移动应用安全检测报告： Bowmasters v8.0.0

Scope:
*

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/amazon/aps/shared/APSAnalytics.java, line(s) 13
com/amazon/aps/shared/ApsMetrics.java, line(s) 17
com/apm/insight/i.java, line(s) 7
com/applovin/impl/nq.java, line(s) 15
com/applovin/impl/tj.java, line(s) 4
com/appsflyer/internal/AFb1cSDK.java, line(s) 16
com/explorestack/iab/utils/Utils.java, line(s) 40
com/fyber/inneractive/sdk/config/global/s.java, line(s) 12
com/inmobi/media/a1.java, line(s) 25
com/inmobi/media/f.java, line(s) 8
com/inmobi/media/f2.java, line(s) 4
com/inmobi/media/j9.java, line(s) 25
com/inmobi/media/y9.java, line(s) 10
com/json/m9.java, line(s) 5
com/mbridge/msdk/dycreator/baseview/rewardpopview/MBAcquireRewardPopView.java, line(s) 24
com/mbridge/msdk/playercommon/exoplayer2/source/ShuffleOrder.java, line(s) 4
com/mbridge/msdk/playercommon/exoplayer2/trackselection/RandomTrackSelection.java, line(s) 6
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/CachedContentIndex.java, line(s) 21
com/mbridge/msdk/thrid/okhttp/OkHttpClient.java, line(s) 30
com/mbridge/msdk/thrid/okhttp/internal/ws/RealWebSocket.java, line(s) 28
com/mbridge/msdk/thrid/okhttp/internal/ws/WebSocketWriter.java, line(s) 10
com/smaato/sdk/core/errorreport/Report.java, line(s) 12
com/smaato/sdk/video/utils/RandomUtils.java, line(s) 3
com/unity/androidnotifications/UnityNotificationManager.java, line(s) 33
com/unity3d/services/core/configuration/Configuration.java, line(s) 22
com/yandex/mobile/ads/impl/km1.java, line(s) 4
com/yandex/mobile/ads/impl/mx1.java, line(s) 7
com/yandex/mobile/ads/impl/om1.java, line(s) 14
com/yandex/mobile/ads/impl/zv.java, line(s) 9
io/bidmachine/media3/datasource/cache/SimpleCache.java, line(s) 21
io/bidmachine/media3/exoplayer/analytics/DefaultPlaybackSessionManager.java, line(s) 13
io/bidmachine/media3/exoplayer/dash/BaseUrlExclusionList.java, line(s) 15
io/bidmachine/media3/exoplayer/source/ShuffleOrder.java, line(s) 4
io/bidmachine/media3/exoplayer/trackselection/RandomTrackSelection.java, line(s) 14
org/jsoup/helper/DataUtil.java, line(s) 13

IP地址泄露


Files:
com/applovin/mediation/adapters/GoogleAdManagerMediationAdapter.java, line(s) 764
com/applovin/mediation/adapters/GoogleMediationAdapter.java, line(s) 816
com/applovin/mediation/adapters/NimbusMediationAdapter.java, line(s) 31
com/applovin/mediation/adapters/amazonadmarketplace/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/bidmachine/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/bytedance/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/facebook/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/google/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/googleadmanager/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/inmobi/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/inneractive/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/ironsource/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/mintegral/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/smaato/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/unityads/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/vungle/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/yandex/BuildConfig.java, line(s) 9
com/lllibset/LLActivity/LLActivity.java, line(s) 150
com/smaato/sdk/core/dns/DiDns.java, line(s) 15
com/smaato/sdk/core/locationaware/DnsLookupImpl.java, line(s) 21
io/bidmachine/InitialRequest.java, line(s) 142,143,144,145
io/bidmachine/ads/networks/a4g/A4GAdapter.java, line(s) 9
io/bidmachine/ads/networks/a4g/BuildConfig.java, line(s) 7
io/bidmachine/ads/networks/adaptiverendering/AdaptiveRenderingAdapter.java, line(s) 22,26
io/bidmachine/ads/networks/appodeal_gam/AppodealGAMAdapter.java, line(s) 9
io/bidmachine/ads/networks/appodeal_gam/BuildConfig.java, line(s) 7
io/bidmachine/ads/networks/gam/BuildConfig.java, line(s) 7
io/bidmachine/ads/networks/gam/GAMAdapter.java, line(s) 34
io/bidmachine/ads/networks/mraid/MraidAdapter.java, line(s) 25,29
io/bidmachine/ads/networks/nast/NastAdapter.java, line(s) 18,22
io/bidmachine/ads/networks/notsy/BuildConfig.java, line(s) 7
io/bidmachine/ads/networks/vast/VastAdapter.java, line(s) 23,27

