安全分析报告： 每日兼职 v4.3.3

安全分数


安全分数 44/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

4

用户/设备跟踪器


调研结果

高危 6
中危 21
信息 3
安全 2
关注 25

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
com/bxm/sdk/ad/activity/BxmWebActivity.java, line(s) 586,22,23
com/yilan/sdk/ui/view/AdWebViewLayout.java, line(s) 63,8
com/yilan/sdk/uibase/ui/widget/VideoEnabledWebView.java, line(s) 92,11

高危 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 

不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#webview-server-certificate-verification

Files:
com/bxm/sdk/ad/activity/BxmRewardVideoAdActivity.java, line(s) 97,96
com/bxm/sdk/ad/activity/BxmWebActivity.java, line(s) 112,111
com/wannuosili/sdk/ad/video/RewardVideoActivity.java, line(s) 436,435
com/wannuosili/sdk/ad/web/X5WebViewActivity.java, line(s) 61,60
com/yilan/sdk/ui/web/WebFragment.java, line(s) 112,111
com/yilan/sdk/ylad/web/WebFragment.java, line(s) 171,170

高危 默认情况下，调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知，ECB模式很弱，因为它导致相同明文块的密文相同 

默认情况下，调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知，ECB模式很弱，因为它导致相同明文块的密文相同
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/bianxianmao/sdk/am/a.java, line(s) 27,67
com/bianxianmao/sdk/i/a.java, line(s) 28,68
com/yilan/sdk/common/util/FSDigest.java, line(s) 19

高危 SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击 

SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#android-network-apis

Files:
com/ta/a/d/f.java, line(s) 9,10,11,12,13,14,3
d/b/a/b/h/r.java, line(s) 10,11,12,3
d/d/b/t/r.java, line(s) 59,9
d/r/a/e/a/b.java, line(s) 110,18,19
j/a/a/a.java, line(s) 627,57,58,59

高危 应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文 

应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/yilan/sdk/common/util/FSDigest.java, line(s) 27
j/a/a/a.java, line(s) 447

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/fendasz/moku/planet/utils/AesUtil.java, line(s) 26,42
com/yilan/sdk/common/util/AESUtil.java, line(s) 46,57,68
i/a/a/a/a/l.java, line(s) 32

中危 应用程序已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。

中危 应用程序数据可以被备份 

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Activity (com.ishow.noah.modules.wechat.WXEntryActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity-Alias (com.adsmobile.ytflg.wxapi.WXEntryActivity) 未被保护。 

[android:exported=true]
发现 Activity-Alias与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.bytedance.embedapplog.collector.Collector) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Content Provider (com.wannuosili.sdk.ad.component.WNContentProvider) 未被保护。 

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (androidx.work.impl.background.gcm.WorkManagerGcmService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.gms.permission.BIND_NETWORK_TASK_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/bianxianmao/sdk/g/b.java, line(s) 6
com/fendasz/moku/planet/utils/thirdparty/baidu/util/DeviceId.java, line(s) 55
com/yilan/sdk/common/util/FSString.java, line(s) 29
com/yilan/sdk/common/util/YLMathUtil.java, line(s) 4
com/yilan/sdk/ui/little/YLLittleVideoPresenter.java, line(s) 40
com/yilan/sdk/uibase/ui/widget/LikeView.java, line(s) 16
d/b/a/a/i.java, line(s) 12
d/b/a/a/l.java, line(s) 21
d/b/a/b/h/k.java, line(s) 8
d/b/a/b/k/a.java, line(s) 6
d/d/b/f/a.java, line(s) 17
d/f/c/a/f/a.java, line(s) 4
j$/util/concurrent/D.java, line(s) 11
l/k/a.java, line(s) 3
l/k/b.java, line(s) 3

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
cn/bmob/v3/util/InstallUtil.java, line(s) 14,22
cn/bmob/v3/util/This.java, line(s) 112
com/arialyy/aria/util/CommonUtil.java, line(s) 234,231,238
com/arialyy/aria/util/FileUtil.java, line(s) 41,286
com/bianxianmao/sdk/ao/b.java, line(s) 54,55
com/bianxianmao/sdk/f/i.java, line(s) 35,37,191
com/bxm/sdk/ad/activity/BxmWebActivity.java, line(s) 457
com/bxm/sdk/ad/util/b.java, line(s) 47,48
com/bxm/sdk/ad/util/h.java, line(s) 12,22
com/fendasz/moku/planet/utils/FileUtils.java, line(s) 89
com/fendasz/moku/planet/utils/MokuDownloadUtils.java, line(s) 27
com/fendasz/moku/planet/utils/StorageUtils.java, line(s) 18
com/fendasz/moku/planet/utils/thirdparty/baidu/util/DeviceId.java, line(s) 538,567,569,707,732
com/ishow/common/utils/DeviceUuidUtils.java, line(s) 61,97
com/ishow/noah/App.java, line(s) 83
com/ishow/noah/manager/ConfigureManager.java, line(s) 80
com/ishow/noah/manager/RetrofitManager$bmobService$2.java, line(s) 27,29
com/ishow/noah/manager/VersionManager.java, line(s) 37,39
com/ishow/noah/modules/settings/SettingsActivity.java, line(s) 83
com/pgl/sys/ces/b.java, line(s) 324
com/ta/a/d/e.java, line(s) 104
com/wannuosili/sdk/ad/SdkInfo.java, line(s) 113,133,214
com/yilan/sdk/common/crash/YLCrashCore.java, line(s) 143
com/yilan/sdk/common/download/YLDownloadManager.java, line(s) 146
com/yilan/sdk/common/log/YLFileLog.java, line(s) 23,25
com/yilan/sdk/common/util/FSDevice.java, line(s) 706,720
d/a/b/f/p/b.java, line(s) 26
d/a/b/g/j/a/d/a.java, line(s) 494
d/d/b/t/k.java, line(s) 31,31,31,31
d/f/a/b2.java, line(s) 36,39
d/f/b/b/f/c.java, line(s) 1518
d/o/a/c/c$i/b.java, line(s) 30
d/o/a/c/c.java, line(s) 641,2083
d/o/a/d/a/h.java, line(s) 241,245
d/o/a/d/a/i.java, line(s) 342,339
d/q/a/a/a/a.java, line(s) 8
d/q/a/a/b/a.java, line(s) 90
d/s/a/a/c/b/a.java, line(s) 34
i/a/a/a/a/f0.java, line(s) 32

