移动应用安全检测报告: 齿轮辅助 v12.8.0

安全基线评分


安全基线评分 42/100

综合风险等级


风险等级评定

  1. A
  2. B
  3. C
  4. F

漏洞与安全项分布(%)


隐私风险

0

检测到的第三方跟踪器数量


检测结果分布

高危安全漏洞 3
中危安全漏洞 6
安全提示信息 2
已通过安全项 1
重点安全关注 0

高危安全漏洞 默认情况下,调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知,ECB模式很弱,因为它导致相同明文块的密文相同

默认情况下,调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知,ECB模式很弱,因为它导致相同明文块的密文相同
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/beingyi/encrypt/BYDecoder.java, line(s) 35

高危安全漏洞 启用了调试配置。生产版本不能是可调试的

启用了调试配置。生产版本不能是可调试的
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/qq264922331/BuildConfig.java, line(s) 3,4

中危安全漏洞 应用程序可以安装在有漏洞的已更新 Android 版本上

Android 4.0-4.0.2, [minSdk=14]
该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。

中危安全漏洞 应用程序已启用明文网络流量

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。

中危安全漏洞 Broadcast Receiver (android.app.admin.DeviceAdminReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.BIND_DEVICE_ADMIN [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危安全漏洞 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据

应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
mirrorb/android/hardware/location/C0368.java, line(s) 358
p028/p029/p030/p037/C0417.java, line(s) 209
p028/p029/p030/p037/C0420.java, line(s) 299,301,503

中危安全漏洞 应用程序使用不安全的随机数生成器

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
cn/beingyi/sub/apps/SubApp/SubApplication.java, line(s) 20

