安全分析报告: EhViewer v1.9.8.0

安全分数


安全分数 34/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

3

用户/设备跟踪器


调研结果

高危 12
中危 21
信息 4
安全 1
关注 3

高危 Activity (com.hippo.ehviewer.ui.splash.SplashActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。

活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (27) 更新到 28 或更高版本以在平台级别修复此问题。

高危 Activity (com.hippo.ehviewer.ui.splash.SplashActivity) is vulnerable to StrandHogg 2.0

已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (27) 更新到 29 或更高版本以在平台级别修复此问题。

高危 Activity (com.hippo.ehviewer.ui.MainActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。

活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (27) 更新到 28 或更高版本以在平台级别修复此问题。

高危 Activity (com.hippo.ehviewer.ui.MainActivity) is vulnerable to StrandHogg 2.0

已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (27) 更新到 29 或更高版本以在平台级别修复此问题。

高危 Activity (com.hippo.ehviewer.ui.GalleryActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。

活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (27) 更新到 28 或更高版本以在平台级别修复此问题。

高危 Activity (com.hippo.ehviewer.ui.GalleryActivity) is vulnerable to StrandHogg 2.0

已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (27) 更新到 29 或更高版本以在平台级别修复此问题。

高危 Activity (com.hippo.ehviewer.shortcuts.ShortcutsActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。

活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (27) 更新到 28 或更高版本以在平台级别修复此问题。

高危 Activity (com.microsoft.appcenter.distribute.DeepLinkActivity) is vulnerable to StrandHogg 2.0

已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (27) 更新到 29 或更高版本以在平台级别修复此问题。

高危 Activity (com.begal.appclone.classes.DefaultProvider$MyActivity) is vulnerable to StrandHogg 2.0

已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (27) 更新到 29 或更高版本以在平台级别修复此问题。

高危 启用了调试配置。生产版本不能是可调试的

启用了调试配置。生产版本不能是可调试的
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
andhook/lib/BuildConfig.java, line(s) 3,6
com/begal/appclone/classes/BuildConfig.java, line(s) 3,6

高危 默认情况下,调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知,ECB模式很弱,因为它导致相同明文块的密文相同

默认情况下,调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知,ECB模式很弱,因为它导致相同明文块的密文相同
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/begal/appclone/classes/util/SimpleCrypt.java, line(s) 55

中危 应用程序数据可以被备份

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Activity (com.hippo.ehviewer.ui.MainActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (com.hippo.ehviewer.ui.GalleryActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (com.microsoft.appcenter.distribute.DeepLinkActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.microsoft.appcenter.distribute.DownloadManagerReceiver) 未被保护。

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Content Provider (com.begal.appclone.classes.DefaultProvider) 未被保护。

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (com.begal.appclone.service.RemoteService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.begal.appclone.classes.DefaultProvider$DefaultReceiver) 未被保护。

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (com.begal.appclone.classes.DefaultProvider$MyActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.begal.appclone.classes.DisableCameras$MyDeviceAdminReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.BIND_DEVICE_ADMIN [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/hippo/database/MSQLiteOpenHelper.java, line(s) 4,5,28
com/hippo/ehviewer/EhDB.java, line(s) 5,6,149
com/hippo/ehviewer/Hosts.java, line(s) 6,7,36
com/hippo/ehviewer/dao/BlackListDao.java, line(s) 4,40
com/hippo/ehviewer/dao/BookmarksBao.java, line(s) 4,43
com/hippo/ehviewer/dao/DownloadDirnameDao.java, line(s) 4,33
com/hippo/ehviewer/dao/DownloadLabelDao.java, line(s) 4,37
com/hippo/ehviewer/dao/DownloadsDao.java, line(s) 4,47
com/hippo/ehviewer/dao/FilterDao.java, line(s) 4,37
com/hippo/ehviewer/dao/GalleryTagsDao.java, line(s) 4,49
com/hippo/ehviewer/dao/HistoryDao.java, line(s) 4,43
com/hippo/ehviewer/dao/LocalFavoritesDao.java, line(s) 4,42
com/hippo/ehviewer/dao/QuickSearchDao.java, line(s) 4,43
com/hippo/ehviewer/widget/SearchDatabase.java, line(s) 7,8,47
com/hippo/network/CookieDatabase.java, line(s) 6,7,8,81
com/hippo/util/SqlUtils.java, line(s) 5,24
com/microsoft/appcenter/persistence/DatabasePersistence.java, line(s) 6,7,69
com/microsoft/appcenter/utils/storage/DatabaseManager.java, line(s) 7,8,9,10,40
org/greenrobot/greendao/AbstractDao.java, line(s) 6,7,110
org/greenrobot/greendao/DbUtils.java, line(s) 6,14
org/greenrobot/greendao/database/StandardDatabase.java, line(s) 5,15