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/xiangzi/articlesdk/activity/XZDoWebActivity.java, line(s) 131,124
com/xiangzi/articlesdk/fragment/XzDoWebFragment.java, line(s) 127,120
com/yilan/sdk/ui/web/WebFragment.java, line(s) 394,395,377
com/yilan/sdk/uibase/ui/widget/VideoEnabledWebView.java, line(s) 70,74,85,91,97,103,148
com/yilan/sdk/ylad/web/WebFragment.java, line(s) 476,477,459

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
XI/K0/XI/XI.java, line(s) 69
cn/bmob/v3/http/acknowledge.java, line(s) 202
cn/bmob/v3/realtime/Client.java, line(s) 154
cn/bmob/v3/socketio/The.java, line(s) 85
com/fendasz/moku/planet/utils/PackageUtils.java, line(s) 48
com/fendasz/moku/planet/utils/thirdparty/baidu/security/SHA1Util.java, line(s) 12
com/jg/ids/e/d.java, line(s) 82
com/pgl/sys/ces/c.java, line(s) 13
com/yilan/sdk/common/util/FSDigest.java, line(s) 108,119
d/a/b/g/j/a/d/a.java, line(s) 113
d/f/b/b/f/c.java, line(s) 695
d/s/a/a/a/b/h/d.java, line(s) 39
o/b/a/a/a/a.java, line(s) 91

中危 IP地址泄露 

IP地址泄露


Files:
com/fendasz/moku/planet/common/network/CompanyNetworkManager.java, line(s) 24
com/fendasz/moku/planet/utils/PhoneInfoUtils.java, line(s) 150
com/ut/mini/UTHybridHelper.java, line(s) 72,81
com/yilan/sdk/common/util/FSDevice.java, line(s) 1080,1098
com/yilan/sdk/data/BuildConfig.java, line(s) 8
com/yilan/sdk/data/YLInit.java, line(s) 19
com/yilan/sdk/data/net/Net.java, line(s) 117
com/yilan/sdk/player/core/HttpProxy.java, line(s) 20
com/yilan/sdk/reprotlib/BuildConfig.java, line(s) 8
com/yilan/sdk/reprotlib/ReporterEngine.java, line(s) 53
com/yilan/sdk/ui/BuildConfig.java, line(s) 10
com/yilan/sdk/ylad/BuildConfig.java, line(s) 10
com/yilan/sdk/ylad/request/AdRequestHelper.java, line(s) 71

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
cn/bmob/v3/http/bean/Migration.java, line(s) 71
com/arialyy/aria/core/task/AbsTask.java, line(s) 16
com/bianxianmao/sdk/n/j.java, line(s) 82
com/bianxianmao/sdk/q/p.java, line(s) 92
com/fendasz/moku/planet/utils/AesUtil.java, line(s) 9
com/yilan/sdk/common/ui/BaseActivity.java, line(s) 12
com/yilan/sdk/common/util/Constant.java, line(s) 102
com/yilan/sdk/common/util/FSDigest.java, line(s) 15
com/yilan/sdk/data/entity/comment/SignUtil.java, line(s) 9
d/e/a/i/d.java, line(s) 54
d/e/a/i/j/o.java, line(s) 83
d/m/b/a/d.java, line(s) 42

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
cn/bmob/v3/util/darkness.java, line(s) 4,5,17
com/arialyy/aria/orm/DelegateFind.java, line(s) 4,73,75,198,508,523,539
com/arialyy/aria/orm/DelegateUpdate.java, line(s) 4,70
com/arialyy/aria/orm/DelegateWrapper.java, line(s) 4,52
com/arialyy/aria/orm/SqlHelper.java, line(s) 5,6,43,53,73,184,220
com/arialyy/aria/orm/SqlUtil.java, line(s) 5,63,403
com/fendasz/moku/liulishuo/okdownload/core/breakpoint/BreakpointSQLiteHelper.java, line(s) 6,7,69,88,109,126,215,242
com/kwai/filedownloader/b/d.java, line(s) 5,6,7,169
com/kwai/filedownloader/b/e.java, line(s) 4,5,14,15,33,34,37,38
com/wannuosili/sdk/WNAdSdk.java, line(s) 8,128
com/wannuosili/sdk/ad/tracker/d.java, line(s) 4,5,14,19
com/yilan/sdk/ylad/download/db/DownloadSQLiteHelper.java, line(s) 5,6,97,106
d/b/a/b/f/a.java, line(s) 6,105
d/b/a/b/f/b.java, line(s) 3,107
d/b/a/b/f/c.java, line(s) 6,7,105
d/f/a/t.java, line(s) 7,8,74,75,103,104,136,195
d/f/c/a/c/c/a.java, line(s) 5,42,43,35
d/f/c/a/c/d.java, line(s) 4,5,34
d/o/a/d/b/c/a.java, line(s) 4,5,28,38,39,53,54,55,56,58,60,62,63,65,66,68,69,70,71,73,74,76,78,80,81,82,83,84,85,87,89,90
d/o/a/d/b/c/e.java, line(s) 5,6,482,538,613