中危安全漏洞 此应用可能包含硬编码机密信息

从应用程序中识别出以下机密确保这些不是机密或私人信息
172b470544b05dff2612bcce81e12e19
ffbc0eb3bbfabaf719f71828f04491b219a3592b37d6f032f63599d6ebdde58a
E51FE2F45839D91A64B0D33F33957725
5f79a2e000cd66ea2c7dbff3cc27b26c01d4b9f52df1f4f026af0b84ef37c393
ce554706320250816dcdad446d2ee2d661f17de427b41b274398612a3bf41779
27895E8863E851F293BE90E15D4E6FD1091E1701CC5FCC563333396A4035ED2311BAF4326725EF6EB0A1268DB4943926C9449EEA750C6DF96351F450453CBF113874785DA92F0142718A8A0BED6C0463BC068B08B73D74A2A25226F4EADD07FA5BBFF98B69D40990DE414C0865923E1336B47F80DE6FB922DF55A684D96E7D4E
0DEBA9DBCAD1CA6AD399A7F77FD21209
A8B3935A5AF942C8E6B4307C0B594BCA2947B9CE575A82ABD1E43B3C432527EF767C08ABC0AE81840EBECEBB5DFE3E2D
1ADD19A77E504C1379FE58339DC14F9905F3AC14D2B98D9A5DE884AB7022C4D1
2DE9081F7D1FE6F61DD4DF4DBBC0D714
68447a07da024c855d722e91db1459bc71937fc0c844d097ac09456e898bb891d0287f61520b7e7297e289747b6d0287
E9338BA1C770EF05E91BD9730ABD11D7778CAB0E39219BF8
bf650f266bce088e839bbb0854417f21d7fd1e6a9087d87db6e942f3cf173e57
bd1be0a5e4e3a589a6f8dd1f3d8f0a91
518DD1C0FC554C9D8C1DC73B157DD86961F0AC949AF7FE80F451A545A9835C0B696F6E66F2685405259A02D19DB7302D
E4F3FAB5B9F5BE722F26141E2BD655F443D6D05E514C489A114C45BA70CC1673
e319fbc3d2e92c98f10f8dd427f9a69b
D1B996D32EDDC2ADBD9D8B5D841654F28F800C6D9044FAA2AD42F9D11538C2C4
2ee9154e36eb48305a1000a64e62f7e0
22C8AA5FCE134FA8A8E6916EFD43D1C99C86CCDC83A78565
B6F7519866F39E535F2F64AA203F71E76AC2AC915822EC56941A47865788227D
013dd7ead45554ed02140a5b1620d10f
8b7f4fd7230f515f279a591b1e467873a143622fae362acd208aacd28e3cde10
515ADAACC13B4550AE1CB50CDB7FB925
e0df617c983f3d9e0000242d50cf1f9d
406659E6E08B5997A6BDD15813D1921C0943BD4E7C5F247E7E16FACFDD3A1098
FDCFB21D35C0EDDF0A356D4768EB7A69
720f0058233dc26748601afec9a14ed1edeadb622444178eb9fa59f6dd21b499
3A67CA10D4F4AB7AC01499BDA18971AF
e339cc7cc8b3a7dce003b0628afd1547
3532224ba7dd97b25c1f3c12c6f65c722da0f56593197f3e8dd1c202e0b75df8
805DC61EDA2351955360A309B8BD9EBA5118071B49D6531601266065A033D96B7747E549223BABA092D55DB072C29E7C4E493913AFE84BBA260D8A2DB5DC5B8F
06973770eebb8d8c688908e300a3b28d
F3FA29A454D58C286DEC92B9DCF29CFA3DAA9A533324989D
C8721ECEE5722052F77953B9C62900B67F6949A18A9841C7
257fe609dce5869facad89ec550c7cf2
18504195CB08533C97F59685CDAE8BEA
DECEAF978EDE053345A653D2FEF3E1BAFE8D3B195F89A67DC0C73AA75D446C34
15864bf49e2d375a71a8054b540696bd34433d088b10221ed57ff26f5be1e5313a2ef9989cd6c42b2bec87c98f0403f7
eb69b9f178045b271c9fa7425dcd4dc7
6F08F6E4ABB7AA63B9144E32A85F5B1A
62ac156467d54c5e1abec980d610fee0
31EC74384C75E1F63FD922C89EE8D82D
805DC61EDA235195826ACC2DCDAE6A93338CF0CA439130905769F4B4CE6A534A2E03593D13F2D330
E55BADC7A42829C63751916332AE6719A29BB7348E647C35DDAB250A1E68CB9A
3e973fa671b5594e312e004a60f3e305
A94C4330AEEE79A07AAF244C63C551ED
569406ef38173267f277e80b00fe1979
f5d657239db1f7a3da5d3914af7e800518791ba6dd48a53d60bc099e08fee9f3
BD4567619649E3D124654A74BEC7D9908022F141AFFF8DB9F2848701D5BFDD58
DD2C128842403852C7D98FD676D78F74F23493D16CA376A853593A7F9D98701ABB0F3B1EE5AA4970
DED948501A3260A87C3CB54ECCEEB475
9cd7d79e4e204fc88dc1f6b8c26e6324
21B4CFC4C2245ADA21897D7F8CD899792DA556CAD088648FEC54D33CED4025A4596ABF266523B58B78B107270AB3EB681739D57D7673F9393478D2475B231F09
556AC84FD8C24C420DD4A8B059DF1779
da7f3e6eae6654d95ecccaef3425001f1527f4037f424982f5276ab9f84d1a28
a5bed4dffe09fe3d954cdd63ad9a7df2
fce6780dd5eebcb13eedc309444b7485
F955D6CD6E76262AB26C4420649E06138D234D81DABAF7CA0E9BC9667A4A532D
cf85a8cc064790e5e8cc752156299143
C8389913B1E4DBACEEFFD7E8BF7AD76328636DDE20DBCBC53AEED7C59A8A8B0675CDAE9D8731EB227D8F6665213DCE2E