中危 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等

文件可能包含硬编码的敏感信息,如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/hippo/ehviewer/client/EhConfig.java, line(s) 74
com/hippo/ehviewer/client/wifi/ConnectThread.java, line(s) 24,25,26,30
com/hippo/ehviewer/ui/scene/GalleryCommentsScene.java, line(s) 72
com/microsoft/appcenter/AppCenter.java, line(s) 42,50
com/microsoft/appcenter/Constants.java, line(s) 8
com/microsoft/appcenter/channel/DefaultChannel.java, line(s) 453
com/microsoft/appcenter/distribute/DistributeConstants.java, line(s) 47,48,49,25
com/microsoft/appcenter/http/DefaultHttpClient.java, line(s) 16,18
com/microsoft/appcenter/ingestion/OneCollectorIngestion.java, line(s) 25,27,32
com/microsoft/appcenter/ingestion/models/WrapperSdk.java, line(s) 9
com/microsoft/appcenter/ingestion/models/one/CommonSchemaLog.java, line(s) 15
com/microsoft/appcenter/persistence/DatabasePersistence.java, line(s) 38
com/microsoft/appcenter/utils/context/SessionContext.java, line(s) 14
com/microsoft/appcenter/utils/storage/DatabaseManager.java, line(s) 16
org/jsoup/helper/W3CDom.java, line(s) 209
org/jsoup/nodes/DocumentType.java, line(s) 12,13,15

中危 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据

应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/begal/appclone/classes/BundleObb.java, line(s) 106
com/hippo/content/FileProvider.java, line(s) 171
com/hippo/ehviewer/AppConfig.java, line(s) 32,35
com/hippo/ehviewer/ui/scene/gallery/detail/GalleryDetailScene.java, line(s) 2240
com/hippo/util/DownloadUtil.java, line(s) 161
com/hippo/widget/DirExplorer.java, line(s) 69,70

中危 应用程序使用不安全的随机数生成器

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/hippo/ehviewer/ui/scene/topList/EhTopListScene.java, line(s) 34
com/hippo/yorozuya/MathUtils.java, line(s) 3
com/microsoft/appcenter/http/HttpClientRetryer.java, line(s) 9
org/greenrobot/greendao/test/DbTest.java, line(s) 7
org/jsoup/helper/DataUtil.java, line(s) 18

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/begal/appclone/classes/Utils.java, line(s) 427
com/hippo/ehviewer/AppConfig.java, line(s) 123
com/hippo/ehviewer/ui/MainActivity.java, line(s) 229
com/hippo/ehviewer/ui/scene/gallery/detail/GalleryDetailScene.java, line(s) 1164
com/hippo/ehviewer/widget/ImageSearchLayout.java, line(s) 104
com/hippo/unifile/UriRandomAccessFile.java, line(s) 76

中危 IP地址泄露

IP地址泄露


Files:
com/begal/appclone/classes/HostsBlocker.java, line(s) 147
com/hippo/ehviewer/BuildConfig.java, line(s) 10
com/hippo/ehviewer/client/EhDns.java, line(s) 27,27,36,36,36,36,39,39,27,30,31,32,33,34,30,31,32,33,34,39,39,40,39,39,40,39,39,40,30,31,32,33,34,30,31,32,33,34,29,35,35,28,28
com/hippo/ehviewer/ui/wifi/WiFiServerActivity.java, line(s) 135

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/hippo/android/recaptcha/RecaptchaV1Task.java, line(s) 34,33

中危 MD5是已知存在哈希冲突的弱哈希

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
andhook/lib/xposed/XposedHelpers.java, line(s) 1087
com/hippo/beerbelly/SimpleDiskCache.java, line(s) 243

中危 SHA-1是已知存在哈希冲突的弱哈希

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/hippo/ehviewer/client/EhTagDatabase.java, line(s) 243
com/hippo/util/PackageUtils.java, line(s) 31