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/amazon/aps/ads/ApsConstants.java, line(s) 10
com/amazon/aps/shared/APSAnalytics.java, line(s) 19
com/amazon/aps/shared/ApsMetrics.java, line(s) 41
com/amazon/device/ads/DTBAdInterstitial.java, line(s) 16
com/amazon/device/ads/DTBAdLoader.java, line(s) 4,5,7,6,8
com/amazon/device/ads/DTBAdRequest.java, line(s) 44
com/amazon/device/ads/DTBMetricsConfiguration.java, line(s) 21,22,23
com/amazon/device/ads/DtbConstants.java, line(s) 69,13,19,15,16,17,18,32,72,73,75
com/amazon/device/ads/DtbDeviceData.java, line(s) 23,24,25,26,27,28,29,30,31,32,33,34,35
com/amazon/device/ads/DtbDeviceRegistration.java, line(s) 23,24,25,27,28
com/applovin/impl/bg.java, line(s) 72
com/applovin/impl/sdk/AppLovinSdkInitializationConfigurationImpl.java, line(s) 221,165
com/applovin/impl/sdk/k.java, line(s) 1797
com/applovin/mediation/ads/MaxAdView.java, line(s) 176,166
com/applovin/mediation/ads/MaxAppOpenAd.java, line(s) 73,63
com/applovin/mediation/ads/MaxInterstitialAd.java, line(s) 95,85
com/applovin/mediation/ads/MaxRewardedAd.java, line(s) 115,105
com/applovin/mediation/ads/MaxRewardedInterstitialAd.java, line(s) 90,80
com/applovin/mediation/nativeAds/MaxNativeAdLoader.java, line(s) 98,93
com/applovin/sdk/AppLovinSdk.java, line(s) 300
com/applovin/sdk/AppLovinSdkSettings.java, line(s) 155
com/applovin/sdk/AppLovinWebViewActivity.java, line(s) 25
com/bykv/vk/openvk/component/video/OXt/gQ/rcc.java, line(s) 122
com/inmobi/commons/core/configs/AdConfig.java, line(s) 389
com/inmobi/media/k0.java, line(s) 15
com/inmobi/unification/sdk/model/Initialization/TimeoutConfigurations.java, line(s) 31,53
com/json/CachedResponse.java, line(s) 103
com/json/InitConfig.java, line(s) 117
com/json/SdkInitRequest.java, line(s) 101
com/json/adapters/ironsource/IronSourceAdapter.java, line(s) 78,50,49,413,551
com/json/adapters/ironsource/IronSourceLoadParameters.java, line(s) 58,61
com/json/in.java, line(s) 15,25
com/json/l0.java, line(s) 23
com/json/mediationsdk/adquality/AdQualityBridgeKt.java, line(s) 8
com/json/mediationsdk/adunit/adapter/utility/AdOptionsPosition.java, line(s) 12
com/json/mediationsdk/c.java, line(s) 290,364
com/json/mediationsdk/p.java, line(s) 2553,2536
com/json/mediationsdk/server/ServerURL.java, line(s) 30,56
com/json/mediationsdk/utils/IronSourceConstants.java, line(s) 97,109
com/json/vj.java, line(s) 21,25,23
com/lllibset/LLActivity/util/HttpTask.java, line(s) 15
com/mbridge/msdk/MBridgeConstans.java, line(s) 16,51
com/mbridge/msdk/click/b/a.java, line(s) 34
com/mbridge/msdk/foundation/download/core/DownloadCommon.java, line(s) 21
com/mbridge/msdk/foundation/download/core/DownloaderReporter.java, line(s) 12
com/mbridge/msdk/foundation/entity/CampaignEx.java, line(s) 41
com/mbridge/msdk/foundation/entity/n.java, line(s) 230,233,308,246,266,295,350,397,399,201,203,306,337,361,339,363,256,319,374,650
com/mbridge/msdk/foundation/same/report/i.java, line(s) 125,587
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSessionManager.java, line(s) 31
com/mbridge/msdk/video/dynview/moffer/MOfferModel.java, line(s) 118
com/smaato/sdk/core/mvvm/model/imagead/Extension.java, line(s) 11,14,15,12,13
com/smaato/sdk/core/mvvm/model/imagead/ImageAdResponseParser.java, line(s) 19,21,20,22,27,23,26,28,24,25
com/smaato/sdk/core/violationreporter/AutoValue_Report.java, line(s) 400
com/unity/androidnotifications/UnityNotificationManager.java, line(s) 56,58
com/unity/androidnotifications/UnityNotificationUtilities.java, line(s) 28,27
com/unity3d/ads/core/configuration/GameServerIdReader.java, line(s) 9
com/unity3d/ads/core/data/datasource/AndroidMediationDataSource.java, line(s) 10,14
com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 13
com/unity3d/services/ads/gmascar/utils/ScarConstants.java, line(s) 4,5,6,7,9,10
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 7,8
com/unity3d/services/core/device/reader/DeviceInfoReaderFilterProvider.java, line(s) 11,12
com/unity3d/services/core/device/reader/JsonStorageKeyNames.java, line(s) 4,6,7,8,10,11,12,13,9,14,5,15,16,17
com/unity3d/services/core/properties/SdkProperties.java, line(s) 28
com/usercentrics/ccpa/CcpaApi.java, line(s) 12
com/usercentrics/sdk/v2/etag/repository/EtagRepository.java, line(s) 18,17
com/vungle/ads/internal/Constants.java, line(s) 8,12,20,9,16,28,11,17
com/vungle/ads/internal/model/Cookie.java, line(s) 14
com/vungle/ads/internal/model/OmSdkData.java, line(s) 156
com/vungle/ads/internal/signals/SignalManager.java, line(s) 36,38
com/vungle/ads/internal/task/CleanupJob.java, line(s) 27
com/vungle/ads/internal/task/CleanupJobKt.java, line(s) 9
com/yandex/mobile/ads/impl/yz.java, line(s) 39
io/appmetrica/analytics/impl/C0077c0.java, line(s) 16
io/appmetrica/analytics/impl/C0272k4.java, line(s) 58
io/appmetrica/analytics/impl/C0579x0.java, line(s) 40
io/appmetrica/analytics/impl/C1572c0.java, line(s) 16
io/appmetrica/analytics/impl/C1767k4.java, line(s) 61
io/appmetrica/analytics/impl/C2074x0.java, line(s) 41
io/appmetrica/analytics/impl/Fg.java, line(s) 178
io/bidmachine/BidMachineFetcher.java, line(s) 20
io/bidmachine/ads/networks/adaptiverendering/AdaptiveRenderingAdapter.java, line(s) 23
io/bidmachine/ads/networks/mraid/MraidAdapter.java, line(s) 26
io/bidmachine/ads/networks/nast/NastAdapter.java, line(s) 19
io/bidmachine/ads/networks/vast/VastAdapter.java, line(s) 24
io/bidmachine/media3/container/MdtaMetadataEntry.java, line(s) 66
io/bidmachine/media3/database/VersionTable.java, line(s) 18
io/bidmachine/media3/datasource/cache/CachedContentIndex.java, line(s) 69
io/bidmachine/media3/exoplayer/audio/AudioCapabilities.java, line(s) 28
io/bidmachine/media3/exoplayer/audio/MediaCodecAudioRenderer.java, line(s) 41
io/bidmachine/media3/exoplayer/drm/DefaultDrmSessionManager.java, line(s) 51
io/bidmachine/media3/exoplayer/hls/playlist/HlsPlaylistParser.java, line(s) 67,79
io/bidmachine/media3/exoplayer/offline/DefaultDownloadIndex.java, line(s) 57
org/hive/foundation/apphost/ProxyActivity.java, line(s) 13,14,15,16
org/jsoup/nodes/Comment.java, line(s) 6
org/jsoup/nodes/DataNode.java, line(s) 6
org/jsoup/nodes/TextNode.java, line(s) 8
org/jsoup/nodes/XmlDeclaration.java, line(s) 6