80E3D49FE5BBB38AD0FB4A6918411F6DF061A24A776B56F9F829B92C968329EB7320E0A77213F0567C2BC835DF80FD23
61A87CDCA18609F004A1F4ED569593B9
6FE62335E166A1BC1D726F67A575B625D6006AFEE5BD55EF156E8489BDD2350E
E3545870FDB596FB9ABBE5155F2418B2
33E33114B9B655918F3EC69B18692BC16BF074CA20D30F8DB9A0E311809CC499
90F7E8E20CDA0C18BB2AEDC7656F9F0C
BAA0792348D1C61258982E65C88D3059AED90092AB4A450F
DD2C12884240385216F68A69EEB652BC847162A9D1FC22B3E406544665C1C33C7A13DFAE38CBBB19
e9304ef4cd1c6e6d49b2ff1c83da5f4eb7d8a964ea29d302e3bde5d9a700b59c
c4b8a8237b9554df61aab096add0ed9f
34DFA62279E55324696D1FB81E292E7C
04E992D675EDF9EC7E250E6E7DF77D2D
190567F62F3A2684C9FC4CA8CF90DC11
34100CCCF071811E438A0CCF270ACC049C3D6C60C566218D888CABA0E60535E4
c293ced052478d31559863a39dcf68d008c8bd287632cc3761bf68fd98266fbb
e43ade427fc567e2b449ee7461239032
362CA7AFA951E9691148C1468D3B61E912D35B379BC8B42C
8be19033ed52436ee43a68193e7972be
07624E2EA5FF6B0051197838FD91ED1C1F141C638E36C783
42845300EA9C1428080C68DB34E4A91A
0ccaf0ff95bcffe8794afc4767a8f539
DD2C128842403852C7D98FD676D78F746E380C18DA5E850D1271B1A123DDCFF3
b748bad3e382e1fb8a1bf5037487dd07
68447a07da024c855d722e91db1459bc6d7c17a279541fcb9846c598b1e08fd31d7d2e94c88fd5b54d0ee6cf29c05f09
0401ea9f49d1ad417dcd12f8de638133
F955D6CD6E76262A05BB244F1A2C5B7E1325261436A1124E99905AA1F1368466
47b2b1bf29f2e6d4fd4bb4e6ea1b31934f163f7c0f5d38f6724be6e56ff89231
5FCD12DE8DD36A56F1F416707F39C32B
F955D6CD6E76262A237F1EF828990672CC883835ACD83E891AD3799AF97A67F7
69E5E65D1CD9BDD128978965CB7F00A5
75e1db6ef3616761350f22c96a31102f
d4c7c0202709b1e5194c1beba0719841
f35ea57f49fc7e7b442dc6695e33df32a2226f9fb0c17d58baef7b74dbdb0992
6b10041386cb8ab09941fd584fed6dbe88b56dfaab4cca103d8fd75412a0cec1
2ADFAB91DFF1C8C9195C18FD780C8C510ABFF01592C65094
F9C392D2E8760C045A20C29C283AB2EA
D6E7520CC664C117467388B15ED3BABA
d6afec83303dfdb26d891c378b85cdd9
2a776cfd7efa26570286a7e6fc72432b
28e9675f0e6366966af337c0f00ccabb
F88AF004D42BE2E2A4A6B62EFDFD422A895A1421FE2D595671E7A3C18D19670D86B37AD2A58A0B66C7F39D2B88FE1093
C1B8AAA9E6547633BCD86511A183DEFF3CC289133C7F18F27BF459213F4CFFDD90CCAD9F29E2096ADE0B377289F88C3CC83B32181C6212D0AF64C977A372B5A57CD7523D5B0CA06F
8b650257b9d845b21b3b616f3e648f34
251DF560A41CE6C33C769746E5C41AD2FB519A0383624D74
A0FFA2DBC8E4C73A6B989DD27B86D91AC7C46213955122326DF82D6F5013E959D996ED638D73EE3CEEB431ED574A78ED2379202E1F366B6C7ED4D57E5799C00D51767146A64E78A0950FEB52E4F1D0C19F4F4FAC3DE0D8516C77B2C143F3E65AED4BCB4EEFCDE532CE811E314EE08727
509EA580A437C0FD7AC93DFEFE3294E88BF36076E7202E2A
61cb7dec7e32e6a56e4ef0959ec72059
F07AC86EE27AF30EC4D5F3842B47F8242D0033CFD814F4F49F9828F46A1D9785
771864a54ed967e7b1f17cd82e24d6ee
758CB5A7B208A0998A60A4EB6F027E1DAD0BDA8A06D8DC79C2F7D56D062690163595752487B90E62B7A554079E386BE8
cb6624dec24f889f4fcdf6c8cda99d4a
805DC61EDA235195E08E2B9BAEA3D64FE4CAEDE81E02921AF5E92E609F9E764771DE2A73DE3A4D814F8FC1561DF692783BF8785C05CD18A0C5F1154696CDC617C64AE4D8FF7CD773207B8887A80AF964
ced3aa8d288af2349272cfc27d3103a5
e835a78a9558fb89b7a5cac85eab2d9db92ba3f88404590e4873862ca69865d4
8537C174988EF331327881D9846F979F254815C9F442B6975121F134A2F6234B
DD2C128842403852C7D98FD676D78F74FB80D1CA1A793CFFEF3E2C25D6391C12
F3FA29A454D58C281AC864E4D3CD2FF1C562E2D40EF22DE489747B5C837AA6A2
F1ACDF9AE022A2791A6D9D33E394BE6C
B95C2A929A9FD5A7CFD2C19662D4D8E2
F465FF404D3ED7E9B86DC79B7BBBAB24
1BB470FD7C2F29C85C3EB743D7F0A5B87147A564B35979A1505A02C9D997EB60
54F1A687613DE487D99311F51858570F
22C8AA5FCE134FA8E4F944A493B48D8DFDB59523D7E62A0E