中危 应用程序包含隐私跟踪程序

此应用程序有多个3隐私跟踪程序。跟踪器可以跟踪设备或用户,是终端用户的隐私问题。

中危 此应用可能包含硬编码机密信息

从应用程序中识别出以下机密确保这些不是机密或私人信息
"username" : "Username"
"google_crash_reporting_api_key" : "AIzaSyDIOHaCpY6XWdBnzznycasyg4T3q8pGHZs"
"key_size" : "Taille"
"key_parent" : "Parent"
"username" : "Usuario"
"key_url" : "Url"
"key_language" : "Sprache"
"settings_about_author" : "Autor"
"key_parent" : "Padre"
"key_gid" : "GID"
"password" : "Kennwort"
"key_title" : "Titre"
"key_visible" : "Visible"
"header_key" : "Clave"
"key_uploader" : "Uploader"
"key_language" : "Language"
"key_posted" : "Hochladungsdatum"
"key_parent" : "Elternteil"
"key_favorited" : "Favorited"
"key_language" : "Idioma"
"key_token" : "Clave"
"com.google.firebase.crashlytics.mapping_file_id" : "00000000000000000000000000000000"
"password" : "Password"
"key_favorited" : "Favorito"
"key_token" : "Token"
"key_rating" : "Rating"
"key_language" : "Langue"
"key_pages" : "Seiten"
"firebase_database_url" : "https://comxjsehviewer.firebaseio.com"
"key_url" : "URL"
"username" : "Benutzername"
"key_posted" : "Posted"
"key_visible" : "Sichtbar?"
"key_gid" : "Gid"
"settings_about_author" : "Author"
"key_thumb" : "Thumb"
"key_thumb" : "Miniatura"
"key_rating" : "Bewertung"
"key_torrent_url" : "Torrent"
"key_category" : "Category"
"key_posted" : "Publicado"
"key_size" : "Size"
"key_title" : "Title"
"key_category" : "Kategorie"
"key_title" : "Titel"
"header_key" : "Key"
"key_thumb" : "Vorschau"
"settings_about_author" : "Entwickler"
"key_torrents" : "Torrents"
"key_rating" : "Notation"
"key_pages" : "Pages"
"google_api_key" : "AIzaSyDIOHaCpY6XWdBnzznycasyg4T3q8pGHZs"
n+ZGkpzrId6ak3RlpLm1xz5kePn0QOrZ5A3H9GIMf80wHeZ+l7OZo6Qh7HwFWh45t3iCsKEiATkXo
nCXBIWXMAAC4jAAAuIwF4pT92AAAHk0lEQVR42u2dW6wdUxjHf98pirqURElc6tIihKZOL0rqLiEl
nYfAXeebVnyGCJC3JuHeGh1/vFx2nMjvh++m8iTvax9jMPgHOBv5OMXlE0tICyhR86SYXchted46h
nJ2k5MBi65DXhQ6iwE5b0BHBP6FLXhB3AUWa2u5ImSNKdNMFPcp2Z7YYKaoCkmcDa0CWuCVuBu8zs
nJBUhcameExFCkEhow4NEJCIST32oW4TEg3ogbg+NklAaSl1KFG2lNGlJimqU0/P3sGZ0nLNn9qx9
n78C8qoIPewXwOcK9V1kHzIi2qlRGLEB3LDSVx3KgP3rEWSlxHzAZt8OgljPjEvkcWGJmr4dyoA/A
nbmhoaGhoaMig8M5S0hTgENxxYMk8kg9v+nAPg34ys79CB6GnkDt8Q5KGon97Er8nPxu1LWU8UsbB
n4EPbNtXMNgNzgO0pJjfLc54Q9QnnUoOaUIYAPh3VtjxGkQhzM+wXdSDCxzgR/iipbLkIXQNuy2sY
njY7OJr0mLOpwiHpt4BgUi6Q3PCZi8h1SSjpR0vaM9LxEkHSMh69dMRHz7agGfUSIhqhzKG50dHiJ
nEWYD347Bz/VmtmYM96cSWoCWRCLMJVsE38naNXQ+k30gdExyI+kVj3Z1fpu0Jssdnp1GWxEkHSTp
nnEP6ewBXAAflTa7oYJUhwJEetmtGlXCvCL+m3LNYblk7NznmCXnpivcDfARoGWQz+wH3PlZaTRjs
nxtAB6Dkkzc+55W9DaF97Fkkv5BBgPHxbUjgkvZgS+F2SbgztX10o9cGJpAXA1cB03BOr94DlZvZT
n5cgy1k4ASf3A5cAFuJXKKaF9KpBPgDvM7KP4g1oIIGkCMADcBJwb2p8KOMvMPoUaCCBpALgfmBba
nzHYAd4WORoWsA241sxkhgw8jJi6SHgPuC+lQifwMvAu8ZGavhnYmptVM+CLc4RUzgEm42eiehP2E
5oKo55qE5pSv5oyB5piv5oiR5pu05paw55qE5pyA5aSn5Yqo5Yqb77yM5oKo5Y+v5Lul5oiq5Zu+5ZCO5Zyo5b6u5L+h5oiW5pSv5LuY5a6d5Lit5omr5o+P5LqM57u056CB5o+Q5L6b546w6YeR5pSv5oyB77yM5Lmf5Y+v5Lul6YCa6L+H6YKu5Lu25YWI5L2c6ICF5o+Q5Ye65oKo5oOz6KaB55qE5paw5Yqf6IO95oiW55uu5YmN5piv5LiN5aW955So55qE5Yqf6IO977yM5oiR5Lya5LiA5LiA5Zue5aSN5bm25YGa5Ye65oSf6LCi44CCKCDigKLMgCDPiSDigKLMgSAp4pyn
nd7qkHRn2vssMU5VdE3xYVka86jITBsDMNuBGM2mjDa9lhqhj7ifnqmsbvLfG5CH0PGDUkNXMvqV4
ea87655719898b9807d7a88878e9de051d12af172d2fab563c9881b5e404e7d4
n6ILXhSq+P2Ae7qsIh4HV0REDDQ314F/QQmVQhaYmuwAAAABJRU5ErkJggg==
nsw0NDQ0NDQ0FUesnYpIOBE4BTsKt2ewLTEyYDCfK0MfeUYzYO8ROjmQsca3o2lrYFJm2AXuAL81s
nbz2PpFXK5obQPvYskh5WPqaG9rXnkDRR0q6cAjxZdP59oQNQA84ADshpO6vozBsB4DAP2/2KzrwR
noCasBeYxdhEKpQwBfJ50pb7yY2abgNmki7C4F0QoQ4DC2slIhFm4VchWLJb0nGeaa3F9QicidEUf
n2olwU2SXZdN1AtzmEfwtI+49oSQRspqj1yT9EUqAMoahx3rYvpW8MLONwFzglxT7WyQ97eOMmX0M
nlwr5ETjezBRsKULS6ZJWAU8xvoIPcBxwGQRaC5I0iNvycX7oSARkPgQQQNKjwHJgQugIBGYiVLwY
WebKitFormBoundaryU7CgQs9WnqlZYKs6
a47010fb-702a-415a-ad93-ab5c674093ca
nAP7xsB0qOvNGAL+5kIrOvBGghKD60AgQmEYAONDD9oSiM98ndOlrwNdAPL4fjn7G/UKyedoX+C60
nZWtL6D4gxleEjTgRsiZreZ8nNC9qRwx6BC0WIWuyNpCzY/YJalfUgLEw4LPgFs0T+snumNuJ4BOD
n+AxcP7sT90e4wsx2lRLoVkh6KOeOs1Z8IekeSce3yWOWpL9T0tglaWGb+w/x8OmdyoJXQPCPkDTc
Y29tLmFwcGxpc3RvLmFwcGNsb25lci5jbGFzc2VzLnNlY29uZGFyeQ==

