安全分析报告： SD Maid v5.6.0

Android 5.0-5.0.2, [minSdk=21]
该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

[android:exported=true]
发现 Activity-Alias与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
b2/f.java, line(s) 37
b2/q.java, line(s) 95
b2/w.java, line(s) 75
com/bugsnag/android/DeliveryHeadersKt.java, line(s) 20
com/bugsnag/android/EventFilenameInfo.java, line(s) 278
com/bugsnag/android/ExceptionHandler.java, line(s) 6
com/bugsnag/android/ImmutableConfig.java, line(s) 371
com/bugsnag/android/ManifestConfigLoader.java, line(s) 14
com/bugsnag/android/SharedPrefMigrator.java, line(s) 10,11,12,13
com/bugsnag/android/SystemBroadcastReceiver.java, line(s) 12
eu/thedarken/sdm/main/core/updates/UpdateApi.java, line(s) 22
eu/thedarken/sdm/main/core/upgrades/account/LicenseApi.java, line(s) 22,159,437
lc/b.java, line(s) 26,47,20,58,9,31,14,41,36,52
y1/f.java, line(s) 47

此应用程序可能会请求root（超级用户）权限
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
eu/thedarken/sdm/exclusions/core/a.java, line(s) 32
o5/d.java, line(s) 22,23,21,21

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/github/mikephil/charting/charts/Chart.java, line(s) 675,723
com/github/mikephil/charting/utils/FileUtils.java, line(s) 124,153
eu/thedarken/sdm/exclusions/ui/ExclusionManagerFragment.java, line(s) 391
eu/thedarken/sdm/systemcleaner/ui/filter/user/UserFilterFragment.java, line(s) 430
eu/thedarken/sdm/ui/picker/PickerActivity.java, line(s) 50,60
eu/thedarken/sdm/ui/picker/PickerFragment.java, line(s) 62,433
hb/e.java, line(s) 27,29
j9/b.java, line(s) 152
q5/m1.java, line(s) 27
t7/g.java, line(s) 373,373,373
w7/a.java, line(s) 68

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
a3/c.java, line(s) 6,183
h3/b.java, line(s) 10,105
i3/k.java, line(s) 4,26
j3/j.java, line(s) 4,33
j3/k.java, line(s) 3,34
j3/n.java, line(s) 4,27
j3/o.java, line(s) 4,5,92
j3/q.java, line(s) 4,5,205
x4/a.java, line(s) 4,5,58

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/bugsnag/android/DeliveryHeadersKt.java, line(s) 31
k8/b.java, line(s) 87