6FE62335E166A1BC50C3E6D3549BB1FC84CD283878EE0363
97745B701803821F4238DB8735FEF03D
C749D033AFE42204C50F7DDCD8F0565800DB62E255463F18CD1C0D0504AD5A87
25a38fe54ebf66903a88bdfa917bc5d32c365fd5a021f0c612e3322edf679e66
C84261386B30D67728A934D29D8C697E
a5cf86f221020aadb510fe20c9d7b5d5
805DC61EDA2351955360A309B8BD9EBA5118071B49D6531601266065A033D96B7747E549223BABA092D55DB072C29E7CF148957D8A11E7AF2D9DBA7BD48AA7E439C68B9B5EA64A71
450b769de45f8cceba01d94ed0ff16b1
0B7587B223255AD6D8C174B50A852906
C6EC87467D057F4F5A351936A1BE499D6F17C5559E1AB4DC98EAAFE9CD73269F7EF9C5C6F1CC4E4E2EF02AFF771BAF406BE896FC7F26A83E
229DD51A81E5399E4684D78E21ABC91E5570999928FAE63D
30c5ecf27b765c7270ece6e67a87f90eae88315792298012ebb508fd12cc901e
491A55DC89E6FC11571B3460B8CCA37D
ae003cd72979242f96038c7abde88700
6352198648D6644D8CEE503AC5102735D89C5146153C05C307E94C287C7D7F39
CC1DD7C95D48200E76B7A77265F8F0C0
f92b16212e706bcabcc24f0aeb3392aca143622fae362acd208aacd28e3cde10
D66A7082D205A006A1A1D32CEEE0DEC6
2ADFAB91DFF1C8C9195C18FD780C8C510D85BB8FFE8957C3
4b7e4626a5ab27d4c0ae51042d23ee3188b56dfaab4cca103d8fd75412a0cec1
C545FFAFE86A902E121376DD385071B5
805DC61EDA23519528E6D0FFFAC3F9974874431025405532E96FFFFA847912C4B4AAB883FD97B85BA60D972A8C6992631D02F7669F96C0C915EE050B0BCF87381F25B43CC79685783578586F98D0C3F52AF37813733D86CA
ecf54b2e639bd2bbc012c1fb6e00ff74a143622fae362acd208aacd28e3cde10
83e7eded28f77cbb73e87bb7a955aae91d7d2e94c88fd5b54d0ee6cf29c05f09
D4A737180F99CAB727E24BAE6FBC256BA940D1E488300D30D10CCA08B5B95176
f72ef888700299d7194e9bc9e53d949c
97BB583F0428F6EA5ADC690FFB22C06B363D1327D9A4657ECC499D3C5D8E5973E3990C330A1626EF
6F26F074A06EF9E94BCF9D07875834B24D4683BEE4F9844132FDA71B26DB0884
d5dd5c3c4dabb7484cf422d2f90c9082
CC38E38E25CEAD0CC1E1FAACE677AE624BB95F42CF37F653EF7FD8B9CC5E8A8803F8306571ADE336B9B21D9B7E580BB6
1AC4474F806E1B4F1C220214BA11F9D40889D5C311620A2C7F2790D1889A1357B4FA16E8A0E82708
06815C5C82775F2A131876A3C58207A5
11384c00e40d9268c87204ef13acb71c
95f3c66d642b86d657fdefa49ec7329b
FE0161083793D8CAA1C925533227F7B26E3EC9FBEC5B3848C5132144F4CB5420
805DC61EDA2351957CB095263BE78E79EC6EE3B35B4A9279
C752C9FB9256A343E02BBC98A176BDEF800E81A171FA5303
9a9160cdb4ffc293f73c579954ef1e36
77690C3D24D4E5A30539247ED7501040BC123D6873C82E97
b4a9621917ea757403cdb6102af4e26a61f17de427b41b274398612a3bf41779
a99fb12476b26f47c7d4bec265bc4ca5
5AC33705718F0C53EC2EA497AC029F72
e9a6b74f700db0418ac599cfdffefe4c
29D5BA5B6EAC859070CD40734B1CB5701184A91194B9E02F11A8CEDF4A781755
5acac0ebc0bd614ee14f044362cb9a65
AA18E92FE6C9C63B53783CFE66143A34D951C8CAC5C7355B9CBE856D7C38007E58F88DB12C31EA2CC86553902098D74F0C0D1B848B80AA899CF73B8BBF597960FA5424A8408593AC
F2112FB1CDAAB20DE59F4A3408B350E4
6699B57D100066D4FDE008D0C05ACBBF
6977C9672D1480353F71FE36FA3D286F
54E5CC0D544F155495501C3004C0759723029A648C0D6E92
d2292a9b28f5e204e5af7e5475f17f26
1339639d4ef6c36889358a621e0d7cfd
C6EC87467D057F4F21C3EB5CA1F72DC147E66FD203138C342B4A42D64067D9A50D741CE85F5F26B6
babb599db738a0bca98d4a3ca78d04ab
B8911F8F36FC511385334B916F641581CE1742D6426AFD2B82BA13F196F889E3
513986629b383e1d09be5eaf583b9f38
d6f478a20b9556931c44a9dc84ca9a1e
8029d4706be8b83c0cbe7c3eeabbdc26d1899e61efd5dabe590e62a290a12b951a2f810e9130896dbc65d27b964248c8
97859F29C6208CFD30C7F245B0D6116C5960913C14EC97249EADBC1FF9F47E591C0D3FE3031ECE55422077AF1686A84F5C1A8FABF892B2D004487AD7A2AFCAE9AA7E58FC53664DD3
fc15b1a907ecda5e4e870578642144f4
7adef1e4c8411666be5f3a1ec545ee9ddccd56478d7aa8011a65d7b25b2bb931
4261D7DD0EC287140E33180838779B54
