志信息,不得记录敏感信息
应用程序记录日志信息,不得记录敏感信息 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs Files: a4/e.java, line(s) 55,106 b4/h.java, line(s) 291,306,614 b4/i.java, line(s) 51 b4/k.java, line(s) 14 b4/z.java, line(s) 66,83 bin/mt/signature/KillerApplication.java, line(s) 117,127,162 c4/i.java, line(s) 110,153 c4/j.java, line(s) 89,138,150,173,182,195,227,236 ch/b.java, line(s) 403 com/arialyy/aria/core/Aria.java, line(s) 39 com/arialyy/aria/core/AriaConfig.java, line(s) 130,137,46,117 com/arialyy/aria/core/AriaManager.java, line(s) 217 com/arialyy/aria/core/WidgetLiftManager.java, line(s) 56,70,48 com/arialyy/aria/core/command/AbsGroupCmd.java, line(s) 35 com/arialyy/aria/core/command/AbsNormalCmd.java, line(s) 30,43,66 com/arialyy/aria/core/command/AddCmd.java, line(s) 15 com/arialyy/aria/core/command/CancelAllCmd.java, line(s) 31 com/arialyy/aria/core/command/HighestPriorityCmd.java, line(s) 19 com/arialyy/aria/core/command/ResumeAllCmd.java, line(s) 18 com/arialyy/aria/core/command/ResumeThread.java, line(s) 115,100 com/arialyy/aria/core/command/StartCmd.java, line(s) 47,28,45,58 com/arialyy/aria/core/command/StopCmd.java, line(s) 17 com/arialyy/aria/core/common/AbsNormalTarget.java, line(s) 98,59 com/arialyy/aria/core/common/FtpOption.java, line(s) 127,131,143,150,156,160,164,174,186,202,234,243 com/arialyy/aria/core/common/HttpOption.java, line(s) 84,25,29,41 com/arialyy/aria/core/common/RecordHandler.java, line(s) 89,127 com/arialyy/aria/core/common/RecordHelper.java, line(s) 148,38,42,44,47,60,65,70,142,151,95,135 com/arialyy/aria/core/common/SFtpOption.java, line(s) 32,36,47,56,65,74,83 com/arialyy/aria/core/common/controller/FeatureController.java, line(s) 78 com/arialyy/aria/core/common/controller/NormalController.java, line(s) 75,73 com/arialyy/aria/core/config/BaseConfig.java, line(s) 23 com/arialyy/aria/core/config/BaseTaskConfig.java, line(s) 140 com/arialyy/aria/core/config/DGroupConfig.java, line(s) 58 com/arialyy/aria/core/config/DownloadConfig.java, line(s) 40 com/arialyy/aria/core/config/UploadConfig.java, line(s) 24 com/arialyy/aria/core/config/XMLReader.java, line(s) 233,390,414 com/arialyy/aria/core/download/CheckDEntityUtil.java, line(s) 29,33,37,43,94,98,108,149,85,130,133,139 com/arialyy/aria/core/download/CheckDGEntityUtil.java, line(s) 150,59,71,84,126,141,226,51,74,185 com/arialyy/aria/core/download/CheckFtpDirEntityUtil.java, line(s) 48,77,104,40 com/arialyy/aria/core/download/DownloadEntity.java, line(s) 78 com/arialyy/aria/core/download/DownloadReceiver.java, line(s) 76,103,206,227,299 com/arialyy/aria/core/download/M3U8Entity.java, line(s) 81 com/arialyy/aria/core/download/m3u8/M3U8LiveOption.java, line(s) 19 com/arialyy/aria/core/download/m3u8/M3U8Option.java, line(s) 77,56 com/arialyy/aria/core/download/m3u8/M3U8VodOption.java, line(s) 23,32,41 com/arialyy/aria/core/download/target/DNormalConfigHandler.java, line(s) 90,95 com/arialyy/aria/core/download/target/GroupBuilderTarget.java, line(s) 45 com/arialyy/aria/core/download/target/GroupNormalTarget.java, line(s) 52 com/arialyy/aria/core/download/target/HttpGroupConfigHandler.java, line(s) 59 com/arialyy/aria/core/download/target/M3U8NormalTarget.java, line(s) 19,23 com/arialyy/aria/core/download/tcp/TcpDelegate.java, line(s) 19,25,34,43 com/arialyy/aria/core/event/EventMsgUtil.java, line(s) 107 com/arialyy/aria/core/group/AbsGroupLoader.java, line(s) 241,91 com/arialyy/aria/core/group/AbsGroupLoaderUtil.java, line(s) 67 com/arialyy/aria/core/group/AbsSubDLoadUtil.java, line(s) 36,128 com/arialyy/aria/core/group/SimpleSchedulers.java, line(s) 31,109,78,124,107,118 com/arialyy/aria/core/group/SimpleSubQueue.java, line(s) 84,116,121,141,146,154,159,67,72 com/arialyy/aria/core/inf/AbsTarget.java, line(s) 