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
j7/f.java, line(s) 29

此应用程序有多个1隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

从应用程序中识别出以下机密确保这些不是机密或私人信息
"category_user" : "Pengguna"
"tag_user" : "صارف"
"tag_user" : "使用者"
"category_user" : "Bikaranîvan"
"private_storage" : "พื้นที่เก็บข้อมูลส่วนตัว"
"owner_user" : "Felhasználó"
"tag_user" : "Utente"
"owner_user" : "ഉടമസ്ഥൻ"
"owner_user" : "Pengguna"
"owner_user" : "משתמש"
"private_data_corpses_summary" : "标准专用应用程序数据。"
"owner_user" : "Naudotojas"
"owner_user" : "İstifadəçi"
"owner_user" : "प्रयोगकर्ता"
"category_user" : "Usuário"
"owner_user" : "صارف"
"category_user" : "Käyttäjä"
"owner_user" : "Používateľ"
"owner_user" : "Gebruiker"
"category_user" : "Naudotojas"
"category_user" : "Корисник"
"tag_user" : "Korisnik"
"owner_user" : "පරිශිලක"
"tag_user" : "Gebruiker"
"category_user" : "کاربر"
"owner_user" : "Përdoruesi"
"tag_user" : "පරිශිලක"
"category_user" : "Χρήστης"
"owner_user" : "Корисник"
"category_user" : "使用者"
"owner_user" : "Użytkownik"
"category_user" : "Utilisateur"
"private_storage" : "私人儲存空間"
"owner_user" : "Utente"
"tag_user" : "Uporabnik"
"tag_user" : "Utilizador"
"tag_user" : "Käyttäjä"
"category_user" : "Користувач"
"owner_user" : "Bikaranîvan"
"tag_user" : "მომხმარებელი"
"owner_user" : "Käyttäjä"
"tag_user" : "Kasutaja"
"owner_user" : "ผู้ใช้"
"category_user" : "사용자"
"tag_user" : "Paydalanıwshı"
"tag_user" : "Utilizator"
"tag_user" : "Потребител"
"private_storage" : "プライベートストレージ"
"tag_user" : "Bikaranîvan"
"category_user" : "Utilizador"
"owner_user" : "کاربر"
"tag_user" : "Benutzer"
"category_user" : "Utilizator"
"category_user" : "प्रयोगकर्ता"
"tag_user" : "User"
"category_user" : "Felhasználó"
"tag_user" : "ഉടമസ്ഥൻ"
"category_user" : "用户"
"category_user" : "Paydalanıwshı"
"owner_user" : "उपयोगकर्ता"
"tag_user" : "Användare"
"tag_user" : "Používateľ"
"tag_user" : "Pengguna"
"category_user" : "उपयोगकर्ता"
"owner_user" : "Uživatel"
"category_user" : "පරිශිලක"
"tag_user" : "Użytkownik"
"owner_user" : "Користувач"
"tag_user" : "사용자"
"category_user" : "User"
"category_user" : "Uživatel"
"tag_user" : "Bruger"
"category_user" : "Usuario"
"category_user" : "ব্যবহারকারী"
"tag_user" : "ผู้ใช้"
"private_data_corpses_summary" : "標準のプライベートアプリのデータ。"
"tag_user" : "İstifadəçi"
"tag_user" : "Utilisateur"
"tag_user" : "Корисник"
"tag_user" : "उपयोगकर्ता"
"setup_accessibilityservice_api_rationale" : "54a54909e61f19d00f32a88b8c484245d03c7eaf"
"tag_user" : "Notandi"
"tag_user" : "ユーザー"
"owner_user" : "Карыстальнік"
"category_user" : "Impitadore"
"tag_user" : "Χρήστης"
"category_user" : "Kullanıcı"
"category_user" : "Usuari"
"owner_user" : "Utilizador"
"category_user" : "ผู้ใช้"
"category_user" : "Bruger"
"tag_user" : "مستخدم"
"category_user" : "משתמש"
"tag_user" : "Uživatel"
"category_user" : "ഉടമസ്ഥൻ"
"tag_user" : "Felhasználó"
"owner_user" : "Bruker"
"owner_user" : "Impitadore"
"tag_user" : "Impitadore"
"owner_user" : "Benutzer"
"owner_user" : "Utilizator"
"category_user" : "صارف"
"category_user" : "ユーザー"
"owner_user" : "Notandi"
"tag_user" : "Usuário"
"category_user" : "Kasutaja"
"owner_user" : "Usuario"
"tag_user" : "प्रयोगकर्ता"
"owner_user" : "Bruger"
"owner_user" : "Erabiltzailea"
"owner_user" : "ユーザー"
"category_user" : "Användare"
"owner_user" : "Uporabnik"
"owner_user" : "მომხმარებელი"
"category_user" : "Bruker"
"tag_user" : "用户"
"owner_user" : "사용자"
"owner_user" : "用户"
"category_user" : "Gebruiker"
"tag_user" : "ব্যবহারকারী"
"tag_user" : "Usuari"
"tag_user" : "Користувач"
"owner_user" : "Utilisateur"
"private_data_corpses_summary" : "ข้อมูลแอปส่วนตัวแบบมาตรฐาน"
"owner_user" : "مستخدم"
"owner_user" : "Usuari"
"owner_user" : "Usuário"
"tag_user" : "Naudotojas"
"owner_user" : "Paydalanıwshı"
"owner_user" : "Korisnik"
"category_user" : "Потребител"
"category_user" : "Përdoruesi"
"owner_user" : "User"
"category_user" : "Карыстальнік"
"owner_user" : "Användare"
"category_user" : "Erabiltzailea"
"private_storage" : "私有存储"
"owner_user" : "Kullanıcı"
"tag_user" : "Usuario"
"category_user" : "Benutzer"
"category_user" : "İstifadəçi"
"tag_user" : "Пользоват."
"tag_user" : "משתמש"
"owner_user" : "使用者"
"category_user" : "Utente"
"tag_user" : "Përdoruesi"
"tag_user" : "Kullanıcı"
"tag_user" : "کاربر"
"category_user" : "مستخدم"
"owner_user" : "Потребител"
"tag_user" : "Bruker"
"owner_user" : "Kasutaja"
"category_user" : "მომხმარებელი"
"category_user" : "Uporabnik"
"category_user" : "Użytkownik"
"tag_user" : "Карыстальнік"
"category_user" : "Notandi"
"owner_user" : "Χρήστης"
"tag_user" : "Erabiltzailea"
"category_user" : "Používateľ"
"category_user" : "Пользовательские"
"category_user" : "Korisnik"
"private_data_corpses_summary" : "標準私人應用程式資料"
"owner_user" : "Пользователь"