DD2C128842403852E10FF0F005DEC3FCAF219861952D8A553B8B6D2940C9C01D1D7CF42F5D8584852C9381A5915F7F02
473CE5013F9A7301114B2B216FD019DF786D5B7C753AF28A42F4584BDB6DAA69
EACF04968056D7BB5A34F5E58BFC930CBCACC167D028949802C898853A63E365
F8E500899394BC15C39E97DD36D185BB8209DB9459674A9E995B2F99D586EE0DB4CA5B6226A0193CFE4600D00A347F36
F07AC86EE27AF30EC4D5F3842B47F824FB10618D5CC87F772FB54D43CF7AE521
242F1296684A219E5881AA69E01C6980
82c1d50fb413ceaf6df1e75d23710e39562e62956d17a9a62c61e8938677ef0e
758CB5A7B208A09936F64E52305802D1A8B62F339EFD403FFF1A07AC9E46FDB1ADE8948FA15FB65376BB2EA021ADA7F4
805DC61EDA23519536679026062157C8A8F75600C5E8ACF4
dc1b1b71d147608d0fe9631d68c3f169
d48f9a38b1ddfcfeeceb87fb7b6cce27
07131CD95FFBB1927AEC8259A87402C3
F955D6CD6E76262A89F98455D93D803224EA3AA4C86860A3
84290a4c5d317462b148ddd05e07a341
7c9b3d037771a780f41f8c31ced798beb1f7763ca8c118c1726a1f5c402ed18dcabe485d61220403536443b329113068c61cbd54f1d98cc8543e236540732f87
169be732d4b9ba50a9ea9b1b3f2f6db2
F3FA29A454D58C281AC864E4D3CD2FF19CB61E367867FC2E4B6A7D2F5451B778
c55c83e4aca3d3b7a8231601ddadd81f
97745B701803821F4B0400CEF14AEAB87126529B8EEF34F4
822f1b0a9626ef6767a07ce88936a00c
98AC6D739DC00A921EA4A9D6E791013D
D916D445AD8FBB4C820CF7A0E1BCE40CBDBE65358E2212D0CAB7EB2BC2B4F718
2eef1cff35d01418ab4511a05b6a0fbb
4E6C33CC2225B4CA3181A694DDA0B783B005462FBE5D7514
6F08F6E4ABB7AA63F0DEA6CFD356CA8F
1BB470FD7C2F29C85C3EB743D7F0A5B84E1A8ACC2DAAD605
a965fa352939116f7f3883605eaec892
7D56DF6391744296D7BBD8A46C8E9DE4
4dbe7243fbf3e539760f46606aa1c5d1
ba89e9bd22ef99e932c8fb1f84ec252f
8a2c4889bcd4a74727f0dfc70840d9a6adac1832bd706feb38f495cceb144eb5
CD1305072CAE2473CE5D33AF5878B4DEF86BB05E23D9D1C8A9EB12BFACD085CC
5aaa0a6c06b844f9cc8591715a838d17
6d590e95fcc7751ff50d210e852ad9c6
88b56dfaab4cca103d8fd75412a0cec1
DF4F7C479D85A37F8FFB4B99A1ACA025C80A6935D923582D91C88F8BDDDF8FED
2D04BA851107EEB5B6122C84FA5A3C9A640DD6C39A6AB5396291BE0D68192C84
280dbeba868e9c0632f485cd418b5613
49598275AD670617D38DF02958AFD76F
F3FA29A454D58C28C4F60B1B8849588F1E9B06B8F047EB523746CF510B852A0C70A2FF0BA54F1049
29c8a721a7f35a0079240e24f25ac95650c1b3e6bb00550de77cb3cd4e7b9000
EC1F49A0314D0E9DD68C27D826860A409926371BBA909BB38684F1B598CCC078
8be5f95546a969eefcfc4fcd47fd7934
7504aa29ebb060248a24b477feb9b763f0d032ebc386e55751a739bc67a86e22
091b94f6ac1848a3a68911bc9365048d53ddc517b5c3d98666403fab0521fd50
be172de5e7c23c63c0b216de3b2a14f8
1D186817FF6E4F9594857239CC26E52C
D046F899EB3F13F0220673272AD8A8869FFEF023923DF6F8638F1801643D17F20A29565DDA908C8935FA51553BDD1901
5934E6950A8818AD178801604AAF2024DF1CC712C3113D69
805DC61EDA235195826ACC2DCDAE6A93338CF0CA439130901D29CC931D4DBD6CB747AE5D945E16FBBB51458874507B73
A08C863135F09F0897F5F89B5CE46D73AC3A95F30978B2E6
4B7BCC4C8AEA20ABA3EEC56AB93970B8761BA3E3D20EC1D9
440640c8479716664e063599c121aa77
3BF70E43115C66B33034DB7FB501A3FBB207D61B80C4AD652F3CF9AD9E10B744
BC2F2A5B5235795FC936EFDE95646080
8ae3dac7bbbe801c94671f353f8ed4bc
3577B6E635644962CAD4AD27EFB65A2D
BC6D028349712F3BF0AF445D509EDA0B324BBA2453E1B245D8837A917D13BB49
ABE0E02AA611094E693D7AA27004D9476D7BECC94A9E275C
ACAB82F91A92816EB4A62947FC83AB4F63E8DAFFEEA5B378
57D462518C50403D3F0DA0193B2C596E
997b08fdccb8222d9205cb0488b77a4d
F955D6CD6E76262AB26C4420649E0613BEB077357DFB74DE735C91ED866341DA
b336b57ba43dd5b597f56aae20802c8a70879f1a99c32fc5d9806918b514e782
eba9144fb5c93f14f0f9ac7f808b1771
A9EFCF079CC4DF698A633C3A4DF7ADD6F9182A7B8779C6E77607AB8A168F55753ED94469194C9EE3236D0A4B8D9FDA6B
BF8C69511D111B009460370D67FABC1EF30BE564BE1C4EF9
8BA0D9F6812FE6D74A1099F4CCACC5CD8621D81E0B126854029129EEF8D033EF