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/fyber/inneractive/sdk/web/u.java, line(s) 503,495
com/inmobi/media/ib.java, line(s) 1157,1097
com/json/sp.java, line(s) 128,125,127
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 538,522
com/unity3d/services/core/webview/WebView.java, line(s) 135,99

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/apm/insight/e/b/a.java, line(s) 4,33
com/apm/insight/e/b/b.java, line(s) 4,44,45,38
com/appsflyer/internal/connector/purcahse/AFPurchaseConnectorA1l.java, line(s) 6,7,48
com/bykv/vk/openvk/component/video/OXt/gQ/gQ/ErO.java, line(s) 4,5,14,20,21,23,25
com/bykv/vk/openvk/preload/geckox/a/b.java, line(s) 6,7,123
com/inmobi/media/i3.java, line(s) 6,102,165
com/json/l8.java, line(s) 6,7,206,211
com/json/m8.java, line(s) 6,7,21,97,123,152
com/mbridge/msdk/foundation/db/BatchReportDao.java, line(s) 6,91
com/mbridge/msdk/foundation/db/c.java, line(s) 5,34
com/mbridge/msdk/foundation/db/e.java, line(s) 6,1052,1068,1128
com/mbridge/msdk/foundation/db/g.java, line(s) 4,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73
com/mbridge/msdk/foundation/download/database/DatabaseHelper.java, line(s) 6,93,182,190
com/mbridge/msdk/newreward/function/e/c.java, line(s) 3,4,21,28,29
com/mbridge/msdk/tracker/b.java, line(s) 4,5,22,36,37,51,52
com/monetization/ads/exo/offline/a.java, line(s) 5,6,146,147
com/smaato/sdk/core/kpi/KpiDBHelper.java, line(s) 6,7,80,133
com/yandex/android/beacon/SendBeaconDb.java, line(s) 7,8,138,145
com/yandex/div/state/db/DivStateDaoImpl.java, line(s) 4,5,82,112,136,160,183,208,247
com/yandex/div/state/db/DivStateDbOpenHelper.java, line(s) 4,5,22,23
com/yandex/div/storage/DivStorageImpl.java, line(s) 6,7,273,745
com/yandex/div/storage/database/AndroidDatabaseOpenHelper.java, line(s) 5,6,7,81,83,84
com/yandex/div/storage/database/ClosableSqlCompiler.java, line(s) 4,34
com/yandex/div/storage/database/DatabaseOpenHelper.java, line(s) 4,30
com/yandex/div/storage/db/DatabaseOpenHelper.java, line(s) 4,5,22,23
com/yandex/div/storage/db/TemplateDaoImpl.java, line(s) 4,60,70,80
com/yandex/div/storage/db/TemplateUsageDaoImpl.java, line(s) 3,24,30,36
com/yandex/mobile/ads/impl/eq1.java, line(s) 6,7,28
com/yandex/mobile/ads/impl/gj.java, line(s) 5,48,49
com/yandex/mobile/ads/impl/iy1.java, line(s) 6,39
com/yandex/mobile/ads/impl/pj.java, line(s) 6,7,142,143,196,220,221
io/appmetrica/analytics/coreutils/internal/db/DBUtils.java, line(s) 5,40
io/appmetrica/analytics/impl/G6.java, line(s) 7,140,159,296,303
io/appmetrica/analytics/impl/J6.java, line(s) 3,10,11,12,13
io/appmetrica/analytics/impl/K6.java, line(s) 3,10,11,12,13
io/appmetrica/analytics/impl/L6.java, line(s) 3,10
io/appmetrica/analytics/impl/M6.java, line(s) 3,10
io/appmetrica/analytics/impl/N6.java, line(s) 3,10
io/appmetrica/analytics/impl/O6.java, line(s) 3,10
io/appmetrica/analytics/impl/P6.java, line(s) 3,13,14,19
io/appmetrica/analytics/impl/Q6.java, line(s) 3,13,14,19
io/appmetrica/analytics/impl/X4.java, line(s) 4,56,75,81
io/bidmachine/analytics/tracker/storage/db/a.java, line(s) 6,7,66,84,140,150
io/bidmachine/media3/database/StandaloneDatabaseProvider.java, line(s) 6,7,28
io/bidmachine/media3/database/VersionTable.java, line(s) 6,73
io/bidmachine/media3/datasource/cache/CacheFileMetadataIndex.java, line(s) 6,54,95
io/bidmachine/media3/datasource/cache/CachedContentIndex.java, line(s) 6,7,113,127
io/bidmachine/media3/exoplayer/offline/DefaultDownloadIndex.java, line(s) 6,7,155,156