36 com/arialyy/aria/core/listener/BaseListener.java, line(s) 77,100 com/arialyy/aria/core/listener/DownloadGroupListener.java, line(s) 42 com/arialyy/aria/core/loader/AbsNormalLoader.java, line(s) 78,141,142,183,201,213,233,175,191 com/arialyy/aria/core/loader/AbsNormalLoaderUtil.java, line(s) 93 com/arialyy/aria/core/loader/GroupSubThreadStateManager.java, line(s) 48,117,128 com/arialyy/aria/core/loader/NormalTTBuilder.java, line(s) 75,96,109,56,99 com/arialyy/aria/core/loader/NormalThreadStateManager.java, line(s) 53,111,122 com/arialyy/aria/core/loader/SubLoader.java, line(s) 68,73,196,197,80,85,218,163,254 com/arialyy/aria/core/manager/SubTaskManager.java, line(s) 21,26,32 com/arialyy/aria/core/manager/TaskWrapperManager.java, line(s) 62,83,98 com/arialyy/aria/core/manager/ThreadTaskManager.java, line(s) 91,96,137,142,182,207,219,223,238 com/arialyy/aria/core/queue/AbsTaskQueue.java, line(s) 184,192,144,157,169,135,257,50,162,199,203,220,251,254,288,296,308,323,339 com/arialyy/aria/core/queue/DGroupTaskQueue.java, line(s) 34 com/arialyy/aria/core/queue/DTaskQueue.java, line(s) 105,36 com/arialyy/aria/core/queue/UTaskQueue.java, line(s) 33 com/arialyy/aria/core/queue/pool/BaseCachePool.java, line(s) 69,30,55,82,93,59 com/arialyy/aria/core/queue/pool/BaseExecutePool.java, line(s) 73,30,82,86,103,114,46 com/arialyy/aria/core/queue/pool/DLoadExecutePool.java, line(s) 34,41,20 com/arialyy/aria/core/scheduler/FailureTaskHandler.java, line(s) 93 com/arialyy/aria/core/scheduler/TaskSchedulers.java, line(s) 111,118,128,133,55,294,380,408,418,346 com/arialyy/aria/core/task/AbsTask.java, line(s) 184,195,40,152,179,192,209,154 com/arialyy/aria/core/task/ThreadTask.java, line(s) 136,218,235,368,124,273,90,95,107,109,213,248,251,364,366,375,119,127,141,149 com/arialyy/aria/core/upload/CheckUEntityUtil.java, line(s) 57,87,98 com/arialyy/aria/core/upload/UploadReceiver.java, line(s) 119,131,178 com/arialyy/aria/core/upload/target/HttpNormalTarget.java, line(s) 32 com/arialyy/aria/http/ChunkedInputStream.java, line(s) 21,26,54,56 com/arialyy/aria/http/ConnectionHelp.java, line(s) 53 com/arialyy/aria/http/download/HttpDFileInfoTask.java, line(s) 83,118,184,246,285,295,318,55,289,195,230,282 com/arialyy/aria/http/download/HttpDGInfoTask.java, line(s) 49,74,132,36 com/arialyy/aria/http/download/HttpDTTBuilderAdapter.java, line(s) 26,46 com/arialyy/aria/http/download/HttpDThreadTaskAdapter.java, line(s) 246,249 com/arialyy/aria/http/upload/HttpULoader.java, line(s) 74 com/arialyy/aria/http/upload/HttpUThreadTaskAdapter.java, line(s) 76 com/arialyy/aria/m3u8/BaseM3U8Loader.java, line(s) 47 com/arialyy/aria/m3u8/M3U8InfoTask.java, line(s) 77,205,208,251,261,274,317,85 com/arialyy/aria/m3u8/M3U8ThreadTaskAdapter.java, line(s) 77,277 com/arialyy/aria/m3u8/live/LiveStateManager.java, line(s) 51,57,95,80 com/arialyy/aria/m3u8/live/M3U8LiveLoader.java, line(s) 204,313,156,315,74 com/arialyy/aria/m3u8/vod/M3U8VodLoader.java, line(s) 195,317,504,533,537,166,172,176,476,529,179,552,553,273 com/arialyy/aria/m3u8/vod/VodRecordHandler.java, line(s) 71 com/arialyy/aria/m3u8/vod/VodStateManager.java, line(s) 61,80,90,181,208,209,161 com/arialyy/aria/orm/DelegateFind.java, line(s) 91,357,521,265,419,457,485 com/arialyy/aria/orm/DelegateUpdate.java, line(s) 81,100,121,139 com/arialyy/aria/orm/SqlHelper.java, line(s) 99,107,213,249,287,290,268 com/arialyy/aria/orm/SqlUtil.java, line(s) 79,90,194 com/arialyy/aria/util/AriaServiceLoader.java, line(s) 52 com/arialyy/aria/util/CheckUtil.java, line(s) 19,31,44,61,73,97,102,22,34,76 com/arialyy/aria/util/CommonUtil.java, line(s) 252,255,355,391,410,89,104,126,428,526,563,460 com/arialyy/aria/util/ComponentUtil.java, line(s) 207 com/arialyy/aria/util/DeleteDGRecord.java, line(s) 