安全分析报告： Barber Chop v5.4.63

安全分数


安全分数 45/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

8

用户/设备跟踪器


调研结果

高危 3
中危 14
信息 1
安全 1
关注 0

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
com/applovin/impl/adview/b.java, line(s) 549,13
com/applovin/impl/sdk/e/t.java, line(s) 112,4
com/unity3d/services/core/webview/WebViewApp.java, line(s) 163,9,55,61,73,102

高危 启用了调试配置。生产版本不能是可调试的 

启用了调试配置。生产版本不能是可调试的
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/unity/purchasing/BuildConfig.java, line(s) 3,5

高危 应用程序包含隐私跟踪程序 

此应用程序有多个8隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 应用程序数据存在被泄露的风险 

未设置[android:allowBackup]标志
这个标志 [android:allowBackup]应该设置为false。默认情况下它被设置为true，允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Service (com.google.android.play.core.assetpacks.AssetPackExtractionService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/applovin/impl/sdk/utils/StringUtils.java, line(s) 34
com/applovin/impl/sdk/utils/r.java, line(s) 157
com/unity3d/services/core/device/Device.java, line(s) 164

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/applovin/impl/mediation/b/a/a.java, line(s) 35
com/applovin/impl/sdk/o.java, line(s) 1490
com/applovin/mediation/AppLovinUtils.java, line(s) 21
com/applovin/mediation/ads/MaxAdView.java, line(s) 178,168
com/applovin/mediation/ads/MaxAppOpenAd.java, line(s) 63,53
com/applovin/mediation/ads/MaxInterstitialAd.java, line(s) 87,77
com/applovin/mediation/ads/MaxRewardedAd.java, line(s) 114,104
com/applovin/mediation/ads/MaxRewardedInterstitialAd.java, line(s) 82,72
com/applovin/mediation/nativeAds/MaxNativeAdLoader.java, line(s) 99,94
com/applovin/sdk/AppLovinSdk.java, line(s) 250
com/applovin/sdk/AppLovinSdkSettings.java, line(s) 147
com/applovin/sdk/AppLovinWebViewActivity.java, line(s) 24
com/bykv/vk/openvk/component/video/a/b/i.java, line(s) 117
com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 13
com/unity3d/services/ads/gmascar/utils/ScarConstants.java, line(s) 4,5,6,8,9
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 7,8
com/unity3d/services/core/device/reader/DeviceInfoReaderFilterProvider.java, line(s) 11,12
com/unity3d/services/core/device/reader/JsonStorageKeyNames.java, line(s) 4,6,7,8,10,11,12,13,9,14,5,15,16,17
com/unity3d/services/core/properties/SdkProperties.java, line(s) 28
com/vungle/mediation/VungleExtrasBuilder.java, line(s) 16
com/vungle/warren/log/LogManager.java, line(s) 24,25,26,27
com/vungle/warren/log/LogSender.java, line(s) 22,23
com/vungle/warren/model/Cookie.java, line(s) 22,23

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/apm/insight/e/b/a.java, line(s) 4,33
com/apm/insight/e/b/b.java, line(s) 4,44,45,38
com/bykv/vk/openvk/component/video/a/b/b/d.java, line(s) 4,5,14,20,21,23,25
com/bykv/vk/openvk/preload/geckox/a/b.java, line(s) 6,7,123
com/vungle/warren/persistence/DatabaseHelper.java, line(s) 9,10,134
com/vungle/warren/persistence/Repository.java, line(s) 7,137

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/apm/insight/l/v.java, line(s) 68
com/bykv/vk/openvk/component/video/api/f/b.java, line(s) 48
com/bykv/vk/openvk/preload/geckox/utils/g.java, line(s) 35

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/apm/insight/entity/d.java, line(s) 19
com/apm/insight/l/w.java, line(s) 38,88,99
com/apm/insight/nativecrash/c.java, line(s) 664
com/pgl/ssdk/ces/d.java, line(s) 132
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 56
com/vungle/warren/VungleApiClient.java, line(s) 416
com/vungle/warren/persistence/CacheManager.java, line(s) 122,124
com/vungle/warren/persistence/Repository.java, line(s) 84,85
com/vungle/warren/utility/platform/AndroidPlatform.java, line(s) 135
com/yasirkula/unity/NativeGalleryUtils.java, line(s) 126

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/apm/insight/i.java, line(s) 8
com/applovin/exoplayer2/h/z.java, line(s) 4
com/applovin/impl/c/m.java, line(s) 18
com/unity3d/services/core/request/metrics/SDKMetrics.java, line(s) 9