1317766E6259E83043CC11EA7F7C86D26DA99304E36C2D76A41C7238BE3CE1A1
FB0EA09AC009DA48B1402CC3F5DC830EE4E734AD29EACF310091FCF8F9AAC3BC
3fdb064b33b42d801d4fa0c705b5dba9
4555CC234AECEFD08A4EE39E77E04EAA7CF5B58931E486C2D592C5E57D164E4D
DD2C128842403852E10FF0F005DEC3FC56F7EAEAD427212C95F2B5152EBC23FE229BA8D444B471CF
71ae1445f5304e3e0f0fcd6d9d8632d0
9e8c966ca2f2d80206cc10c20ac7ff34188ee33a84c2dba6cc6d6e6bb2e657044d97982620c7b71ca94d82e821149417
4B92A3DDC04674D4A53329E91FAA9D57
1AC4474F806E1B4FC16D4E1F235FC4558B4071AD73785E2C0A7BC05F88FB3EA395A83ADCBA41A41C
a2ec747ed54c5e82dc0513f877938d57
244716dd42b25d01508cb2033882c06f
6F08F6E4ABB7AA63BE5EF3CB2F674AE3
fc81cf3fbc6a964c7fbe9a48acd45471
DE15558774D90171011AF3CBFAD5452A0FB287614E9C78EB80E92E5A8D47ED324DBC285662B862A047946B8A304B6FD14DD16E38943B2D883545E451AEE047B64B40A3BFCEF69AFAF5FD95306A47D08F
ccf30c861b30367e06dae1733fc292cd
8bdce572c2f73e6f3a888d0681b07c12
D05AB539485845134C453B3FF9E7EAEE
5973240BF0813B78E1727C9F54D288F4
81af216a39a6b59266705e4967185c50
6DDA1554C7397DA638F5BF6A0B3CA362
6d1a6f6d865901e444f099bdf996791d
a851150e3b701cb9672665713dd4903299e6ac37d0512a5887cb9c35dbd5cb4c
C143F7D6FB88D6EC0D804FEB93A82C4C
C84261386B30D677887D1EA344E5DC55
AE86BAA1829D60CDF3BC75A83A3C794D098AC32A3BC0F29D8038252F52DC412366D0DA38EB1E93850B3FA26DA2FF871906E622A4CAEB6C60
5e080a88d590fe4bdf276088370b7d6c
C17BA30A1506D2F771E950BAF7DB22435950753DEFBB95005CA33C38C890BE87
157fccd0a96636378b374d35c12cedbd7f4b4a866af88cb66c6e6cc5d0e08287
e8669068a58f35c9a07fe3c9cb34cbd9
db9c50916fb8672b082755625d8ae966
653aee9b2eac775cb4f0b54dd9cd6bc4
fb866f5f3e2956c1b8e38ff095e636597457153ddf270fd407fd2a54ac734a21db21e288e70b5dd7ef2585113c74ee83
B53F56A769DFFC7F8814561E1B8C92D0
4b665b71927749acb362fcd7a4b07b7f
cc2e97a38ec6e91115cddd8fdac2274ccba60976ad4ed00662f58169c1b2ab29023785072119be85f726521db4722edb
273c46f44f3b479ef0c3d52d541c675f
4F80A23F73A8074A5B2DDB8468A8947B9BFBDB6DE651A666EE6BEA864CDCBF0352ECE5842984AD86
63db3c079be8c25beb1918145be5a65d
9717D0C529424CB872339577454CCE1D
453A22F91EDD6D8778544FAA6B899687E2E36D8A9A1411D4
805DC61EDA235195735FE6997D63C1417D38820AE9BFCA2D0FAE09C2953C63C22E5DC81493039CCE
BF414359B1C23DB3EA0DF015F1B2C5AF306B4176216D907E
BF414359B1C23DB3B2BDC4A7C3B344EBF59B79F1B2334B5F
AD93F687A22D1561CB44F7E156F8B8855E2B3B8A5BB81AF9
10DE8D428365BA04D026A1435513AFE79495ABE1EB8E8820
7ff209090623b82a5b563e806c1fdd81
68447a07da024c855d722e91db1459bc4bc793b462a70d85cdbc0d74b9170ebf8a624ce70ccc51c3d7913736e9250cbd
13198C6396C8906158979B69054A4B66
269C787CE79DB7C73479E1E9A0C34524
E2616D0288EF3965715637EA11E4B725
2C670D8DE3CF72F34E7A3F6FDDB5365B
ea5677d5d61d70d650a9cda0ec66b3ea
5FD3E3A6B13BB2ED0033FE94865770F7
E85F941F852633C41413CBA935905FDF
227ee7cfd10c72e3ba75d2268a02000e
da88b545982ae0021b30b6a6cbf6873c
1ADD19A77E504C1379FE58339DC14F9905F3AC14D2B98D9A6E9A0512C84083AE
8b672705b9ec1a3ae192500f9f7b71028385ebb662c117ffbbe1663c177a6bc6
289f009eb268fa1f80aaf4b63f5ec6aa
aaaa2fda868420a1519098c844e2ca0d
e346cb92c86654153e62bfcf79dc6e2abe9dbd9bb26de3324adcd0bfd5168bd668449d3cf0700f2c0ebf8ff866650191
0e92544b1008cba3bd7571b0b16d5134
F3FA29A454D58C281AC864E4D3CD2FF17A8CE51730ADB524
C6EC87467D057F4F5F3C9F508819F6CDCBC006215D427ED73307267933E53321F3620DCA4F5CA11D
CD97BC8BFBBE222C9152D0847AC97AD1349BF691956B6EF84D519773FB915F41
485C1F3488C571E9C68BC0610C678DC3733A6EA688E3B236
b921334a9dfdea46a15649af22dd064a
EA7043B83408558C57F40141D684601E
C627E8B51BC17CB3FB68BB0695BF13B98184EEC3155053E2
1bb1886b1485bed34edc47e183a9acef