50,85,56 com/arialyy/aria/util/DeleteDRecord.java, line(s) 46,58,87 com/arialyy/aria/util/DeleteM3u8Record.java, line(s) 70,84,101 com/arialyy/aria/util/DeleteURecord.java, line(s) 37,62 com/arialyy/aria/util/FileUtil.java, line(s) 156,162,164,446,467,549,571,836,862,180,246,719,879,432,534 com/arialyy/aria/util/RecordUtil.java, line(s) 22,82,88 com/arialyy/aria/util/SSLContextUtil.java, line(s) 127 d4/e.java, line(s) 48,58,84,108 d4/i.java, line(s) 107 f4/t.java, line(s) 67 f4/u.java, line(s) 64,71,87,105 f4/v.java, line(s) 37 h4/l.java, line(s) 80 i4/c.java, line(s) 62,70,84 i4/e.java, line(s) 16 i4/h0.java, line(s) 167 i4/l0.java, line(s) 305 i4/n.java, line(s) 173,271,289,307,327,345,350,357,366,385 i4/u.java, line(s) 111,132,216,307,359,390 i4/v.java, line(s) 44,53 i4/z.java, line(s) 75 ie/v.java, line(s) 82 lh/e.java, line(s) 52,52,73 m4/a.java, line(s) 89,96,103,114 o4/d.java, line(s) 52,60 org/lsposed/hiddenapibypass/HiddenApiBypass.java, line(s) 89,328 q4/j.java, line(s) 57 s1/d.java, line(s) 206 sh/g.java, line(s) 16,21 t1/f.java, line(s) 354 u4/a.java, line(s) 72 v3/p.java, line(s) 140 vh/e.java, line(s) 7,11,15 w0/k.java, line(s) 133 w3/b.java, line(s) 326 x3/d.java, line(s) 76 x3/e.java, line(s) 543,567,586 y3/h.java, line(s) 13 y3/j.java, line(s) 71,191,201,214,233 y3/l.java, line(s) 73,150,208,234,272 ye/f.java, line(s) 165,183,216,234,239,246,255,265,288,307
信息 此应用程序使用SQL Cipher。SQLCipher为sqlite数据库文件提供256位AES加密
此应用程序使用SQL Cipher。SQLCipher为sqlite数据库文件提供256位AES加密 Files: org/greenrobot/greendao/database/SqlCipherEncryptedHelper.java, line(s) 14,4,5
信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard Files: z4/t0.java, line(s) 4,26,30
安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4 Files: c5/i.java, line(s) 142,139,144 com/arialyy/aria/util/SSLContextUtil.java, line(s) 65,56,57,57 com/uyumao/k.java, line(s) 38,36 kh/f.java, line(s) 111,109,108 kh/g.java, line(s) 129,118,137,126,126,128 kh/l.java, line(s) 111,109,108,108 kh/m.java, line(s) 234,221,231,231 ob/a.java, line(s) 143,139,145 z4/o0.java, line(s) 66,50,64,64
关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (yumao.puata.info) 通信。
{'ip': '110.242.68.66', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '南京', 'latitude': '32.061668', 'longitude': '118.777992'}
关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (01apirtef.qqqzzq.com) 通信。
{'ip': '110.242.68.66', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '扬州', 'latitude': '32.397221', 'longitude': '119.435600'}
关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (01api2i8r.qqqzzq.com) 通信。
{'ip': '58.221.70.116', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '南通', 'latitude': '32.030296', 'longitude': '120.874779'}
关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (01api37i6.qqqzzq.com) 通信。
{'ip': '185.199.109.153', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '南通', 'latitude': '32.030296', 'longitude': '120.874779'}
关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (baidu.com) 通信。
{'ip': '110.242.68.66', 'country_short': 'CN', 'country_long': '中国', 'region': '河北', 'city': '保定', 'latitude': '38.851109', 'longitude': '115.490280'}
关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (01api6fal.qqqzzq.com) 通信。
{'ip': '58.221.70.116', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '南通', 'latitude': '32.030296', 'longitude': '120.874779'}
关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (aria.laoyuyu.me) 通信。
{'ip': '118.24.25.24', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}
关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ulogs.umengcloud.com) 通信。
{'ip': '110.242.68.66', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '南京', 'latitude': '32.061668', 'longitude': '118.777992'}