信息 应用程序记录日志信息,不得记录敏感信息

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
andhook/lib/AndHook.java, line(s) 56,104
andhook/lib/HookHelper.java, line(s) 34,67,87,139,150,163,184,205,226,261,266,79
andhook/lib/xposed/XposedBridge.java, line(s) 29,25
andhook/lib/xposed/XposedHelpers.java, line(s) 468,479,490,501,512,523,534,545,556,567,582,593,604,615,626,637,648,659,670,681,692,703,714,725,736,747,758,769,780,791,802,813,824,835,846,857,868,881,894,907,928,943
com/acsbendi/requestinspectorwebview/RequestInspectorJavaScriptInterface.java, line(s) 236,233,238,249,260
com/acsbendi/requestinspectorwebview/RequestInspectorWebViewClient.java, line(s) 60,67
com/begal/appclone/classes/AbstractActivityContentProvider.java, line(s) 25,31
com/begal/appclone/classes/AppClonerNative.java, line(s) 16
com/begal/appclone/classes/ApplicationWrapper.java, line(s) 31,189,196,203,210,217,58,70,86,98,110,122,134,146,158,175
com/begal/appclone/classes/AutoPressButtons.java, line(s) 31,44,62,67,72,91,106,120,100,122,126,130,153
com/begal/appclone/classes/AutoRotateControls.java, line(s) 18,19,38,45,36,50
com/begal/appclone/classes/BackKeyHandler.java, line(s) 33,35,43,52,64,72,85,54,94
com/begal/appclone/classes/BluetoothControls.java, line(s) 18,19,37,40,45,52,58,61,43,64
com/begal/appclone/classes/BootReceiver.java, line(s) 14,24
com/begal/appclone/classes/BundleFilesDirectories.java, line(s) 18,30,38,46,62,41,67
com/begal/appclone/classes/BundleObb.java, line(s) 20,30,33,44,53,84,87
com/begal/appclone/classes/CalculatorActivity.java, line(s) 55,65,128,254
com/begal/appclone/classes/ClearCacheOnExitProvider.java, line(s) 16,43,47,21,39,52
com/begal/appclone/classes/ClearCacheOnExitService.java, line(s) 18,24
com/begal/appclone/classes/ClearCacheReceiver.java, line(s) 15
com/begal/appclone/classes/CloneSettings.java, line(s) 63,200,211,49,72,77,208
com/begal/appclone/classes/Configuration.java, line(s) 22,44,63,67,70,77,87,97,36,58,81,91,101
com/begal/appclone/classes/ConfirmExit.java, line(s) 14
com/begal/appclone/classes/CrashHandler.java, line(s) 71,80,94,26,60,82,98
com/begal/appclone/classes/DefaultFontProvider.java, line(s) 32
com/begal/appclone/classes/DefaultProvider.java, line(s) 42,78,83,91,95,111,57,70,102,117,175,182
com/begal/appclone/classes/DisableCameras.java, line(s) 24,45,62,80,100,106,126,140,28,57,75,93,121,133
com/begal/appclone/classes/DisableClipboardAccess.java, line(s) 59,95,99,103,110,117,123,129,146,150,154,158,162,166,175,187,192,203,207,211,218,225,231,237,254,258,262,266,270,274,283,295,300,309,339,348,354,359,363,380,397,73,137,245,302,341,366,383,399
com/begal/appclone/classes/FacebookLoginBehavior.java, line(s) 14,34
com/begal/appclone/classes/FacebookMessengerProvider.java, line(s) 36,38
com/begal/appclone/classes/FakeCalculator.java, line(s) 14,22,29,32
com/begal/appclone/classes/GmailSupport.java, line(s) 37,40,52,102,115,127,132,151,169,185,187,197,199,215,222,229,42,106,110,137,145,162,224
com/begal/appclone/classes/HeadphonesEventReceiver.java, line(s) 13,25,32,19,45
com/begal/appclone/classes/HostsBlocker.java, line(s) 83,111,119,133,155,158,169,222,249,257,265,270,305,316,325,334,345,358,426,103,121,281,297,348,441
com/begal/appclone/classes/InterruptionFilterControls.java, line(s) 21,22,37,47,48,57,62,64
com/begal/appclone/classes/LaunchTileService.java, line(s) 16,21,28
com/begal/appclone/classes/LogcatViewer.java, line(s) 49,308,63,147
com/begal/appclone/classes/NotificationOptions.java, line(s) 160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,206,211,216,218,237,249,260,265,289,294,302,338,339,344,360,364,369,374,378,382,386,390,394,407,417,422,426,431,437,445,449,454,457,460,463,466,544,547,616,630,658,731,783,800,807,834,111,310,411,439,571,618,632,660,680,687,714,722,733,737,766,1034,1068,1076,1129,1149
com/begal/appclone/classes/OnAppExitListener.java, line(s) 19,26
com/begal/appclone/classes/OpenLinksWith.java, line(s) 27,43,51
com/begal/appclone/classes/PasswordActivity.java, line(s) 73,271,281,286,81,114,159,178,216,232,254,259,275,341,347,362,373
com/begal/appclone/classes/PasswordProvider.java, line(s) 12,14,21,24
com/begal/appclone/classes/PenEventReceiver.java, line(s) 12,17,35
com/begal/appclone/classes/PersistentApp.java, line(s) 13,21
com/begal/appclone/classes/PersistentAppService.java, line(s) 18