MD5是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/apm/insight/l/u.java, line(s) 67
com/bykv/vk/openvk/component/video/api/WA/gQ.java, line(s) 46
com/bykv/vk/openvk/preload/geckox/utils/g.java, line(s) 36
com/fyber/inneractive/sdk/player/cache/j.java, line(s) 154
com/json/mediationsdk/utils/IronSourceUtils.java, line(s) 401
com/json/sdk/controller/s.java, line(s) 45
com/json/sdk/utils/SDKUtils.java, line(s) 219
com/mbridge/msdk/foundation/download/resource/MBResourceManager.java, line(s) 96
com/mbridge/msdk/foundation/tools/aa.java, line(s) 17,30
com/pgl/ssdk/C0108q.java, line(s) 38
com/pgl/ssdk/C1491q.java, line(s) 49
com/smaato/sdk/core/mvvm/model/video/Md5Digester.java, line(s) 19
com/yandex/div/storage/templates/TemplatesContainer.java, line(s) 79
io/appmetrica/analytics/impl/AbstractC0573wi.java, line(s) 7
io/appmetrica/analytics/impl/AbstractC2068wi.java, line(s) 8
io/appmetrica/analytics/impl/F7.java, line(s) 51
io/bidmachine/core/Utils.java, line(s) 244
io/bidmachine/rendering/utils/Utils.java, line(s) 61

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/amazon/device/ads/DtbDeviceData.java, line(s) 74
com/applovin/impl/qi.java, line(s) 129
com/applovin/impl/sdk/utils/StringUtils.java, line(s) 41
com/fyber/inneractive/sdk/player/cache/j.java, line(s) 141
com/json/sdk/utils/SDKUtils.java, line(s) 111
com/pgl/ssdk/C0108q.java, line(s) 160
com/pgl/ssdk/C1491q.java, line(s) 327
com/unity3d/ads/core/data/datasource/AndroidStaticDeviceInfoDataSource.java, line(s) 220
com/unity3d/services/core/device/Device.java, line(s) 170
io/appmetrica/analytics/impl/K3.java, line(s) 45

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/apm/insight/entity/d.java, line(s) 20
com/apm/insight/l/v.java, line(s) 38,88,99
com/apm/insight/nativecrash/c.java, line(s) 666
com/explorestack/iab/vast/VastRequest.java, line(s) 583
com/fyber/inneractive/sdk/mraid/r.java, line(s) 29,42
com/fyber/inneractive/sdk/network/l0.java, line(s) 51
com/fyber/inneractive/sdk/player/cache/p.java, line(s) 64,70
com/fyber/inneractive/sdk/web/r.java, line(s) 23
com/inmobi/media/o3.java, line(s) 97,101,107,158,162,170
com/json/c9.java, line(s) 634,345,511
com/json/db.java, line(s) 262,351
com/json/sdk/utils/SDKUtils.java, line(s) 302
com/mbridge/msdk/foundation/same/report/b/d.java, line(s) 231
com/mbridge/msdk/foundation/tools/ag.java, line(s) 83,98,108
com/pgl/ssdk/ces/c.java, line(s) 162
com/unity3d/ads/core/data/datasource/AndroidDynamicDeviceInfoDataSource.java, line(s) 375
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 57
com/vungle/ads/internal/platform/AndroidPlatform.java, line(s) 213
io/bidmachine/DeviceInfo.java, line(s) 92,132
io/bidmachine/core/Utils.java, line(s) 196,201,379
io/bidmachine/rendering/utils/FileUtils.java, line(s) 34
io/bidmachine/rendering/utils/Utils.java, line(s) 70

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/amazon/device/ads/DTBMetricsConfiguration.java, line(s) 233
com/amazon/device/ads/WebResourceService.java, line(s) 104
com/mbridge/msdk/playercommon/exoplayer2/util/Util.java, line(s) 240
com/yandex/div/core/view2/divs/DivGifImageBinder.java, line(s) 91
io/bidmachine/media3/common/util/Util.java, line(s) 418