a3881877543b012044f5b2096cb284bc
DE15558774D90171011AF3CBFAD5452A0FB287614E9C78EB80E92E5A8D47ED324DBC285662B862A047946B8A304B6FD14DD16E38943B2D8891451E6C0C6822BC4A4CF5316B30AA74
805DC61EDA235195835F9B3377DE9F2FEB7CCD8EB19FFE01FD0AFFE56565B8F707D306404A382D5BE2F84EC0F07D6895FC8B862BBC84731B02A38043655B291465E5A6035B5D9D43
1aa898874cb616d74f69b5fa36cfcad1
8040D854FC7610984DEB8EB22272DF69
ba3c8a9fb6fcc0f13c9da209fd33c257fd39b47605612c691b4a140629eb4197
43802EED616B59D7467DA6000C92DFBEB8715DA5837A93F3871DEFA21A41BC1E
71BF65DF8979788932577F7C7117A487
78fa99a7aeb621ae7823e97a6beab66f
5FC68A6AE004A308EF0FBF2953899370B09BD93EC55B6B11B81924B0130D80CB
d94e2a789b50d1173aac35de79df9a11
805A980004A00CAD21E07C9FCCC62F896256420CAD72102C
e81e512926fd037e898fd73615353eb7
B6F7519866F39E53AC510DB58AA4C24554683D21A83540F2
D1FC3C141C09DF2B30554C880792B19BB51778051FD8D791
B887D727DF6DEC5FF898219AFFE07224102E7D466DEA5D0CDDE5A1B755FE8B0D4F82ABB5B767A43C3A580B0977C87EAA
50FD1D84C447912A8C276F0BF96EAAE0
1AC4474F806E1B4F1C220214BA11F9D40889D5C311620A2C7C297DBC73BF80887CAD3474CF1A78EC
CB7F341DA6C1022620DE491823774AF1DC2454B41538417B
7A7E53F71C6813491663E1E6B648E727
e346cb92c86654153e62bfcf79dc6e2a80581d235f63c50cbf7ddbece87a4ccdfd816e8be626cf23edb5defd2ea3d93c
142c5b7d481fdeb28adf13895e7306e7
94128B4AEA4078713876815251F22E68
54F1A687613DE487106C41AC0B2EDC92
4bf6331c71d79bc70dc6481565358864
8297e2471d6770685515407a1f19acf6
1FC618E831D14ADCDE7B948E1891DA9A
e346cb92c86654153e62bfcf79dc6e2abd48805aed560f847a1cb43711eb6ba24acdb4c64937ef06e6161c330b3105e4
7BE95BB408B3958CA14EAA5277609E5954FF69021688CFEDCCF14BC9B890265A
7ABC62546B425F89F1DB79702F6CF49C2027E46CDA68BD5BDF9AB294074564C3
3adf8d0bb5f99fcb31e75f6032db612a
1e2c70cb20d30d96f82434f6361733d6
41b363d67991023c57041b9509ff4f61
3EB6650D8639BD6BA801D70D2B1590AC2B6B52E3E7EC12F8
bf650f266bce088e839bbb0854417f21969299004f600c7bed34017f9c1cae5e
B5826E6D7CC90BE5D367A1F2B1ADBF7A
1285CE19CF6FAC8C8DE3CC9439DC697E2E85D14146BA0C56CD87BDB2660B3BE36A09C9ECC1B02A6378CDBAE80EB0237C
6c07cdf9467a8289fab61c4f40f0c0b5
d6a04913d1858542dcb7dfcdfe7c4c05
dfd87c715c71008e9c238026aa3a4487
309cad392143b19b046c8b0bc12acd62
6c8a55a9236aec61b5e97b965368e16ff400497ec04e049bb840ad2a3de7c37b
AA6A6B46E1AEEC2917C80752C243A66CA8AE91726F6C1EFD
844d392c6c54f869792dac2d6ca96ea2
F955D6CD6E76262A08A6B83CA55F93495CAF1AB3261AAAE8A0B222126BD9EADCBF95CB40E135444E1E05B47A259BB1D9
805DC61EDA235195C2EAE0467763D50764457F78BFEE9FD2A94EA097D5D510446199F38186E13E162134BFBAEFA362C3
52a5c7b3d41c07f7d99b7d841f144b766bac05567f71433f9be6e755ac4ce4a8
715E042F67B345B5420EB9460FA156EA535AC348BC33823C
F955D6CD6E76262AB0BB177417B0F4E900F4BCBADC2A72B1B7A2E3CAD4CD7331
2a10abb538585095dbbb42390c5864e1
14a19670262ab9d7f6b69091f0c95a8b
57ecd553c64e753785f00c50a05e1c1d
97745B701803821FC4DAA84E293D44EE
176e52dc8675858dd95928cc6ee60f6e
7F69B1F69C059D83A97198E7900F9736
6c8a55a9236aec61b5e97b965368e16f3501d2892d69e5b11f8b265d3810feef
ab197f7d06e813472eaeee25023b4671
4D3F65F5ECC02D476B33A5FD0F8DF4AB5F257421ADA891333F04A3D48C4178BE
1A9D6DD3D7B942BEC338CFD61E9F75BC60A61858FE4E3377
c67170590e168d1da89132b627bee2ba
F16533F57FBF200AA27C6BAD4C0CD1A3336767E6D41F8274
a851150e3b701cb9672665713dd490326fb2ba119f7039155fbca60855204bac
882EA9689C37C66833EB41A87D99D138
485C1F3488C571E9CE6C5B59194088AC10DA5DBA4445AACB
d552444cf7e59788e69eeed7509e5c0f
2deefd6dbdce5bb1ed9d46700f70e32f
8EDEDB9AAAB6D41F59A4B53E0ECF6732
229eef27621cd98fc49fac83bcb95ee4
8515176345eda8d859f8ca1e48a88f88
fea3664cdfa5f74c50a8d83de0a5d535