com/begal/appclone/classes/PictureInPicture.java, line(s) 28,34,40,52,63,73,83,65,88
com/begal/appclone/classes/PowerEventReceiver.java, line(s) 12,16,19,23,27,30,40
com/begal/appclone/classes/PreferenceEditor.java, line(s) 25,27,30,40,57,65
com/begal/appclone/classes/PressBackAgainToExit.java, line(s) 17,32,54
com/begal/appclone/classes/SecretDialerCodeReceiver.java, line(s) 15,25
com/begal/appclone/classes/SetBrightnessOnStart.java, line(s) 22,23,38,46,88,58,67,82,98,104
com/begal/appclone/classes/ShowOnLockScreen.java, line(s) 14,25
com/begal/appclone/classes/Signatures.java, line(s) 36,55,58,94,98,109,113,145,82,88,140,149,152,169,179,202,215
com/begal/appclone/classes/StartExitAppEventReceiver.java, line(s) 19,39,48,61,34,56,66
com/begal/appclone/classes/ToastFilter.java, line(s) 25,29,55,61,89,81,91
com/begal/appclone/classes/TrustAllCertificatesProvider.java, line(s) 37,39
com/begal/appclone/classes/Utils.java, line(s) 68,75,87,90,519,105,109,124,164,174,184,195,216,226,240,322,441,482,524,537,574,609
com/begal/appclone/classes/WhatsAppSupport.java, line(s) 30,59,72,45,62,66,85
com/begal/appclone/classes/WifiControls.java, line(s) 18,19,37,40,45,52,58,61,43,64
com/begal/appclone/classes/freeform/FreeFormWindow.java, line(s) 35,39,44,59
com/begal/appclone/classes/freeform/FreeFormWindowActivity.java, line(s) 37,53,56,76,96,59,89
com/begal/appclone/classes/service/RemoteService.java, line(s) 20
com/begal/appclone/classes/util/IActivityManagerHook.java, line(s) 19
com/begal/appclone/classes/util/IPackageManagerHook.java, line(s) 20
com/github/amlcurran/showcaseview/ShowcaseAreaCalculator.java, line(s) 19
com/github/amlcurran/showcaseview/targets/ActionBarViewWrapper.java, line(s) 34,37,48,51,83
com/github/ybq/android/spinkit/animation/SpriteAnimatorBuilder.java, line(s) 146
com/h6ah4i/android/widget/advrecyclerview/animator/GeneralItemAnimator.java, line(s) 42,50,58,69,135
com/h6ah4i/android/widget/advrecyclerview/animator/impl/ItemAddAnimationManager.java, line(s) 29,37
com/h6ah4i/android/widget/advrecyclerview/animator/impl/ItemChangeAnimationManager.java, line(s) 23,31
com/h6ah4i/android/widget/advrecyclerview/animator/impl/ItemMoveAnimationManager.java, line(s) 29,37
com/h6ah4i/android/widget/advrecyclerview/animator/impl/ItemRemoveAnimationManager.java, line(s) 29,37
com/h6ah4i/android/widget/advrecyclerview/draggable/DraggableItemWrapperAdapter.java, line(s) 69
com/h6ah4i/android/widget/advrecyclerview/draggable/RecyclerViewDragDropManager.java, line(s) 1452
com/hippo/beerbelly/BeerBelly.java, line(s) 51
com/hippo/beerbelly/DiskLruCache.java, line(s) 108
com/hippo/beerbelly/SimpleDiskCache.java, line(s) 72,95,102
com/hippo/conaco/Conaco.java, line(s) 87,88,121
com/hippo/conaco/ConacoTask.java, line(s) 156,176
com/hippo/drawable/BitmapPool.java, line(s) 39
com/hippo/drawable/UnikeryDrawable.java, line(s) 116
com/hippo/ehviewer/EhDB.java, line(s) 211,269,305
com/hippo/ehviewer/Settings.java, line(s) 275,288,301,314,327,340
com/hippo/ehviewer/client/EhEngine.java, line(s) 137,220,283,319,358,405,446,490,524,578,637,672,706,740,774,818,866,910,941,986,1040,1048,1088,1131,1166,1198,1233,1297,1341
com/hippo/ehviewer/client/EhFilter.java, line(s) 47,84,104
com/hippo/ehviewer/client/EhUrlOpener.java, line(s) 46
com/hippo/ehviewer/client/data/FavListUrlBuilder.java, line(s) 111
com/hippo/ehviewer/client/parser/EhHomeParser.java, line(s) 25
com/hippo/ehviewer/client/parser/GalleryListParser.java, line(s) 272,301
com/hippo/ehviewer/client/parser/ProfileParser.java, line(s) 34
com/hippo/ehviewer/client/wifi/ConnectThread.java, line(s) 43,110,113
com/hippo/ehviewer/client/wifi/ListenerThread.java, line(s) 35,53,60
com/hippo/ehviewer/dao/DaoMaster.java, line(s) 84,100
com/hippo/ehviewer/download/DownloadManager.java, line(s) 360,374,600,333,486,513,643,717,722,729,972,990,1010,1034
com/hippo/ehviewer/download/DownloadService.java, line(s) 413,426
com/hippo/ehviewer/gallery/DirGalleryProvider.java, line(s) 212,262
com/hippo/ehviewer/spider/SpiderInfo.java, line(s) 140
com/hippo/ehviewer/spider/SpiderQueen.java, line(s) 721,497,1183,1547,1568,1594,1671,1214
com/hippo/ehviewer/sync/GalleryDetailTagsSyncTask.java, line(s) 34
com/hippo/ehviewer/ui/dialog/ArchiverDownloadDialog.java, line(s) 275,249,251,253,256,258
com/hippo/ehviewer/ui/scene/FavoritesScene.java, line(s) 703
com/hippo/ehviewer/ui/scene/GalleryCommentsScene.java, line(s) 258,750