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
cn/bmob/v3/http/acknowledge.java, line(s) 253,322
cn/bmob/v3/util/The.java, line(s) 12,31
cn/bmob/v3/util/This.java, line(s) 36
com/arialyy/aria/util/CommonUtil.java, line(s) 309,425,499,600
com/bianxianmao/sdk/am/c.java, line(s) 16
com/bianxianmao/sdk/g/d.java, line(s) 16
com/bianxianmao/sdk/h/d.java, line(s) 57
com/common/busi/CustomView.java, line(s) 58
com/fendasz/moku/liulishuo/okdownload/core/Util.java, line(s) 275
com/fendasz/moku/planet/utils/Md5Utils.java, line(s) 15
com/fendasz/moku/planet/utils/thirdparty/baidu/security/MD5Util.java, line(s) 28
com/kwai/filedownloader/f/f.java, line(s) 293
com/kwai/sodler/lib/c/a.java, line(s) 40
com/ta/a/e/d.java, line(s) 37
com/yilan/sdk/common/util/FSDigest.java, line(s) 18,26,47,65,75
com/yilan/sdk/common/util/MD5Util.java, line(s) 24
d/a/b/f/e.java, line(s) 25
d/b/a/b/h/h.java, line(s) 24
d/d/b/t/d.java, line(s) 158,201
d/f/a/m.java, line(s) 33
d/o/a/d/b/m/a.java, line(s) 383
i/a/a/a/a/v.java, line(s) 76

中危 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
com/xiangzi/articlesdk/activity/XZDoWebActivity.java, line(s) 116,124
com/xiangzi/articlesdk/fragment/XzDoWebFragment.java, line(s) 112,120
com/yilan/sdk/ui/web/WebFragment.java, line(s) 386,377
com/yilan/sdk/ylad/web/WebFragment.java, line(s) 468,459
d/a/a/e/a/a/a/a.java, line(s) 77,75

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/kwai/sodler/lib/c.java, line(s) 173

中危 应用程序包含隐私跟踪程序 

此应用程序有多个4隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
"moku_sp_app_id" : "moku_sp_app_id"
"password_rule" : "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890"
"moku_sp_app_secret" : "moku_sp_app_secret"
"ams_accountId" : "139450"
833ca1994c666f368baac7d76bfecaf6
KsFUVkW3hvh15S0DYx76RpROGGQW+8runZ3lnHDrYi9hfV1Uns7ZF3eKbMRKGO2s
78a89bfb19483a3afd649b336de23ac0
258EAFA5-E914-47DA-95CA-C5AB0DC85B11
f9b5dca0cc9172bcfa479fbbccd082de
QrMgt8GGYI6T52ZY5AnhtxkLzb8egpFn3j5JELI8H6wtACbUnZ5cc3aYTsTRbmkAkRJeYbtx92LPBWm7nBO9UIl7y5i5MQNmUZNf5QENurR5tGyo7yJ2G0MBjWvy6iAtlAbacKP0SwOUeUWx5dsBdyhxa7Id1APtybSdDgicBDuNjI0mlZFUzZSS9dmN8lBD0WTVOMz0pRZbR3cysomRXOO1ghqjJdTcyDIxzpNAEszN8RMGjrzyU7Hjbmwi6YNK
QrMgt8GGYI6T52ZY5AnhtxkLzb8egpFn
Y2F0IC9wcm9jL3N5cy9rZXJuZWwvcmFuZG9tL2Jvb3RfaWQ=
2f48ca6defa3766784b91bb74c251ddf
456d82d999016b40f4e9b09e1b9c1076
794e92feb8a7eac98ed8cdcab48ff9e0
cGVyc2lzdC5zeXMuaWRlbnRpZmllcmlkLnN1cHBvcnRlZA==
MARexyHggm5YDfbc3fCbqnXTziXSYFbL
7bd0fc942c6b8fe935454e5260a4d502
a5a15e08f251d517524383ba61f489d3
ba5206c84bbf44f697879fe48b7d2ddc
Y2F0IC9zeXMvZGV2aWNlcy9zb2MwL3NlcmlhbF9udW1iZXI=