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
com/applovin/impl/adview/l.java, line(s) 24,20
com/json/or.java, line(s) 38,40
com/mbridge/msdk/foundation/webview/BrowserView.java, line(s) 71,68
com/mbridge/msdk/mbsignalcommon/base/BaseWebView.java, line(s) 91,88
com/unity3d/services/core/webview/WebView.java, line(s) 86,99
com/vungle/ads/internal/ui/view/MRAIDAdWidget.java, line(s) 130,124

Firebase远程配置URL （ https://firebaseremoteconfig.googleapis.com/v1/projects/724025887093/namespaces/firebase:fetch?key=AIzaSyARSYVnJh1OaDYzIlqhxivmTakK_3RUOq4 ） 已启用。请确保这些配置不包含敏感信息。响应内容如下所示：

{
    "entries": {
        "GroupName": "",
        "HardUpdateVersion": "7.1.11",
        "SoftUpdateVersion": "7.1.11",
        "TestName": "",
        "inGameData": "{\"liveOpsAvailability\":true,\"liveOpsDifficulty\":100,\"liveOpsGroupNumber\":0,\"isNeedShowSubscriptionPopup\":true,\"isSuperGiftEnabled\":true,\"isFatalitySecondChanceEnabled\":true,\"isMisteryBoxEnabled\":true,\"isMisteryBoxReplayEnabled\":true,\"misteryBoxReloadTime\":200,\"isDoubleRouletteRewardEnabled\":true,\"isBadgeActive\":false,\"isDiamondWeeklyABTestEnabled\":false,\"isNoAdsABTestEnabled\":false,\"diamondWeeklyABTestKey\":\"diamondweekly\",\"noAdsABTestKey\":\"noads_combo\",\"diamondWeeklyResultTestKey\":\"diamondweekly\",\"noAdsResultTestKey\":\"noads_combo\",\"isNeedShowAfterLoaderInterstitials\":false,\"isNeedShowQuestsOpenInterstitials\":false,\"isNeedShowQuestsCloseInterstitials\":true,\"isNeedShowDailyGiftOpenInterstitials\":false,\"isNeedShowDailyGiftCloseInterstitials\":true,\"isNeedShowShopOpenInterstitials\":false,\"isNeedShowShopCloseInterstitials\":true,\"isNeedShowAchievementsOpenInterstitials\":false,\"isNeedShowAchievementsCloseInterstitials\":true,\"isNeedShowOfferCloseInterstitials\":true,\"isNeedShowSkipTimeCloseInterstitials\":false,\"isNeedShowSubscriptionCloseInterstitials\":true,\"isNeedShowTryNewCloseInterstitials\":false,\"isNeedShowChestOpenInterstitials\":false,\"isNeedShowChestCloseInterstitials\":true,\"isNeedShowModeSelectInterstitials\":false,\"isNeedShowModeCloseInterstitials\":false,\"isNeedShowPlayInterstitials\":true,\"isNeedShowTutorialInterstitials\":false,\"isNeedShowTurnSwitchInterstitials\":false,\"minLevelForTurnSwitchInterstitialsShowing\":1000,\"isNeedShowPauseOpenInterstitials\":false,\"isNeedShowPauseCloseInterstitials\":true,\"isNeedShowSubscribeCloseInterstitials\":false,\"isNeedShowCharacterForProgressOpenInterstitials\":false,\"isNeedShowCharacterForProgressCloseInterstitials\":true,\"firstTutorialCharacterShopId\":\"robinhood\",\"secondTutorialCharacterShopId\":\"raymond_2\",\"isCustomPlayButtonActive\":false,\"isCustomResultButtonActive\":false,\"secondFatalityChanceCount\":1,\"isAimHelperActive\":false,\"aimHelperMissesCount\":2,\"aimHelperMaxLevel\":10,\"mysticBoxTeleport\":false,\"mysticBoxTeleportDist\":5,\"firstGameTutorialCount\":3,\"firstGameTutorialDelay\":5,\"isEnglishFocrceDefaultLanguage\":true,\"advertisingAvailabilityEventInfo\":{\"RewardedVideo\":10,\"Interstitial\":15,\"Banner\":5},\"minLevelForBannerShowing\":100,\"minLevelForInterstitialShowing\":100,\"delayBetweenInterstitials\":30,\"isNeedShowInterstitialBeforeResult\":true,\"isNeedShowInterstitialAfterResult\":true,\"isNeedShowInterstitialAfterResultInTutorial\":true,\"winCountForShowInterstitialInTutorial\":3,\"IsNeedShowGiftScreen\":true,\"IsNeedShowConfirmationForGiftScreen\":false,\"isNeedShowInterstitialAfterBackground\":true,\"isNeedShowInactivityInterstitial\":true,\"isNeedReplaceRewardedVideo\":false,\"delayBetweenInactivityInterstitials\":60,\"delaysBetweenInactivityInterstitialsByLevel\":[],\"isNeedShowSettingsOpenInterstitials\":false,\"isNeedShowSettingsCloseInterstitials\":true,\"isNeedShowGalleryOpenInterstitials\":false,\"isNeedShowGalleryCloseInterstitials\":true,\"isNeedShowInGameRestartInterstitial\":true,\"isNeedShow9ChestInterstitial\":true,\"isNeedShowInterstitialAfterSegment\":true,\"isNeedSimpleShoot\":false,\"isNeedEasyFirstLevels\":false,\"isNeedEasyDistanceSettingsForFirstLevels\":false,\"isNeedEasyDamageSettingsForFirstLevels\":false,\"isNeedEasyMinHealthValueForFirstLevels\":false,\"isNeedEasyFloorSettings\":false,\"isNeedButtonNextCorrect\":false,\"rateUsData\":{\"IsIosNativeRateUsAvailable\":false,\"IsRewardAvailable\":false},\"useNativeUi\":true,\"SubscriptionData\":{\"IsIosSubscriptionAvailableAtLaunch\":false,\"IsIosFullSubscriptionAvailable\":true,\"IsAndroidSubscriptionAvailableAtLaunch\":false,\"IsAndroidFullSubscriptionAvailable\":false},\"useLevelSequence\":false,\"maxWaterfallKeywords\":[],\"isRerollAvailable\":true,\"isNeedShowZombieLiveOpsInterstitials\":true,\"isNeedShowBirdLiveOpsInterstitials\":true,\"isNeedShowAppleLiveOpsInterstitials\":true,\"isNeedShowPvpInterstitials\":true,\"isPlayerProfileEnabled\":true,\"isPlayerProfileInMainScreen\":false}",
        "nativeTutorial": "{   \"FirstLevelNativeTutor\": false,   \"SecondLevelNativeTutor\": false }"
    },
    "state": "UPDATE",
    "templateVersion": "33"
}