b4cb99ef4a3d8ff3c9b35583da875666
32f0f5d98b83f1a7e7c563cc87d9cc914ced3f5f44b5d06532eb1cc0645e5dc1
C9F59FE736B4EDDAE78999E3C6EC84DD
1CBC72F9B572BA6195B65A226D7080E1
8F92F0DBBAF88C840CC684B2DCD097C944829ECB8ADE1E70B2A12FB78315C016
C3EB647C245F3CE34ED9A7F1A8EA29F4BA5D9D6A589F9C4191308AC2DACBC3E85E1B613CAB455F8CE7D78EE824B6615A
28D7F4F0938ED7088292ADB7DD3F6BCA
B6EBA40A4703ACD3033570C754E3495A
08bd79b88d07b446b662e8581c51721b0063d0ac8da60ed3db316b436772c0b5
A790F71AB57DD5C2DE1326DCDC5471F9
30A27B6148A0528EA4D073057DB1B020
2FABFE9EB6E74DC5BDA102A8ADFD1AC9
0cdf9548e9766ba8589b8a4c56d6bc8c
a02d5f397675cdb42de038c159c9e70e61f17de427b41b274398612a3bf41779
DC9E886A46189C061ED1A008CDF331C8
dd20e0ab76fdec79f9aa3c3092285604
79f4edc9772ce6c59de1ddaed53cafaa
A08C863135F09F08E127EA6895E81F5B5892450B6D7B9472
6FE62335E166A1BCE560E8F01A01C2A3
DD632A40825E4C711E191152704CA5646A7395DE8BF0C39A90633F0423E24CE5BA40F669FC367022
27A4FD61C5821BA9842C39B7A5F723E4
485C1F3488C571E9C68BC0610C678DC36D1152DFD788AFC17AF37689E591559D
50FD1D84C447912A1ADC14C15FB56994
A2C2AD4D147D9DFA155633AF5285B80D
0d20f019311a56a760151aa305be9cf69e93b10ba954bb1f1d848c6151bf8c4a
0E7555EE27CEEBF48EF455937EDEC3FA
1ADD19A77E504C1379FE58339DC14F9905F3AC14D2B98D9AD56895A0A781DBBCA91A6FE9C315F3B5
cc2e97a38ec6e91115cddd8fdac2274cf849785f88371102909bdf65a6a20f2e473160e264e9dd34ac3be33341ee303e
0654dcf282bd29a79cce5214bb88fbc4
f6aae0332a9d58a0e7e73e566237c6aa
3A1669229F6BA3247BDBCACFE88765C2
0AE6A788DFDCDA3D50B9C86353873E07
091FE04B40D78654CF02E18D5FED0E67
A08C863135F09F0897F5F89B5CE46D7314B8C4F1F9E32C96C32AB90843107F6B
F6198E5E717A3244CB93B6EA585E199C2CDDA87A7BEFBD21
F1DE69126717A6EEE21E9ADA7152F4AEA238A39C8A408FAFAE3201C4C30B106F40011DF1951EBE82FE2FD26937486A02
805DC61EDA235195E08E2B9BAEA3D64FE4CAEDE81E02921AF5E92E609F9E764771DE2A73DE3A4D814F8FC1561DF692783BF8785C05CD18A03B4843384D2724C1630EEC6339993691BF605B9BE61B0C39
A2ECDE587D1C7C48A4AC4061647F0717
805DC61EDA235195C2EAE0467763D50764457F78BFEE9FD23A0FF4F6B07A0E0F3E5E623575F77865569CEE1152B5B225
7de2207d60f10802dda3ae76845bc71dff70f927952c039db32ab22d74eba14511ac16ee909185a99db3129cae47581184bf89cd89ba5c39bd30cbe9f074cf7b
a98166cfb583d8c5b8cd548a57f317af
9a350b02672b8a2beb5decc5dd62dff2607adb25dc0b3c3d981de6263674f54b
045d9adc082b5becb0c82a9c03413592ee6279740ea29920ee7391528452f636
556AC84FD8C24C421FE8B40889575B33
82FEBEA9DDB5090F5BFA1B2DB3F7A900
F20C81F0B487BB073A32F48C9906B9F5
6F868D2063D650801E98BD1068BDFD22
0af37e32bf0e74dc85212585661b49a62c91f7052b0f6fc7f3f836bfe5a2470e
db379173bdd184f3fe6c35c2897783d4
6e4e5330611f66c148225c34d87f0a52
361D1889EB415A9014B437BFEEB3AEC3
33bd7ea806f83cd023b066a27b134085
EC25A03A424D3ED64BF9C526E290B8E2E034627122D44E22

安全提示信息 应用程序记录日志信息,不得记录敏感信息

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
cn/beingyi/sub/apps/SubApp/SubApplication.java, line(s) 319,354
cn/beingyi/sub/ui/JniAlert.java, line(s) 16
com/px/DaemonService.java, line(s) 38,73,79,87
io/beingyi/Test.java, line(s) 29,45
p028/p029/p030/p037/C0406.java, line(s) 170,181,195,199,219,230,246,277,284,311,318
p028/p029/p030/p037/C0410.java, line(s) 110,95,96,230,234,237,259,90,91
p028/p029/p030/p037/C0417.java, line(s) 182,131,175,184,221
p028/p029/p030/p037/C0420.java, line(s) 206,211,217,232,381,464

安全提示信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/cloudinject/feature/p021/C0284.java, line(s) 9,314
p028/p029/p030/p036/C0403.java, line(s) 5,54

已通过安全项 此应用程序没有隐私跟踪程序

此应用程序不包括任何用户或设备跟踪器。在静态分析期间没有找到任何跟踪器。

综合安全基线评分: ( 齿轮辅助 12.8.0)