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
cn/bmob/v3/BmobWrapper.java, line(s) 46,61
cn/bmob/v3/datatype/a/thing.java, line(s) 101,237
cn/bmob/v3/socketio/From.java, line(s) 56
cn/bmob/v3/socketio/The.java, line(s) 144,114
cn/bmob/v3/update/UpdateResponse.java, line(s) 66
cn/bmob/v3/util/BmobContentProvider.java, line(s) 172
cn/bmob/v3/util/C0073i.java, line(s) 87
cn/bmob/v3/util/Tempest.java, line(s) 27
cn/bmob/v3/util/thing.java, line(s) 153,151,143,139,147,155
com/arialyy/aria/core/Aria.java, line(s) 40
com/arialyy/aria/core/AriaConfig.java, line(s) 131,138,47,118
com/arialyy/aria/core/AriaManager.java, line(s) 245,219
com/arialyy/aria/core/WidgetLiftManager.java, line(s) 56,70,48
com/arialyy/aria/core/command/AbsGroupCmd.java, line(s) 35
com/arialyy/aria/core/command/AddCmd.java, line(s) 15
com/arialyy/aria/core/command/CancelAllCmd.java, line(s) 31
com/arialyy/aria/core/command/HighestPriorityCmd.java, line(s) 19
com/arialyy/aria/core/command/ResumeAllCmd.java, line(s) 18
com/arialyy/aria/core/command/ResumeThread.java, line(s) 122,107
com/arialyy/aria/core/command/StopCmd.java, line(s) 17
com/arialyy/aria/core/common/AbsNormalTarget.java, line(s) 98,59
com/arialyy/aria/core/common/FtpOption.java, line(s) 127,131,143,150,156,160,164,174,186,202,234,243
com/arialyy/aria/core/common/HttpOption.java, line(s) 84,25,29,41
com/arialyy/aria/core/common/RecordHandler.java, line(s) 89,127
com/arialyy/aria/core/common/RecordHelper.java, line(s) 138,38,42,44,47,53,57,60,132,141,85,125
com/arialyy/aria/core/common/SFtpOption.java, line(s) 32,36,47,56,65,74,83
com/arialyy/aria/core/common/controller/FeatureController.java, line(s) 78
com/arialyy/aria/core/common/controller/NormalController.java, line(s) 75,73
com/arialyy/aria/core/config/BaseConfig.java, line(s) 23
com/arialyy/aria/core/config/BaseTaskConfig.java, line(s) 142
com/arialyy/aria/core/config/DGroupConfig.java, line(s) 59
com/arialyy/aria/core/config/DownloadConfig.java, line(s) 41
com/arialyy/aria/core/config/UploadConfig.java, line(s) 25
com/arialyy/aria/core/config/XMLReader.java, line(s) 158,316,340
com/arialyy/aria/core/download/CheckDEntityUtil.java, line(s) 30,34,38,44,97,101,111,152,88,133,136,142
com/arialyy/aria/core/download/CheckDGEntityUtil.java, line(s) 151,60,72,85,127,142,229,52,75,188
com/arialyy/aria/core/download/CheckFtpDirEntityUtil.java, line(s) 48,77,104,40
com/arialyy/aria/core/download/DownloadEntity.java, line(s) 79
com/arialyy/aria/core/download/DownloadReceiver.java, line(s) 76,103,206,227,299
com/arialyy/aria/core/download/M3U8Entity.java, line(s) 81
com/arialyy/aria/core/download/m3u8/M3U8LiveOption.java, line(s) 19
com/arialyy/aria/core/download/m3u8/M3U8Option.java, line(s) 77,56
com/arialyy/aria/core/download/m3u8/M3U8VodOption.java, line(s) 23,32,41
com/arialyy/aria/core/download/target/DNormalConfigHandler.java, line(s) 90,95
com/arialyy/aria/core/download/target/GroupBuilderTarget.java, line(s) 44
com/arialyy/aria/core/download/target/GroupNormalTarget.java, line(s) 51
com/arialyy/aria/core/download/target/HttpGroupConfigHandler.java, line(s) 59
com/arialyy/aria/core/download/target/M3U8NormalTarget.java, line(s) 19,23
com/arialyy/aria/core/download/tcp/TcpDelegate.java, line(s) 19,25,34,43
com/arialyy/aria/core/event/EventMsgUtil.java, line(s) 107
com/arialyy/aria/core/group/AbsGroupLoader.java, line(s) 237,87
com/arialyy/aria/core/group/AbsGroupLoaderUtil.java, line(s) 67
com/arialyy/aria/core/group/AbsSubDLoadUtil.java, line(s) 36,128
com/arialyy/aria/core/group/SimpleSchedulers.java, line(s) 32,33,59,86,110,79,125,108,119
com/arialyy/aria/core/group/SimpleSubQueue.java, line(s) 84,116,121,141,146,154,159,67,72
com/arialyy/aria/core/inf/AbsReceiver.java, line(s) 59
com/arialyy/aria/core/inf/AbsTarget.java, line(s) 36
com/arialyy/aria/core/listener/BaseListener.java, line(s) 77,100
com/arialyy/aria/core/listener/DownloadGroupListener.java, line(s) 38
com/arialyy/aria/core/loader/AbsNormalLoader.java, line(s) 81,141,142,183,201,217,220,213,233,175,191
com/arialyy/aria/core/loader/AbsNormalLoaderUtil.java, line(s) 93
com/arialyy/aria/core/loader/GroupSubThreadStateManager.java, line(s) 66,77
com/arialyy/aria/core/loader/NormalTTBuilder.java, line(s) 75,97,110,56,100
com/arialyy/aria/core/loader/NormalThreadStateManager.java, line(s) 54,65
com/arialyy/aria/core/loader/SubLoader.java, line(s) 64,72,203,204,82,87,225,165,261
com/arialyy/aria/core/manager/SubTaskManager.java, line(s) 21,26,32
com/arialyy/aria/core/manager/TaskWrapperManager.java, line(s) 62,82,96
com/arialyy/aria/core/manager/ThreadTaskManager.java, line(s) 90,95,135,140,180,205,217,221,236
com/arialyy/aria/core/queue/AbsTaskQueue.java, line(s) 182,190,145,157,169,136,258,51,162,197,201,218,249,252,289,297,309,324,340