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 538,522
com/unity3d/services/core/webview/WebView.java, line(s) 134,98

中危 IP地址泄露 

IP地址泄露


Files:
com/applovin/mediation/BuildConfig.java, line(s) 4
com/applovin/mediation/adapters/NimbusMediationAdapter.java, line(s) 30
com/vungle/mediation/BuildConfig.java, line(s) 4

中危 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
com/unity3d/services/core/webview/WebView.java, line(s) 85,98
com/vungle/warren/ui/view/WebSettingsUtils.java, line(s) 14,10

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
AdMob广告平台的=> "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-2722872648148440~5290671116"
cca47107bfcbdb211d88f3385aeede40
HSrCHRtOan6wp2kwOIGJC1RDtuSrF2mWVbio2aBcMHX9KF3iTJ1lLSzCKP1ZSo5yNolPNw1kCTtWpxELFF4ah1

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
backtrace/io/backtrace_unity_android_plugin/BacktraceANRWatchdog.java, line(s) 20,41,48,52,68,72,79
backtrace/io/backtrace_unity_android_plugin/BacktraceAndroidBackgroundUnhandledExceptionHandler.java, line(s) 19,40,45,47,54,63,66,70
backtrace/io/backtrace_unity_android_plugin/BacktraceCrashHelper.java, line(s) 10,14,28,33,37,43
bitter/jnibridge/JNIBridge.java, line(s) 39
com/apm/insight/b/j.java, line(s) 50
com/apm/insight/h/a.java, line(s) 48
com/apm/insight/k/k.java, line(s) 81
com/apm/insight/l/q.java, line(s) 44,26,32,38,8,20,14,50
com/apm/insight/runtime/o.java, line(s) 48
com/applovin/exoplayer2/l/q.java, line(s) 26,66,36,56
com/applovin/impl/sdk/a/f.java, line(s) 70,76,82
com/applovin/impl/sdk/utils/n.java, line(s) 9
com/applovin/impl/sdk/y.java, line(s) 35,68,109,53,113,72,117,76,105
com/bykv/vk/openvk/component/video/a/b/d.java, line(s) 129,306,312,107,161,171,200,224,241,288,325,332,352,358,363,436
com/bykv/vk/openvk/component/video/a/b/e.java, line(s) 48,56
com/bykv/vk/openvk/component/video/a/b/f.java, line(s) 101,159,171,235
com/bykv/vk/openvk/component/video/a/b/g.java, line(s) 131,164,202,258,266,271,285,290,366,382,389,429,433,210,300,342,376,283,315
com/bykv/vk/openvk/component/video/a/c/a.java, line(s) 193,199,206,213,219,227,301,308,146,159,184,241,257
com/bykv/vk/openvk/component/video/api/f/c.java, line(s) 43,50,92,99,74,81,57
com/bykv/vk/openvk/preload/falconx/a/a.java, line(s) 33
com/bykv/vk/openvk/preload/geckox/h/a.java, line(s) 17,20,28,11
com/iab/omid/library/applovin/utils/d.java, line(s) 18,11
com/iab/omid/library/bytedance2/d/c.java, line(s) 18,11
com/iab/omid/library/vungle/d/c.java, line(s) 18,11
com/pgl/ssdk/ces/c.java, line(s) 22
com/unity3d/ads/UnityAdsBaseOptions.java, line(s) 22
com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 27,40,54
com/unity3d/ads/metadata/MetaData.java, line(s) 39,54
com/unity3d/services/UnityServices.java, line(s) 86,136,143,148,156,162,171,180,168,177,118
com/unity3d/services/ads/UnityAdsImplementation.java, line(s) 109,81
com/unity3d/services/ads/adunit/AdUnitActivityController.java, line(s) 359,361,52,128,186,219,260,290,310,377,224
com/unity3d/services/ads/adunit/AdUnitViewHandlerFactory.java, line(s) 22
com/unity3d/services/ads/adunit/VideoPlayerHandler.java, line(s) 17,35
com/unity3d/services/ads/api/AdUnit.java, line(s) 202,208,257,260,264,267,324,327,330,333,360,110,132,155,162,338,351,363,367,407,498
com/unity3d/services/ads/api/VideoPlayer.java, line(s) 60,78,101,119,170,181
com/unity3d/services/ads/api/WebPlayer.java, line(s) 53
com/unity3d/services/ads/gmascar/adapters/ScarAdapterFactory.java, line(s) 46
com/unity3d/services/ads/gmascar/bridges/AdapterStatusBridge.java, line(s) 21,39
com/unity3d/services/ads/gmascar/bridges/InitializeListenerBridge.java, line(s) 21,40
com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridge.java, line(s) 20