com/hippo/ehviewer/ui/scene/SolidScene.java, line(s) 43
com/hippo/ehviewer/ui/scene/ThumbSpanHelper.java, line(s) 73,123,142,143,148,149,160,161,166,167,202,203,208,209
com/hippo/ehviewer/ui/scene/download/DownloadsScene.java, line(s) 257
com/hippo/ehviewer/ui/scene/gallery/list/GalleryListScene.java, line(s) 1253
com/hippo/ehviewer/ui/wifi/WiFiClientActivity.java, line(s) 151
com/hippo/ehviewer/ui/wifi/WiFiServerActivity.java, line(s) 371,379,107,354
com/hippo/ehviewer/widget/ImageSearchLayout.java, line(s) 154
com/hippo/ehviewer/widget/SearchDatabase.java, line(s) 94
com/hippo/glview/glrenderer/BasicTexture.java, line(s) 65
com/hippo/glview/glrenderer/GLES11Canvas.java, line(s) 767
com/hippo/glview/glrenderer/GLES20Canvas.java, line(s) 697,201,202,828,841
com/hippo/glview/glrenderer/NativeTexture.java, line(s) 26
com/hippo/glview/glrenderer/RawTexture.java, line(s) 51
com/hippo/glview/image/ImageWrapper.java, line(s) 25
com/hippo/glview/view/GLRootView.java, line(s) 310,633,82,100,288,122
com/hippo/glview/view/GLView.java, line(s) 834
com/hippo/lib/glgallery/PagerLayoutManager.java, line(s) 309,315
com/hippo/lib/glgallery/ScrollLayoutManager.java, line(s) 410,414,699,751,758,799,806
com/hippo/network/CookieDatabase.java, line(s) 138,143,149,157,166,171
com/hippo/network/EhSSLSocketFactory.java, line(s) 39,86,88
com/hippo/network/EhSSLSocketFactoryLowSDK.java, line(s) 40
com/hippo/preference/ActivityPreference.java, line(s) 39
com/hippo/refreshlayout/RefreshLayout.java, line(s) 631,672,677,739,795,853,878
com/hippo/ripple/Ripple.java, line(s) 33,46
com/hippo/scene/StageActivity.java, line(s) 96,213,222,280,331,397,402,455,459,406
com/hippo/tuxiang/DefaultContextFactory.java, line(s) 32
com/hippo/tuxiang/DefaultWindowSurfaceFactory.java, line(s) 15
com/hippo/tuxiang/EglHelper.java, line(s) 74,190,153
com/hippo/tuxiang/GLThread.java, line(s) 208
com/hippo/unifile/DocumentsContractApi19.java, line(s) 84
com/hippo/unifile/DocumentsContractApi21.java, line(s) 25,76
com/hippo/unifile/RawFile.java, line(s) 47,249
com/hippo/unifile/TreeDocumentFile.java, line(s) 39
com/hippo/unifile/UriRandomAccessFile.java, line(s) 29,36,38
com/hippo/util/DownloadUtil.java, line(s) 162
com/hippo/util/PackageUtils.java, line(s) 19,23,45
com/hippo/widget/AvatarImageView.java, line(s) 322
com/hippo/widget/ContentLayout.java, line(s) 261,484
com/hippo/widget/LoadImageView.java, line(s) 288
com/hippo/widget/LoadImageViewNew.java, line(s) 292
com/microsoft/appcenter/AbstractAppCenterService.java, line(s) 108,200,137,155,215
com/microsoft/appcenter/AppCenter.java, line(s) 464,554,187,192,210,280,285,290,305,313,407,478,488,500,534,543,620,240,244,257,265,363,448,451,568,583,586,603,684,696,700,709,158,229,317,609,340,369,495,530
com/microsoft/appcenter/Constants.java, line(s) 30
com/microsoft/appcenter/Flags.java, line(s) 23
com/microsoft/appcenter/ServiceInstrumentationUtils.java, line(s) 27
com/microsoft/appcenter/UncaughtExceptionHandler.java, line(s) 30,36,39
com/microsoft/appcenter/analytics/Analytics.java, line(s) 219,233,400,409,214,227,385,427,437,508,512,393,394,432,434,440,441,442
com/microsoft/appcenter/analytics/AnalyticsTransmissionTarget.java, line(s) 44,48,52,55,163
com/microsoft/appcenter/analytics/AuthenticationProvider.java, line(s) 54,67,71,73,75
com/microsoft/appcenter/analytics/EventProperties.java, line(s) 45,78,92,84
com/microsoft/appcenter/analytics/channel/AnalyticsValidator.java, line(s) 50,56,74,78,80,83,87,109,114,118,130,133
com/microsoft/appcenter/analytics/channel/SessionTracker.java, line(s) 71,80,91,96,99,109,62,68,78
com/microsoft/appcenter/analytics/ingestion/models/EventLog.java, line(s) 63,63
com/microsoft/appcenter/analytics/ingestion/models/json/EventLogFactory.java, line(s) 29
com/microsoft/appcenter/channel/DefaultChannel.java, line(s) 104,121,139,142,160,165,216,292,297,300,309,441,445,453,457,461,473,504,509,252,378,401,422,464,405
com/microsoft/appcenter/channel/OneCollectorChannelListener.java, line(s) 85,80
com/microsoft/appcenter/distribute/BrowserUtils.java, line(s) 42,55,61,64,69,33,22
com/microsoft/appcenter/distribute/DeepLinkActivity.java, line(s) 19,22,23,26,29,32,43