从应用程序中识别出以下机密确保这些不是机密或私人信息
AdMob广告平台的=> "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-2426838779592611~4671507711"
凭证信息=> "com.google.android.gms.games.APP_ID" : "\ 1118431695"
AppLovin广告SDK的=> "applovin.sdk.key" : "41D52xB9wZ5u6C7CfhPUelGI4x0F727B4KH7GSGB1L37TBJDuihWSypXtpn-suAxDS2TwJexei3CuMPm46GX34"
"com.google.firebase.crashlytics.unity_version" : "2022.3.31f1"
"dyStrategy.privateAddress" : "privateAddress"
"firebase_database_url" : "https://bowmasters-4482a.firebaseio.com"
"google_api_key" : "AIzaSyARSYVnJh1OaDYzIlqhxivmTakK_3RUOq4"
"google_app_id" : "1:724025887093:android:63a33dab68d173aedc6b3c"
"google_crash_reporting_api_key" : "AIzaSyARSYVnJh1OaDYzIlqhxivmTakK_3RUOq4"
"yandex_mobileads_age_restricted_user" : "com.yandex.mobile.ads.AGE_RESTRICTED_USER"
322a737a-a0ca-44e0-bc85-649b1c7c1db6
FFE391E0EA186D0734ED601E4E70E3224B7309D48E2075BAC46D8C667EAE7212
T01YLmdvb2dsZS5hYWMuZGVjb2Rlcg==
T01YLkV4eW5vcy5BVkMuRGVjb2Rlci5zZWN1cmU=
KGZ1bmN0aW9uKGMsZCl7dmFyIHI9YixlPWMoKTt3aGlsZSghIVtdKXt0cnl7dmFyIGY9cGFyc2VJbnQocigweDEyZCkpLzB4MSooLXBhcnNlSW50KHIoMHgxMmMpKS8weDIpKy1wYXJzZUludChyKDB4MTJhKSkvMHgzK3BhcnNlSW50KHIoMHgxM2MpKS8weDQqKHBhcnNlSW50KHIoMHgxNDcpKS8weDUpK3BhcnNlSW50KHIoMHgxMzYpKS8weDYrcGFyc2VJbnQocigweDEyOCkpLzB4NytwYXJzZUludChyKDB4MTNmKSkvMHg4Ky1wYXJzZUludChyKDB4MTJlKSkvMHg5O2lmKGY9PT1kKWJyZWFrO2Vsc2UgZVsncHVzaCddKGVbJ3NoaWZ0J10oKSk7fWNhdGNoKGcpe2VbJ3B1c2gnXShlWydzaGlmdCddKCkpO319fShhLDB4NWQ3NzcpLGZ1bmN0aW9uKCl7dmFyIHM9YixjPXdpbmRvd1snbmF0aXZlU3RvcmFnZSddPXt9LGQ9Y1tzKDB4MTQ1KV09eydSRUFEX0ZJTEVfU1VDQ0VTU19FVkVOVCc6cygweDEzYSksJ1JFQURfREVGQVVMVFNfU1VDQ0VTU19FVkVOVCc6cygweDEzYiksJ0VSUk9SX0VWRU5UJzpzKDB4MTM3KX0sZT17fTtjWydhZGRFdmVudExpc3RlbmVyJ109ZnVuY3Rpb24oaixrKXt2YXIgdD1zO2lmKCFqfHwha3x8IWYoaixkKSlyZXR1cm47dmFyIGw9ZVtqXT1lW2pdfHxbXTtmb3IodmFyIG09MHgwO208bFt0KDB4MTMzKV07bSsrKXt2YXIgbj1TdHJpbmcoayksbz1TdHJpbmcobFttXSk7aWYoaz09PWxbbV18fG49PT1vKXJldHVybjt9bFt0KDB4MTNkKV0oayk7fSxjWydyZW1vdmVFdmVudExpc3RlbmVyJ109ZnVuY3Rpb24oaixrKXt2YXIgdT1zO2lmKCFqfHwhZihqLGQpKXJldHVybjtpZihlW3UoMHgxMzApXShqKSl7aWYoayl7dmFyIGw9ZVtqXSxtPWxbdSgweDEzMyldO2Zvcih2YXIgbj0weDA7bjxtO24rKyl7dmFyIG89bFtuXSxwPVN0cmluZyhrKSxxPVN0cmluZyhvKTtpZihrPT09b3x8cD09PXEpe2xbJ3NwbGljZSddKG4sMHgxKTticmVhazt9fWxbdSgweDEzMyldPT09MHgwJiZkZWxldGUgZVtqXTt9ZWxzZSBkZWxldGUgZVtqXTt9fSxjW3MoMHgxNDEpXT1mdW5jdGlvbihpKXt2YXIgdj1zLGo9digweDEzNSkrZW5jb2RlVVJJQ29tcG9uZW50KGkpO2codigweDEzOCkraik7fSxjW3MoMHgxNDApXT1mdW5jdGlvbihpLGope3ZhciB3PXMsaz13KDB4MTM1KStlbmNvZGVVUklDb21wb25lbnQoaSkrJyZkYXRhPScrZW5jb2RlVVJJQ29tcG9uZW50KGopO2codygweDEyZikrayk7fSxjW3MoMHgxMzQpXT1mdW5jdGlvbihpKXt2YXIgeD1zLGo9eCgweDEzNSkrZW5jb2RlVVJJQ29tcG9uZW50KGkpO2coeCgweDE0Mykraik7fSxjW3MoMHgxNDQpXT1mdW5jdGlvbihpLGope3ZhciB5PXMsaz15KDB4MTM1KStlbmNvZGVVUklDb21wb25lbnQoaSkrJyZkYXRhPScrZW5jb2RlVVJJQ29tcG9uZW50KGopO2coeSgweDEyOSkrayk7fSxjW3MoMHgxMmIpXT1mdW5jdGlvbihpLGope3ZhciB6PXM7aChjW3ooMHgxNDUpXVt6KDB4MTMxKV0saSxqKTt9LGNbJ2ZpcmVSZWFkRGVmYXVsdHNTdWNjZXNzRXZlbnQnXT1mdW5jdGlvbihpLGope3ZhciBBPXM7aChjWydFVkVOVFMnXVtBKDB4MTNlKV0saSxqKTt9LGNbJ2ZpcmVFcnJvckV2ZW50J109ZnVuY3Rpb24oaSl7dmFyIEI9cztoKGNbQigweDE0NSldWydFUlJPUl9FVkVOVCddLGkpO307dmFyIGY9ZnVuY3Rpb24oaixrKXtmb3IodmFyIGwgaW4gayl7aWYoa1tsXT09PWopcmV0dXJuISFbXTt9cmV0dXJuIVtdO30sZz1mdW5jdGlvbihpKXt2YXIgQz1zO3dpbmRvd1tDKDB4MTQ5KV09QygweDE0MikraTt9LGg9ZnVuY3Rpb24oail7dmFyIEQ9cyxrPUFycmF5Wydwcm90b3R5cGUnXVtEKDB4MTQ2KV1bRCgweDE0OCldKGFyZ3VtZW50cyk7a1tEKDB4MTM5KV0oKTt2YXIgbD1lW2pdO2lmKGwpe3ZhciBtPWxbRCgweDE0NildKCksbj1tW0QoMHgxMzMpXTtmb3IodmFyIG89MHgwO288bjtvKyspe21bb11bRCgweDEzMildKG51bGwsayk7fX19O30oKSk7ZnVuY3Rpb24gYihjLGQpe3ZhciBlPWEoKTtyZXR1cm4gYj1mdW5jdGlvbihmLGcpe2Y9Zi0weDEyODt2YXIgaD1lW2ZdO3JldHVybiBoO30sYihjLGQpO31mdW5jdGlvbiBhKCl7dmFyIEU9WydzbGljZScsJzVubGtBS0onLCdjYWxsJywnbG9jYXRpb24nLCc0MDE0MjY5RFRYS1RVJywnd3JpdGVEZWZhdWx0cz8nLCc4ODE2NThvQVlkWnYnLCdmaXJlUmVhZEZpbGVTdWNjZXNzRXZlbnQnLCc0MjQ5MjhaTkxIUHAnLCcyWGZJbWpnJywnOTgyNjQ5N2NZYXFVQicsJ3dyaXRlRmlsZT8nLCdoYXNPd25Qcm9wZXJ0eScsJ1JFQURfRklMRV9TVUNDRVNTX0VWRU5UJywnYXBwbHknLCdsZW5ndGgnLCdyZWFkRGVmYXVsdHMnLCdwYXRoPScsJzE5NzQwOTBZem9kd1knLCdlcnJvcicsJ3JlYWRGaWxlPycsJ3NoaWZ0JywncmVhZEZpbGVTdWNjZXNzJywncmVhZERlZmF1bHRzU3VjY2VzcycsJzI3NDExODhSeW5pUGsnLCdwdXNoJywnUkVBRF9ERUZBVUxUU19TVUNDRVNTX0VWRU5UJywnNDg0NTY1Nk5na3NERicsJ3dyaXRlRmlsZScsJ3JlYWRGaWxlJywnbmF0aXZlc3RvcmFnZTovLycsJ3JlYWREZWZhdWx0cz8nLCd3cml0ZURlZmF1bHRzJywnRVZFTlRTJ107YT1mdW5jdGlvbigpe3JldHVybiBFO307cmV0dXJuIGEoKTt9