com/arialyy/aria/core/queue/DGroupTaskQueue.java, line(s) 34
com/arialyy/aria/core/queue/DTaskQueue.java, line(s) 105,36
com/arialyy/aria/core/queue/UTaskQueue.java, line(s) 33
com/arialyy/aria/core/queue/pool/BaseCachePool.java, line(s) 69,30,55,82,93,59
com/arialyy/aria/core/queue/pool/BaseExecutePool.java, line(s) 73,30,82,86,103,114,46
com/arialyy/aria/core/queue/pool/DLoadExecutePool.java, line(s) 34,41,20
com/arialyy/aria/core/scheduler/FailureTaskHandler.java, line(s) 93
com/arialyy/aria/core/scheduler/TaskSchedulers.java, line(s) 126,133,143,148,60,65,70,273,356,386,396,322
com/arialyy/aria/core/task/AbsTask.java, line(s) 184,195,40,152,179,192,209,154
com/arialyy/aria/core/task/ThreadTask.java, line(s) 136,218,235,368,124,273,90,95,107,109,213,248,251,364,366,375,119,127,141,149
com/arialyy/aria/core/upload/CheckUEntityUtil.java, line(s) 57,87,98
com/arialyy/aria/core/upload/UploadReceiver.java, line(s) 119,131,178
com/arialyy/aria/core/upload/target/HttpNormalTarget.java, line(s) 31
com/arialyy/aria/http/ChunkedInputStream.java, line(s) 21,26,54,56
com/arialyy/aria/http/ConnectionHelp.java, line(s) 53
com/arialyy/aria/http/download/HttpDFileInfoTask.java, line(s) 83,118,184,246,285,295,318,55,289,195,230,282
com/arialyy/aria/http/download/HttpDGInfoTask.java, line(s) 49,74,132,36
com/arialyy/aria/http/download/HttpDTTBuilderAdapter.java, line(s) 26,46
com/arialyy/aria/http/download/HttpDThreadTaskAdapter.java, line(s) 127,130
com/arialyy/aria/http/upload/HttpULoader.java, line(s) 69
com/arialyy/aria/http/upload/HttpUThreadTaskAdapter.java, line(s) 81
com/arialyy/aria/orm/DelegateFind.java, line(s) 88,352,515,258,414,452,480
com/arialyy/aria/orm/DelegateUpdate.java, line(s) 81,100,121,139
com/arialyy/aria/orm/SqlHelper.java, line(s) 99,107,213,251,289,292,270
com/arialyy/aria/orm/SqlUtil.java, line(s) 77,86,191
com/arialyy/aria/util/ALog.java, line(s) 34
com/arialyy/aria/util/AriaServiceLoader.java, line(s) 52
com/arialyy/aria/util/CheckUtil.java, line(s) 19,31,44,61,73,97,102,22,34,76
com/arialyy/aria/util/CommonUtil.java, line(s) 257,260,356,392,411,90,105,127,429,527,564,461,516
com/arialyy/aria/util/ComponentUtil.java, line(s) 125
com/arialyy/aria/util/DeleteDGRecord.java, line(s) 50,85,56
com/arialyy/aria/util/DeleteDRecord.java, line(s) 47,62,91
com/arialyy/aria/util/DeleteM3u8Record.java, line(s) 70,80,104
com/arialyy/aria/util/DeleteURecord.java, line(s) 37,62
com/arialyy/aria/util/FileUtil.java, line(s) 148,154,159,643,669,175,241,526,688
com/arialyy/aria/util/RecordUtil.java, line(s) 22,68,74
com/arialyy/aria/util/SSLContextUtil.java, line(s) 127
com/bianxianmao/sdk/ac/a.java, line(s) 74,102,109,116,82,105,112,119
com/bianxianmao/sdk/ac/d.java, line(s) 26,27
com/bianxianmao/sdk/ac/j.java, line(s) 40,43
com/bianxianmao/sdk/ae/e.java, line(s) 45,52,63,68,44,51,56,62,67,57
com/bianxianmao/sdk/ag/j.java, line(s) 155,70,188,109
com/bianxianmao/sdk/ah/f.java, line(s) 61,92,93,62
com/bianxianmao/sdk/ah/r.java, line(s) 59,90,91,60
com/bianxianmao/sdk/aj/a.java, line(s) 57
com/bianxianmao/sdk/ak/a.java, line(s) 38,41
com/bianxianmao/sdk/ao/b.java, line(s) 24,33,40,47
com/bianxianmao/sdk/c/l.java, line(s) 94
com/bianxianmao/sdk/c/m.java, line(s) 23
com/bianxianmao/sdk/d/k.java, line(s) 15
com/bianxianmao/sdk/f/i.java, line(s) 220
com/bianxianmao/sdk/k/c.java, line(s) 224,234,154,153,223,230,286,287
com/bianxianmao/sdk/l/a.java, line(s) 317
com/bianxianmao/sdk/m/a.java, line(s) 133,132
com/bianxianmao/sdk/o/b.java, line(s) 30,29
com/bianxianmao/sdk/o/j.java, line(s) 59,135,56,134,138,144,151,148,154
com/bianxianmao/sdk/o/l.java, line(s) 30,29
com/bianxianmao/sdk/p/c.java, line(s) 92,91
com/bianxianmao/sdk/p/e.java, line(s) 84,83
com/bianxianmao/sdk/q/h.java, line(s) 640,275,459,639,315
com/bianxianmao/sdk/q/i.java, line(s) 59,60
com/bianxianmao/sdk/q/k.java, line(s) 27,182
com/bianxianmao/sdk/q/q.java, line(s) 167
com/bianxianmao/sdk/q/z.java, line(s) 33,34
com/bianxianmao/sdk/r/j.java, line(s) 112,169,117,173
com/bianxianmao/sdk/r/k.java, line(s) 100,143,224,274,89,99,142,152,160,223,248,255,273,153,180,249,256,90
com/bianxianmao/sdk/s/e.java, line(s) 56,66,80,95,101,131,57,96,69,81,102,132
com/bianxianmao/sdk/s/l.java, line(s) 162,147
com/bianxianmao/sdk/t/a.java, line(s) 84,81
com/bianxianmao/sdk/t/b.java, line(s) 36,35
com/bianxianmao/sdk/u/a.java, line(s) 112,103
com/bianxianmao/sdk/v/c.java, line(s) 19,18
com/bianxianmao/sdk/v/d.java, line(s) 33,32
com/bianxianmao/sdk/v/f.java, line(s) 82,81
com/bianxianmao/sdk/v/s.java, line(s) 99,102
com/bianxianmao/sdk/v/t.java, line(s) 38,37
com/bianxianmao/sdk/y/aa.java, line(s) 110,107,263,272,279,311,316,264,273,280,281,282,286,312,317
com/bianxianmao/sdk/y/ad.java, line(s) 126,123