com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridgeLegacy.java, line(s) 22
com/unity3d/services/ads/gmascar/finder/GMAInitializer.java, line(s) 53
com/unity3d/services/ads/gmascar/finder/ScarVersionFinder.java, line(s) 37,49
com/unity3d/services/ads/token/InMemoryAsyncTokenStorage.java, line(s) 145,179
com/unity3d/services/ads/token/NativeTokenGenerator.java, line(s) 41
com/unity3d/services/ads/video/VideoPlayerView.java, line(s) 55,58,82,125,130,152,195,207,241
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 65,75,399,401,418,514,557,616,631,646,659
com/unity3d/services/banners/BannerView.java, line(s) 133
com/unity3d/services/banners/UnityBanners.java, line(s) 335
com/unity3d/services/core/api/Cache.java, line(s) 160,174,53,126,179
com/unity3d/services/core/api/DeviceInfo.java, line(s) 138,154,178,316,337,349,405
com/unity3d/services/core/api/Intent.java, line(s) 50,64,210,234,249
com/unity3d/services/core/api/Request.java, line(s) 33,45,96,108,126,138
com/unity3d/services/core/api/Sdk.java, line(s) 17,38,54,80,86,92,98
com/unity3d/services/core/broadcast/BroadcastEventReceiver.java, line(s) 36
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 25,27,67,71,81,106,110,116,123,30,60,76
com/unity3d/services/core/cache/CacheThread.java, line(s) 76
com/unity3d/services/core/cache/CacheThreadHandler.java, line(s) 40,43,46,70
com/unity3d/services/core/configuration/ConfigurationReader.java, line(s) 25
com/unity3d/services/core/configuration/ConfigurationRequestFactory.java, line(s) 39
com/unity3d/services/core/configuration/EnvironmentCheck.java, line(s) 32,45,35,48,51,54,57
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 24
com/unity3d/services/core/configuration/ExperimentsReader.java, line(s) 25
com/unity3d/services/core/configuration/InitializationNotificationCenter.java, line(s) 47
com/unity3d/services/core/configuration/InitializeEventsMetricSender.java, line(s) 42,52,60,70,165,172
com/unity3d/services/core/configuration/InitializeThread.java, line(s) 279,315,441,456,500,508,608,620,646,705,126,288,291,322,325,369,389,557,594,709,860,869,197,351,450,534
com/unity3d/services/core/configuration/PrivacyConfigurationLoader.java, line(s) 63
com/unity3d/services/core/connectivity/ConnectivityMonitor.java, line(s) 57,85,95,77,125
com/unity3d/services/core/device/AdvertisingId.java, line(s) 125,143,153
com/unity3d/services/core/device/Device.java, line(s) 166,473,522,531,286
com/unity3d/services/core/device/OpenAdvertisingId.java, line(s) 127,149,156
com/unity3d/services/core/device/Storage.java, line(s) 47,51,58
com/unity3d/services/core/device/reader/DeviceInfoReaderCompressor.java, line(s) 20,33
com/unity3d/services/core/device/reader/DeviceInfoReaderExtended.java, line(s) 45
com/unity3d/services/core/domain/task/InitializeStateConfig$doWork$2.java, line(s) 45
com/unity3d/services/core/domain/task/InitializeStateCreate$doWork$2.java, line(s) 43,52,56
com/unity3d/services/core/domain/task/InitializeStateCreateWithRemote$doWork$2.java, line(s) 43,51,55
com/unity3d/services/core/domain/task/InitializeStateError$doWork$2.java, line(s) 42
com/unity3d/services/core/domain/task/InitializeStateLoadCache$doWork$2.java, line(s) 46,60
com/unity3d/services/core/domain/task/InitializeStateLoadCache.java, line(s) 144
com/unity3d/services/core/domain/task/InitializeStateNetworkError$doWork$2.java, line(s) 44
com/unity3d/services/core/domain/task/InitializeStateNetworkError.java, line(s) 101,118
com/unity3d/services/core/log/DeviceLog.java, line(s) 68,212,219
com/unity3d/services/core/misc/JsonFlattener.java, line(s) 43
com/unity3d/services/core/misc/JsonStorage.java, line(s) 151,26,32,51,72,84,96,160,166