T01YLk52aWRpYS5oMjY0LmRlY29kZS5zZWN1cmU=
0e5e9c33-f8c3-4568-86c5-2e4f57523f72
3BAF59A2E5331C30675FAB35FF5FFF0D116142D3D4664F1C3CB804068B40614F
T01YLmFtbG9naWMuYXZjLmRlY29kZXIuYXdlc29tZQ==
DFeuWkH0W+xUhoPwJ7JgY7K0DkeAWrfXYN==
T01YLnFjb20udmlkZW8uZGVjb2Rlci52cDg=
T01YLlNFQy5NUDMuRGVjb2Rlcg==
478cb909-6ad1-4e12-84cc-b3629a789f93
C38FB23A402222A0C17D34A92F971D1F
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
T01YLmdvb2dsZS5yYXcuZGVjb2Rlcg==
6b2ae7f0df3a282310ac7f6c0ae205895a8419f2
DFKwWgtuDkKwLZPwD+z8H+N/xjK+n3eyNVx6ZVPn5jcincKZx5f5ncN=
HSrCHRtOan6wp2kwOIGJC1RDtuSrF2mWVbio2aBcMHX9KF3iTJ1lLSzCKP1ZSo5yNolPNw1kCTtWpxELFF4ah1
h7KsLkfPW+xUhoPwJ7JgY7K0DkeAWrfXYN==
T01YLmJyb2FkY29tLnZpZGVvX2RlY29kZXIudHVubmVsLnNlY3VyZQ==
T01YLmJyb2FkY29tLnZpZGVvX2RlY29kZXIudHVubmVs
Y7c14Z2TDbv/Y+xgHFeXDrcshBPUYFT=
DFKwWgtuDkKwLZPwD+z8H+N/xj26Vjcdx5KanjKnxVN=
DFKwWgtuDkKwLZPwD+z8H+N/xj26Vjcdx5KyVj5GxVN=
T01YLkV4eW5vcy5BQUMuRGVjb2Rlcg==
T01YLkV4eW5vcy5hdmMuZGVjLnNlY3VyZQ==
DFK/HrQgJ+zQW+xUhoPBD+QqJk2MWrfXYN==
T01YLkV4eW5vcy5BVkMuRGVjb2Rlcg==
T01YLmxnZS5hYzMuZGVjb2Rlcg==
T01YLmdvb2dsZS52b3JiaXMuZGVjb2Rlcg==
T01YLnFjb20uYXVkaW8uZGVjb2Rlci5tcDM=
T01YLmxnZS5hbGFjLmRlY29kZXI=
DFK/HrQgJ+zQW+xUhoPwJ7JgY7K0DkeAWrfXYN==
0000016742C00BDA259000000168CE0F13200000016588840DCE7118A0002FBF1C31C3275D78
20799a27-fa80-4b36-b2db-0f8141f24180
T01YLmFsbHdpbm5lci52aWRlby5kZWNvZGVyLmF2Yw==
LdxThdi1WBKUL75ULBPwJ7JgY7K0DkeAWrfXYN==
T01YLmFtbG9naWMuYXZjLmRlY29kZXIuYXdlc29tZS5zZWN1cmU=
77fa495fbb6ce7aab58b9e8951565a86
DFKwWgtuDkKwLZPwD+z8H+N/xjQZxVfV+T2SZVe6V2xS5c5n
DkPtYdQTLkfAW+xUhoPwJ7JgY7K0DkeAWrfXYN==
h7KsLkfPW+xUhoPBD+QqJk2MWrfXYN==
T01YLnJlYWx0ZWsudmlkZW8uZGVjb2Rlci50dW5uZWxlZA==
T01YLnF0aS5hdWRpby5kZWNvZGVyLmZsYWM=
edef8ba9-79d6-4ace-a3c8-27dcd51d21ed
FBA3AF4E7757D9016E953FB3EE4671CA2BD9AF725F9A53D52ED4A38EAAA08901
E3F9E1E0CF99D0E56A055BA65E241B3399F7CEA524326B0CDD6EC1327ED0FDC1
LdxThdi1WBKUL75ULBPBD+QqJk2MWrfXYN==
e9026ffd475a1a3691e6b2ce637a9b92aab1073ebf53a67c5f2583be8a804ecb
a5c71f6aff54eb34c826d952c285eaf0650b4259c83ae598962681a6429b63f6
YzIuYW5kcm9pZC5tcDMuZGVjb2Rlcg==
936dcbdd57fe235fd7cf61c2e93da3c4
T01YLnFjb20uYXVkaW8uZGVjb2Rlci5hYWM=
cca47107bfcbdb211d88f3385aeede40
258EAFA5-E914-47DA-95CA-C5AB0DC85B11