com/bianxianmao/sdk/y/m.java, line(s) 195,217,233,243,252,262,269,288,293,366,376,390,194,212,226,231,235,241,245,261,268,287,292,365,375,387
com/bianxianmao/sdk/y/o.java, line(s) 249,106,128,248,116,213
com/bianxianmao/sdk/y/p.java, line(s) 45,51,46,52
com/bianxianmao/sdk/y/t.java, line(s) 44,45
com/bumptech/ylglide/load/engine/DecodeJob.java, line(s) 529,157,212,528,355
com/bumptech/ylglide/load/engine/GlideException.java, line(s) 220
com/bumptech/ylglide/manager/RequestManagerFragment.java, line(s) 73,74
com/bumptech/ylglide/manager/SupportRequestManagerFragment.java, line(s) 65,66
com/bumptech/ylglide/request/SingleRequest.java, line(s) 278,34,200,230
com/bxm/sdk/ad/activity/BxmRewardVideoAdActivity.java, line(s) 387,388
com/bxm/sdk/ad/third/glide/gifdecoder/b.java, line(s) 96,236,95,233
com/bxm/sdk/ad/third/glide/gifdecoder/c.java, line(s) 729,758,765,728,757,764,570,579
com/bxm/sdk/ad/third/glide/manager/RequestManagerFragment.java, line(s) 164,165
com/bxm/sdk/ad/third/glide/manager/SupportRequestManagerFragment.java, line(s) 161,162
com/bxm/sdk/ad/third/glide/manager/e.java, line(s) 31,28,53,72,54,73
com/bxm/sdk/ad/third/glide/manager/f.java, line(s) 18,17
com/bxm/sdk/ad/third/glide/manager/k.java, line(s) 336,337,348
com/bxm/sdk/ad/third/glide/manager/m.java, line(s) 45,46
com/bxm/sdk/ad/third/glide/util/b.java, line(s) 41,40
com/bxm/sdk/ad/third/jcvideo/c.java, line(s) 91
com/bxm/sdk/ad/util/BxmLog.java, line(s) 68,18,25,34,41,75,50
com/bxm/sdk/ad/util/b.java, line(s) 24,33,40
com/bxm/sdk/ad/util/f.java, line(s) 28
com/bytedance/embed_dr/DrLogWriter.java, line(s) 11,16,21,26,31
com/fendasz/moku/liulishuo/okdownload/core/Util.java, line(s) 150,159,227,350
com/fendasz/moku/planet/common/Network.java, line(s) 24
com/fendasz/moku/planet/entity/MokuDownloadListener.java, line(s) 22,29,36,41,46,51,58,66
com/fendasz/moku/planet/utils/LogUtils.java, line(s) 16,10,22,40,28,46,52,34
com/fendasz/moku/planet/utils/thirdparty/baidu/util/DeviceId.java, line(s) 486,463,470
com/ishow/common/utils/ToastUtils.java, line(s) 28,44,73
com/ishow/common/utils/log/LogUtils.java, line(s) 37
com/ishow/common/widget/BottomBar.java, line(s) 127,133,138
com/ishow/common/widget/ImageTextView.java, line(s) 240
com/ishow/common/widget/TopBar.java, line(s) 334,1146,1179,1285
com/ishow/common/widget/edittext/EditTextPro.java, line(s) 606
com/ishow/common/widget/pickview/DateTimePicker.java, line(s) 444
com/ishow/common/widget/pickview/PickerView.java, line(s) 375,444,606
com/ishow/common/widget/pulltorefresh/PullToRefreshView.java, line(s) 376,192,330,335,345
com/ishow/common/widget/pulltorefresh/recycleview/LoadMoreAdapter.java, line(s) 215
com/ishow/common/widget/recyclerview/AnimationRecyclerView.java, line(s) 64
com/ishow/noah/manager/ArticleShareManager.java, line(s) 68
com/ishow/noah/manager/ConfigureManager$$DownloadListenerProxy.java, line(s) 22,37
com/ishow/noah/manager/ConfigureManager$startParse$2.java, line(s) 59,87
com/ishow/noah/manager/ConfigureManager.java, line(s) 136
com/ishow/noah/modules/account/auth/sign/AuthSignActivity.java, line(s) 98
com/ishow/noah/modules/account/modify/ModifyUserActivity.java, line(s) 111
com/ishow/noah/modules/base/mvvm/view/AppBindActivity.java, line(s) 208,214,220,224,228,248,255,257
com/ishow/noah/modules/init/splash/SplashActivity.java, line(s) 391
com/ishow/noah/modules/init/splash/SplashViewModel.java, line(s) 154
com/ishow/noah/modules/log/UploadLogWorker.java, line(s) 40
com/ishow/noah/ui/widget/ViewVideoTaskView.java, line(s) 83
com/ishow/noah/ui/widget/ad/BannerAdView.java, line(s) 47,56,81,132
com/ishow/noah/ui/widget/ad/PlaqueAdView.java, line(s) 42,134
com/ishow/noah/ui/widget/ad/SplashAd.java, line(s) 155,231,237,247
com/ishow/noah/ui/widget/dialog/VersionDialog.java, line(s) 193
com/kwai/sodler/a/b.java, line(s) 31
com/kwai/sodler/lib/a.java, line(s) 20,10,24
com/kwai/sodler/lib/a/f.java, line(s) 155
com/kwai/sodler/lib/ext/d.java, line(s) 147,169
com/pgl/sys/ces/b.java, line(s) 183
com/ta/a/e/h.java, line(s) 77,89,99,71,83
com/ut/mini/UTPageHitHelper.java, line(s) 512
com/ut/mini/internal/UTTeamWork.java, line(s) 32,79,81
com/wannuosili/sdk/ad/utils/HttpUtil.java, line(s) 228
com/wannuosili/sdk/ad/utils/b.java, line(s) 123
com/wannuosili/sdk/ad/video/RewardVideoActivity.java, line(s) 127
com/wannuosili/sdk/ad/video/UniversalVideoView.java, line(s) 322
com/xiangzi/articlesdk/activity/XZDoWebActivity.java, line(s) 82,185
com/xiangzi/articlesdk/fragment/XzDoWebFragment.java, line(s) 68,182
com/xiangzi/articlesdk/utils/XzAndroidJsUtils.java, line(s) 35
com/xiangzi/articlesdk/utils/XzArticleUncaughtExceptionHandler.java, line(s) 35,31,33
com/yilan/sdk/common/crash/YLCrashCore.java, line(s) 61,108,187
com/yilan/sdk/common/download/YLDownloadManager.java, line(s) 58,61,101,206,209,225,310,314