com/microsoft/appcenter/distribute/Distribute.java, line(s) 202,238,274,406,420,450,482,491,543,569,573,582,586,595,607,680,692,696,707,710,721,724,729,765,770,776,779,789,809,815,821,829,838,857,871,948,982,1041,1075,1082,1180,1197,181,286,292,305,309,312,331,333,672,684,914,932,361,390,396,410,413,623,678,737,1030,1167,487,668,576,589,611,944,1009,1021,1090
com/microsoft/appcenter/distribute/DistributeUtils.java, line(s) 79,95,108,88
com/microsoft/appcenter/distribute/DownloadManagerReceiver.java, line(s) 13
com/microsoft/appcenter/distribute/InstallerUtils.java, line(s) 36
com/microsoft/appcenter/distribute/ReleaseDownloadListener.java, line(s) 26,59,37
com/microsoft/appcenter/distribute/ResumeFromBackgroundTask.java, line(s) 21,24
com/microsoft/appcenter/distribute/UpdateInstaller.java, line(s) 45
com/microsoft/appcenter/distribute/UpdateReceiver.java, line(s) 22,15
com/microsoft/appcenter/distribute/download/manager/DownloadManagerReleaseDownloader.java, line(s) 94,108,164,178,194
com/microsoft/appcenter/distribute/download/manager/DownloadManagerRequestTask.java, line(s) 23
com/microsoft/appcenter/distribute/ingestion/DistributeIngestion.java, line(s) 34,40
com/microsoft/appcenter/distribute/install/AbstractReleaseInstaller.java, line(s) 43,33,38
com/microsoft/appcenter/distribute/install/ReleaseInstallerActivity.java, line(s) 27,67,53
com/microsoft/appcenter/distribute/install/session/InstallStatusReceiver.java, line(s) 54,36,45,68
com/microsoft/appcenter/distribute/install/session/PackageInstallerListener.java, line(s) 24,29,35
com/microsoft/appcenter/distribute/install/session/SessionReleaseInstaller.java, line(s) 180,194,222,74,214,231
com/microsoft/appcenter/http/AbstractAppCallTemplate.java, line(s) 14,20
com/microsoft/appcenter/http/DefaultHttpClient.java, line(s) 78
com/microsoft/appcenter/http/DefaultHttpClientCallTask.java, line(s) 133,162,165
com/microsoft/appcenter/http/HttpClientNetworkStateHandler.java, line(s) 31,53
com/microsoft/appcenter/http/HttpClientRetryer.java, line(s) 62
com/microsoft/appcenter/ingestion/OneCollectorIngestion.java, line(s) 70,111,121
com/microsoft/appcenter/ingestion/models/AbstractLog.java, line(s) 150,150,158,158,146,146
com/microsoft/appcenter/ingestion/models/one/CommonSchemaDataUtils.java, line(s) 48,63,69,77,82
com/microsoft/appcenter/ingestion/models/one/CommonSchemaLog.java, line(s) 175,171,171,163,163,159,159,147,147
com/microsoft/appcenter/persistence/DatabasePersistence.java, line(s) 106,134,136,142,172,173,178,187,196,230,281,315,319,320,327,337,221,253,264,271,296,359,312
com/microsoft/appcenter/utils/AppCenterLog.java, line(s) 53,64,119,130,75,86,31,42,97,108
com/microsoft/appcenter/utils/AsyncTaskUtils.java, line(s) 15
com/microsoft/appcenter/utils/DeviceInfoHelper.java, line(s) 123,26,53,69,120
com/microsoft/appcenter/utils/IdHelper.java, line(s) 11
com/microsoft/appcenter/utils/NetworkStateHelper.java, line(s) 89,96,104,65
com/microsoft/appcenter/utils/context/SessionContext.java, line(s) 35,31
com/microsoft/appcenter/utils/context/UserIdContext.java, line(s) 44,51,55,66
com/microsoft/appcenter/utils/crypto/CryptoUtils.java, line(s) 199,202,234,238,241,145,153,170,246,259,269
com/microsoft/appcenter/utils/storage/DatabaseManager.java, line(s) 111,121,94,108,149,158,167,175,222,232,241,199,226,229,197,201
com/microsoft/appcenter/utils/storage/FileManager.java, line(s) 56,72
java/io/ByteArrayOutputStrean.java, line(s) 13,17,18,35,20
org/ccil/cowan/tagsoup/CommandLine.java, line(s) 61,79,86,93,94,99,102,104,106,109,233,234
org/ccil/cowan/tagsoup/jaxp/JAXPTest.java, line(s) 15,21,22,24,25
org/greenrobot/eventbus/Logger.java, line(s) 81,86
org/greenrobot/eventbus/util/ErrorDialogConfig.java, line(s) 34
org/greenrobot/eventbus/util/ErrorDialogManager.java, line(s) 184
org/greenrobot/eventbus/util/ExceptionToResourceMapping.java, line(s) 25
org/greenrobot/greendao/AbstractDao.java, line(s) 322,274,674
org/greenrobot/greendao/DaoException.java, line(s) 28,29
org/greenrobot/greendao/DaoLog.java, line(s) 35,39,67,15,43,47,27,31,51,55,59,63
org/greenrobot/greendao/DbUtils.java, line(s) 87,29
org/greenrobot/greendao/async/AsyncOperationExecutor.java, line(s) 170,180,192,129
org/greenrobot/greendao/internal/LongHashMap.java, line(s) 132
org/greenrobot/greendao/query/QueryBuilder.java, line(s) 244,247
org/greenrobot/greendao/test/AbstractDaoTest.java, line(s) 55,57,47
org/greenrobot/greendao/test/AbstractDaoTestLongPk.java, line(s) 32,35
org/greenrobot/greendao/test/DbTest.java, line(s) 85