com/unity3d/services/core/misc/JsonStorageAggregator.java, line(s) 34
com/unity3d/services/core/misc/Utilities.java, line(s) 39,57,173
com/unity3d/services/core/misc/ViewUtilities.java, line(s) 26,35
com/unity3d/services/core/preferences/AndroidPreferences.java, line(s) 14,26,38,50,62
com/unity3d/services/core/properties/ClientProperties.java, line(s) 39,70,82,84
com/unity3d/services/core/properties/SdkProperties.java, line(s) 231,233,100
com/unity3d/services/core/reflection/GenericBridge.java, line(s) 32,47,56,62,70,76,84,91
com/unity3d/services/core/request/WebRequest.java, line(s) 83,176,182
com/unity3d/services/core/request/WebRequestRunnable.java, line(s) 91,76,95
com/unity3d/services/core/request/WebRequestThread.java, line(s) 63,126,140
com/unity3d/services/core/request/metrics/MetricCommonTags.java, line(s) 72
com/unity3d/services/core/request/metrics/MetricSender$sendMetrics$$inlined$CoroutineExceptionHandler$1.java, line(s) 20
com/unity3d/services/core/request/metrics/MetricSender$sendMetrics$1.java, line(s) 78,80
com/unity3d/services/core/request/metrics/MetricSender.java, line(s) 72,88,93
com/unity3d/services/core/request/metrics/MetricSenderWithBatch.java, line(s) 43
com/unity3d/services/core/request/metrics/SDKMetrics.java, line(s) 37,51,61,85,96
com/unity3d/services/core/sensorinfo/SensorInfoListener.java, line(s) 28
com/unity3d/services/core/timer/BaseTimer.java, line(s) 81
com/unity3d/services/core/webview/WebView.java, line(s) 183
com/unity3d/services/core/webview/WebViewApp.java, line(s) 57,103,215,260,304,354,64,66,68,86,150,166,194,296,326,367
com/unity3d/services/core/webview/WebViewUrlBuilder.java, line(s) 28
com/unity3d/services/core/webview/bridge/Invocation.java, line(s) 79
com/unity3d/services/core/webview/bridge/NativeCallback.java, line(s) 45
com/unity3d/services/core/webview/bridge/WebViewBridge.java, line(s) 91
com/unity3d/services/core/webview/bridge/WebViewBridgeInterface.java, line(s) 58,65
com/unity3d/services/core/webview/bridge/WebViewCallback.java, line(s) 47
com/unity3d/services/store/core/StoreLifecycleListener.java, line(s) 43
com/unity3d/services/store/gpbl/bridges/CommonJsonResponseBridge.java, line(s) 38
com/unity3d/services/store/gpbl/bridges/PurchaseBridge.java, line(s) 37
com/vungle/mediation/VungleBannerAdapter.java, line(s) 83,92,108,121,142,165,200,50,54,171,174,291
com/vungle/mediation/VungleInterstitialAdapter.java, line(s) 61,66,75,83,107,128,130,46,97,110,117,124,140,153,163,222
com/vungle/mediation/VungleManager.java, line(s) 59,126,135,139,143,149,153,80,75,97,100,61,67
com/vungle/warren/AdActivity.java, line(s) 137,139,213,229,245
com/vungle/warren/AdEventListener.java, line(s) 140,96,108
com/vungle/warren/AdLoader.java, line(s) 377,464,548,730,775,796,878,1038,1280,114,340,444,452,712,1022,1054,781,1314,1326,774,1108
com/vungle/warren/AdvertisementPresentationFactory.java, line(s) 233,236,103,108,119,127,131,202,227,299,322,329,358,402,407,418,425
com/vungle/warren/Banners.java, line(s) 29,34,38,43,56,95,109
com/vungle/warren/CacheBustManager.java, line(s) 28
com/vungle/warren/NativeAd.java, line(s) 204,177,172,403
com/vungle/warren/NativeAdLayout.java, line(s) 99,116,133,139,146,156,164,183,189,201,252
com/vungle/warren/Plugin.java, line(s) 13,23
com/vungle/warren/SessionTracker.java, line(s) 120,124,102,222
com/vungle/warren/Vungle.java, line(s) 286,466,473,154,158,163,174,191,222,275,299,313,399,409,419,446,551,578,597,652,712,768,775,796,815,821,844,851,861
com/vungle/warren/VungleApiClient.java, line(s) 234,553,718,401,418,498,555,559,572,677,588,614,617,623
com/vungle/warren/VungleBanner.java, line(s) 38,46,63,98,119,126,137,157,178,180
com/vungle/warren/VungleJobRunner.java, line(s) 120