com/yilan/sdk/common/util/FSDevice.java, line(s) 1287,1289
com/yilan/sdk/common/util/FSLogcat.java, line(s) 12,19,27,34,42,49,57
com/yilan/sdk/data/net/listinfo/ListPageInfo.java, line(s) 134,164
com/yilan/sdk/data/net/listinfo/PagedListDataModel.java, line(s) 53
com/yilan/sdk/ui/YLUIInit.java, line(s) 94,95
com/yilan/sdk/uibase/ui/adapter/LoadMoreAdapter.java, line(s) 160,112
com/yilan/sdk/uibase/ui/adapter/MultiAdapter.java, line(s) 56,168,176,97
com/yilan/sdk/uibase/ui/adapter/util/ViewHolderPool.java, line(s) 81
com/yilan/sdk/uibase/ui/widget/VideoEnabledWebView.java, line(s) 28
d/a/a/a/a/a/p.java, line(s) 85
d/a/a/a/a/c/a.java, line(s) 34
d/a/a/a/a/c/c.java, line(s) 35
d/a/b/f/d.java, line(s) 34
d/a/b/f/o/a/a/a.java, line(s) 29
d/a/b/f/p/c/SelectImageUtils.java, line(s) 131,149
d/a/b/f/p/c/h/b.java, line(s) 22
d/a/b/f/s/b.java, line(s) 49,65,82
d/a/b/g/c/b.java, line(s) 194,249
d/a/b/g/j/c/n.java, line(s) 35
d/b/a/b/c.java, line(s) 37
d/b/a/b/e.java, line(s) 32
d/b/a/b/h/d.java, line(s) 64
d/b/a/b/h/g.java, line(s) 37,57,11,17
d/c/a/a/a.java, line(s) 124,128
d/d/b/m/f.java, line(s) 15
d/d/b/m/g.java, line(s) 10
d/d/b/n/a.java, line(s) 42
d/d/b/t/l.java, line(s) 37,48,66,77,95
d/e/a/d.java, line(s) 168,169
d/e/a/e.java, line(s) 105,104
d/e/a/g/a.java, line(s) 261
d/e/a/h/c.java, line(s) 172,200,169,199
d/e/a/h/d.java, line(s) 174,203,210,173,202,209
d/e/a/i/i/b.java, line(s) 30,29
d/e/a/i/i/j.java, line(s) 55,116,54,58,64,71,113,68,74
d/e/a/i/i/l.java, line(s) 32,31
d/e/a/i/i/o/b.java, line(s) 70,69
d/e/a/i/j/a0/a.java, line(s) 73,72
d/e/a/i/j/h.java, line(s) 136,137
d/e/a/i/j/j.java, line(s) 23,194
d/e/a/i/j/x.java, line(s) 83,84
d/e/a/i/j/y/i.java, line(s) 97,139,101,144
d/e/a/i/j/y/j.java, line(s) 90,116,145,228,232,54,85,102,115,129,141,197,208,227,231,74,107,201,216,130
d/e/a/i/j/z/e.java, line(s) 46,78,90,100,47,91,79,103
d/e/a/i/j/z/j.java, line(s) 86,71
d/e/a/i/k/c.java, line(s) 17,16
d/e/a/i/k/d.java, line(s) 28,27
d/e/a/i/k/f.java, line(s) 80,79
d/e/a/i/k/s.java, line(s) 99,100
d/e/a/i/k/t.java, line(s) 40,39
d/e/a/i/l/b/h.java, line(s) 16,21,17,24
d/e/a/i/l/b/i.java, line(s) 190,211,219,241,273,189,210,218,236,250,253,256,263,266
d/e/a/i/l/b/k.java, line(s) 53,63,59,69
d/e/a/i/l/b/s.java, line(s) 83,92,99,84,93,100,101,102,106
d/e/a/i/l/f/a.java, line(s) 67,148,155,162,75,151,158,165
d/e/a/i/l/f/c.java, line(s) 22,23
d/e/a/i/l/f/i.java, line(s) 47,48
d/e/a/j/e.java, line(s) 40,37,81,102,82,103
d/e/a/j/k.java, line(s) 234,235,246
d/e/a/k/b.java, line(s) 35,34
d/e/a/m/g/j.java, line(s) 49,95,96,50
d/e/a/p/j/a.java, line(s) 36,39
d/f/a/b1.java, line(s) 44
d/f/a/i.java, line(s) 25
d/f/a/m0.java, line(s) 11,16
d/f/a/s1.java, line(s) 203,44,49
d/f/a/v.java, line(s) 94,89
d/f/a/y.java, line(s) 136
d/f/b/b/c/n.java, line(s) 57
d/f/b/b/e/r.java, line(s) 76,72,80,10,67
d/f/b/b/f/c.java, line(s) 1555
d/f/b/b/f/e.java, line(s) 50
d/f/c/a/f/b.java, line(s) 95
d/g/g/c/f.java, line(s) 109
d/g/h/b/a/c.java, line(s) 73
d/g/j/l/a.java, line(s) 55
d/g/j/l/i.java, line(s) 40
d/g/l/b.java, line(s) 47,19
d/g/l/c.java, line(s) 32,37,39,56,72,81
d/g/l/j.java, line(s) 207,258,46,81,203,213,220,224,247,268
d/j/a/a/a/c.java, line(s) 56,156
d/j/a/a/a/g.java, line(s) 29
d/j/a/a/a/h/b/b.java, line(s) 243,370
d/j/a/a/a/i/a.java, line(s) 84,87,116,119,122,147,156
d/j/a/a/a/i/b.java, line(s) 18
d/j/a/a/a/p.java, line(s) 60
d/j/a/a/c/a.java, line(s) 82
d/j/a/a/c/d.java, line(s) 49,71,81
d/j/a/a/d/e.java, line(s) 43
d/j/a/a/d/f.java, line(s) 44,33,42
d/j/a/a/d/i.java, line(s) 22
d/j/a/a/d/j.java, line(s) 20,23,19,22
d/j/a/a/d/k.java, line(s) 17,16
d/j/a/a/d/l.java, line(s) 43,47,56,79,102,120,67,72,105,42,46,51,78,97,115
d/j/a/a/d/m.java, line(s) 14
d/j/a/a/e/c/h.java, line(s) 21
d/j/c/m/a/c.java, line(s) 34,65
d/j/c/m/a/g/a.java, line(s) 20,21,25,30,39,42
d/j/c/m/a/g/b/a.java, line(s) 12
d/k/a/d.java, line(s) 289,331,68,395,145,333
d/k/a/f.java, line(s) 84,100
d/k/a/t/a.java, line(s) 80,100,113
d/k/a/t/c.java, line(s) 41
d/k/a/t/d.java, line(s) 36,53,85,111,40,73,99,134
d/k/a/t/e.java, line(s) 49,71,310,98,169,183,223,224,247,274,278,284,111,119,163,171
d/k/a/t/h.java, line(s) 27
d/k/a/t/j.java, line(s) 27
d/m/b/a/d.java, line(s) 32
d/o/a/c/u/a/i.java, line(s) 86,95,89,83,92,98
d/o/a/d/a/c/a.java, line(s) 23
d/o/a/d/a/h.java, line(s) 157
d/o/a/d/b/c/g.java, line(s) 52,119,124
d/o/a/d/b/f/a.java, line(s) 25,43,31,11,37
d/o/a/d/b/i/s.java, line(s) 135
d/o/a/d/b/m/a.java, line(s) 235,240,318,710,820,127,131
d/q/a/a/b/a.java, line(s) 55,72,127
d/r/a/a.java, line(s) 11,15
d/r/a/d/a.java, line(s) 26
d/r/a/f/a.java, line(s) 34,154,193,213
j/a/a/a.java, line(s) 630
o/b/b/a/a/a.java, line(s) 22
o/b/b/b/a/c.java, line(s) 101,94,97
o/b/b/b/a/d.java, line(s) 24