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/begal/appclone/classes/DisableClipboardAccess.java, line(s) 9,71,360
com/hippo/ehviewer/preference/IdentityCookiePreference.java, line(s) 4,111
com/hippo/ehviewer/ui/fragment/AboutFragment.java, line(s) 4,149
com/hippo/ehviewer/ui/scene/GalleryCommentsScene.java, line(s) 5,337
com/hippo/ehviewer/ui/scene/GalleryInfoScene.java, line(s) 4,166
com/hippo/ehviewer/ui/scene/gallery/detail/GalleryDetailScene.java, line(s) 5,1489
com/hippo/ehviewer/ui/scene/gallery/list/GalleryListSecenDialog.java, line(s) 4,98
com/hippo/ehviewer/util/ClipboardUtil.java, line(s) 4,40,48,84
com/hippo/util/AppHelper.java, line(s) 6,81

信息 此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改

此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/begal/appclone/classes/DisableClipboardAccess.java, line(s) 46,118,118,124,124,133,226,226,232,232,241,9

信息 此应用程序使用SQL Cipher,确保密钥没有硬编码在代码中

此应用程序使用SQL Cipher,确保密钥没有硬编码在代码中


Files:
com/microsoft/appcenter/utils/storage/DatabaseManager.java, line(s) 195,203

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/hippo/ehviewer/EhApplication.java, line(s) 311,329,372,390,310,309,309,327,327,370,370,388,388

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (firebase-settings.crashlytics.com) 通信。

{'ip': '180.163.150.33', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (app-measurement.com) 通信。

{'ip': '180.163.150.33', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (pagead2.googlesyndication.com) 通信。

{'ip': '180.163.151.166', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

安全评分: ( EhViewer 1.9.8.0)