com/vungle/warren/VungleLogger.java, line(s) 41,60,95,104,49,71,82,123,134
com/vungle/warren/analytics/VungleAnalytics.java, line(s) 82,87,44,45,48,50,53,99
com/vungle/warren/downloader/AssetDownloader.java, line(s) 144,161,229,234,317,377,394,478,500,555,558,562,566,577,584,604,609,631,643,653,663,664,666,672,679,724,726,729,731,800,892,691,781,804,851,880
com/vungle/warren/downloader/CleverCache.java, line(s) 61,111,121,287,297,301,307,322,328,343,362,366,379
com/vungle/warren/log/BaseFilePersistor.java, line(s) 92,106
com/vungle/warren/log/LogManager.java, line(s) 109,114,122,127,140
com/vungle/warren/log/LogPersister.java, line(s) 99,85,115,43,76,103
com/vungle/warren/log/LogSender.java, line(s) 67,101
com/vungle/warren/model/Advertisement.java, line(s) 554
com/vungle/warren/network/OkHttpCall.java, line(s) 119,133
com/vungle/warren/persistence/CacheManager.java, line(s) 67
com/vungle/warren/persistence/FutureResult.java, line(s) 31,45,27,41,48
com/vungle/warren/persistence/GraphicDesigner.java, line(s) 32,86
com/vungle/warren/persistence/Repository.java, line(s) 89,97,103,239,466,472,517,527,932,935,296,331,542,964
com/vungle/warren/tasks/CacheBustJob.java, line(s) 45,98,117,127,192,61,133,145,159,186,195,198,157
com/vungle/warren/tasks/CleanupJob.java, line(s) 44,73,82,84,101,92,63
com/vungle/warren/tasks/JobInfo.java, line(s) 49
com/vungle/warren/tasks/SendReportsJob.java, line(s) 43,52
com/vungle/warren/tasks/runnable/JobRunnable.java, line(s) 39,48,50,56,41,60,62
com/vungle/warren/ui/JavascriptBridge.java, line(s) 23
com/vungle/warren/ui/presenter/LocalAdPresenter.java, line(s) 324,120
com/vungle/warren/ui/presenter/MRAIDAdPresenter.java, line(s) 297,516,575,638
com/vungle/warren/ui/presenter/NativeAdPresenter.java, line(s) 170,194,201,239,285,300,310
com/vungle/warren/ui/view/BaseAdView.java, line(s) 105,109
com/vungle/warren/ui/view/FullAdWidget.java, line(s) 464,308,417
com/vungle/warren/ui/view/LocalAdView.java, line(s) 165,109,94
com/vungle/warren/ui/view/NativeAdView.java, line(s) 118
com/vungle/warren/ui/view/VungleBannerView.java, line(s) 238,251,255
com/vungle/warren/ui/view/VungleWebClient.java, line(s) 138,240,279,171,172,182,183,193,194,242,56,201
com/vungle/warren/utility/ActivityManager.java, line(s) 103
com/vungle/warren/utility/CookieUtil.java, line(s) 28
com/vungle/warren/utility/ExternalRouter.java, line(s) 39,24,38
com/vungle/warren/utility/FileUtility.java, line(s) 159,170,178,290,69,72
com/vungle/warren/utility/ImageLoader.java, line(s) 40,42,59
com/vungle/warren/utility/ImpressionTracker.java, line(s) 116,121
com/vungle/warren/utility/NetworkProvider.java, line(s) 142,118
com/vungle/warren/utility/UnzipUtility.java, line(s) 137
com/vungle/warren/utility/VungleUrlUtility.java, line(s) 14
com/vungle/warren/utility/platform/AndroidPlatform.java, line(s) 64,77,101,103,107,90
com/yasirkula/unity/NativeGalleryMediaPickerFragment.java, line(s) 44
com/yasirkula/unity/NativeGalleryMediaPickerResultOperation.java, line(s) 44,88,137,99
com/yasirkula/unity/NativeGalleryPermissionFragment.java, line(s) 65,90
com/yasirkula/unity/NativeGalleryUtils.java, line(s) 27,190,288,295,302,306
com/yasirkula/unity/NativeShare.java, line(s) 255,261,160,232
com/yasirkula/unity/NativeShareBroadcastListener.java, line(s) 25,29,20
com/yasirkula/unity/NativeShareContentProvider.java, line(s) 169
com/yasirkula/unity/NativeShareCustomShareDialog.java, line(s) 67,151
com/yasirkula/unity/NativeShareFragment.java, line(s) 29,38
org/fmod/FMODAudioDevice.java, line(s) 68
org/fmod/a.java, line(s) 76

安全 此应用程序可能具有Root检测功能 

此应用程序可能具有Root检测功能
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/apm/insight/nativecrash/c.java, line(s) 469,469,469,469,469

安全评分: ( Barber Chop 5.4.63)