信息 应用程序可以写入应用程序目录。敏感信息应加密 

应用程序可以写入应用程序目录。敏感信息应加密


Files:
com/ishow/common/utils/StorageUtils.java, line(s) 230,230

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/bxm/sdk/ad/third/report/d.java, line(s) 4,42
com/fendasz/moku/planet/utils/SystemUtils.java, line(s) 6,55
com/wannuosili/sdk/ad/a.java, line(s) 6,152
com/yilan/sdk/common/util/FSString.java, line(s) 5,127
com/yilan/sdk/ui/cp/CpDetailActivity.java, line(s) 4,106
com/yilan/sdk/ui/little/YLLittleVideoFragment.java, line(s) 4,328
d/a/b/c/a.java, line(s) 5,36,37

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/arialyy/aria/util/SSLContextUtil.java, line(s) 65,58,60,65,86,56,57,57
com/ta/a/d/c.java, line(s) 68,69,67,66
com/ta/a/d/f.java, line(s) 56,58,66
com/ta/a/d/g.java, line(s) 40,41,39,38
d/b/a/b/h/p.java, line(s) 57,58,56,55
d/f/b/a/b/x.java, line(s) 257,256,264,255,255

安全 此应用程序可能具有Root检测功能 

此应用程序可能具有Root检测功能
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/fendasz/moku/planet/utils/SystemUtils.java, line(s) 155
com/yilan/sdk/common/util/FSDevice.java, line(s) 440,440,443,443

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (sdfp.snssdk.com) 通信。 

{'ip': '101.226.137.106', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '镇江', 'latitude': '32.209366', 'longitude': '119.434372'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ad.toutiao.com) 通信。 

{'ip': '101.226.137.106', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '苏州', 'latitude': '31.311365', 'longitude': '120.617691'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api.bmobcloud.com) 通信。 

{'ip': '101.226.137.106', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (data.1lan.tv) 通信。 

{'ip': '121.228.130.154', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ida.webank.com) 通信。 

{'ip': '101.226.137.106', 'country_short': 'CN', 'country_long': '中国', 'region': '广东', 'city': '广州', 'latitude': '23.127361', 'longitude': '113.264572'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (adx.hzbxm.com) 通信。 

{'ip': '101.226.137.106', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apmlog.snssdk.com) 通信。 

{'ip': '101.226.137.106', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '苏州', 'latitude': '31.311365', 'longitude': '120.617691'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (lf3-ttcdn-tos.pstatp.com) 通信。 

{'ip': '101.226.137.106', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '苏州', 'latitude': '31.311365', 'longitude': '120.617691'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (wx.tenpay.com) 通信。 

{'ip': '101.226.137.106', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (mpush-api.aliyun.com) 通信。 

{'ip': '101.226.137.106', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (v0.api.upyun.com) 通信。 

{'ip': '218.92.216.56', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '盐城', 'latitude': '33.385559', 'longitude': '120.125282'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (task.hzbxm.com) 通信。 

{'ip': '58.216.15.241', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (conf.1look.tv) 通信。 

{'ip': '58.216.15.241', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (count.hzbxm.com) 通信。 

{'ip': '61.147.168.157', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (i.snssdk.com) 通信。 

{'ip': '61.147.168.157', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '常州', 'latitude': '31.783331', 'longitude': '119.966667'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cloudapis.yladm.com) 通信。 

{'ip': '58.221.28.235', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '南通', 'latitude': '32.030296', 'longitude': '120.874779'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (bds.snssdk.com) 通信。 

{'ip': '61.147.168.157', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '镇江', 'latitude': '32.209366', 'longitude': '119.434372'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (promotion.alllook.tv) 通信。 

{'ip': '47.94.91.230', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (home.moguxingqiu.com.cn) 通信。 

{'ip': '47.119.127.18', 'country_short': 'CN', 'country_long': '中国', 'region': '广东', 'city': '深圳', 'latitude': '22.545673', 'longitude': '114.068108'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (prod-video.yunkaiwangluo.net) 通信。 

{'ip': '47.119.127.18', 'country_short': 'CN', 'country_long': '中国', 'region': '广东', 'city': '深圳', 'latitude': '22.545673', 'longitude': '114.068108'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cloudapiv2.yladm.com) 通信。 

{'ip': '58.222.46.206', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (d1.xingqiudazhuan.cn) 通信。 

{'ip': '58.220.52.239', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '扬州', 'latitude': '32.397221', 'longitude': '119.435600'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cloudapidy.yladm.com) 通信。 

{'ip': '58.222.46.201', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (open-alpha.1lan.tv) 通信。 

{'ip': '47.93.198.179', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (comm.yladm.com) 通信。 

{'ip': '58.222.46.201', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

安全评分: ( 每日兼职 4.3.3)