安全分析报告: MyRecorder v1.01.90.0219

安全分数


安全分数 43/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

13

用户/设备跟踪器


调研结果

高危 9
中危 39
信息 4
安全 2
关注 3

高危 应用程序存在Janus漏洞

应用程序使用了v1签名方案进行签名,如果只使用v1签名方案,那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序,以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
com/applovin/impl/adview/b.java, line(s) 426,14
com/applovin/impl/sdk/e/s.java, line(s) 94,4
com/fyber/inneractive/sdk/activities/InneractiveInternalBrowserActivity.java, line(s) 213,12
com/fyber/inneractive/sdk/config/r.java, line(s) 32,4
net/pubnative/lite/sdk/mraid/MRAIDView.java, line(s) 599,1189,44,45
net/pubnative/lite/sdk/vpaid/VideoAdControllerVpaid.java, line(s) 340,11,12

高危 使用弱加密算法

使用弱加密算法
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
sn/m.java, line(s) 1213,203,206,1019,1040

高危 该文件是World Writable。任何应用程序都可以写入文件

该文件是World Writable。任何应用程序都可以写入文件
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
mediation/ad/AdSharedPrefImpl.java, line(s) 94,75
xe/a0.java, line(s) 31

高危 WebView域控制不严格漏洞

WebView域控制不严格漏洞


Files:
ij/b.java, line(s) 96,89,137

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/fyber/inneractive/sdk/player/exoplayer2/extractor/hls/a.java, line(s) 43
t9/a.java, line(s) 44

高危 已启用远程WebView调试

已启用远程WebView调试
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/applovin/impl/adview/d.java, line(s) 166,9
com/fyber/inneractive/sdk/web/d.java, line(s) 392,7
net/pubnative/lite/sdk/views/PNWebView.java, line(s) 73,8

高危 该文件是World Readable。任何应用程序都可以读取文件

该文件是World Readable。任何应用程序都可以读取文件
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
com/fyber/fairbid/oi.java, line(s) 69

高危 应用程序包含隐私跟踪程序

此应用程序有多个13隐私跟踪程序。跟踪器可以跟踪设备或用户,是终端用户的隐私问题。

中危 应用程序可以安装在有漏洞的已更新 Android 版本上

Android 5.0-5.0.2, [minSdk=21]
该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。

中危 应用程序已启用明文网络流量

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。

中危 应用程序数据可以被备份

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Activity设置了TaskAffinity属性

(com.myviocerecorder.voicerecorder.cancelsub.SettingSubsActivity)
如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性

(com.myviocerecorder.voicerecorder.cancelsub.SettingSubsFeedbackActivity)
如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性

(com.myviocerecorder.voicerecorder.cancelsub.SettingSubsFinalActivity)
如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名

中危 Activity (com.myviocerecorder.voicerecorder.ui.activities.MainActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.myviocerecorder.voicerecorder.ui.activities.PlayerActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.myviocerecorder.voicerecorder.ui.activities.TrimActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.myviocerecorder.voicerecorder.ui.activities.CropActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity设置了TaskAffinity属性

(com.myviocerecorder.voicerecorder.crop.EditSelectPicActivity)
如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性

(com.myviocerecorder.voicerecorder.selectPhoto.SelectPhotoActivity)
如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名

中危 Activity (com.myviocerecorder.voicerecorder.purchase.VipBillingActivityForFiveDay2022) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.myviocerecorder.voicerecorder.purchase.VipBillingActivityForFiveDayOto2022) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.myviocerecorder.voicerecorder.purchase.VipBillingActivityForThanks2022) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.myviocerecorder.voicerecorder.purchase.VipBillingActivityForThanksOto2022) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.myviocerecorder.voicerecorder.purchase.VipBillingActivityForChristmas2022) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.myviocerecorder.voicerecorder.purchase.VipBillingActivityForChristmasOto2022) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.myviocerecorder.voicerecorder.purchase.VipBillingActivityForNewyear2022) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.myviocerecorder.voicerecorder.purchase.VipBillingActivityForNewyearOto2022) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.myviocerecorder.voicerecorder.purchase.VipBillingActivityForHalfYear2023) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.myviocerecorder.voicerecorder.purchase.VipBillingActivityForHalfYearOto2023) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Service (com.myviocerecorder.voicerecorder.services.QsRecordService) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.BIND_QUICK_SETTINGS_TILE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (com.facebook.CustomTabActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (net.pubnative.lite.sdk.receiver.VolumeChangedActionReceiver) 未被保护。

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等

文件可能包含硬编码的敏感信息,如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
c3/d.java, line(s) 48
com/applovin/impl/mediation/c/a/a.java, line(s) 35
com/applovin/impl/sdk/n.java, line(s) 1627
com/applovin/mediation/AppLovinUtils.java, line(s) 19
com/applovin/mediation/ads/MaxAdView.java, line(s) 176,166
com/applovin/mediation/ads/MaxAppOpenAd.java, line(s) 68,58
com/applovin/mediation/ads/MaxInterstitialAd.java, line(s) 93,83
com/applovin/mediation/ads/MaxRewardedAd.java, line(s) 120,110
com/applovin/mediation/ads/MaxRewardedInterstitialAd.java, line(s) 88,78
com/applovin/mediation/nativeAds/MaxNativeAdLoader.java, line(s) 96,91
com/applovin/sdk/AppLovinSdk.java, line(s) 246
com/applovin/sdk/AppLovinSdkSettings.java, line(s) 166
com/applovin/sdk/AppLovinWebViewActivity.java, line(s) 26
com/bykv/vk/openvk/component/video/a/b/i.java, line(s) 128
com/fyber/fairbid/internal/Constants.java, line(s) 9,18,10,11,12,13,14,15
com/fyber/fairbid/mediation/config/MediateEndpointRequester.java, line(s) 40,42
com/fyber/fairbid/sdk/placements/Placement.java, line(s) 46
com/smaato/sdk/core/mvvm/model/imagead/Extension.java, line(s) 11,14,15,12,13
com/smaato/sdk/core/mvvm/model/imagead/ImageAdResponseParser.java, line(s) 19,21,20,22,27,23,26,28,24,25
com/smaato/sdk/core/violationreporter/b.java, line(s) 435
gj/a.java, line(s) 16
net/pubnative/lite/sdk/models/Ad.java, line(s) 24,25,26,27
net/pubnative/lite/sdk/mraid/nativefeature/MRAIDNativeFeatureProvider.java, line(s) 33
net/pubnative/lite/sdk/prefs/SessionImpressionPrefs.java, line(s) 20
nl/c1.java, line(s) 55
r/c.java, line(s) 11
v4/g.java, line(s) 76
x4/d.java, line(s) 37
x4/p.java, line(s) 95
x4/x.java, line(s) 84
xi/j.java, line(s) 236

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/apm/insight/e/b/a.java, line(s) 4,40
com/apm/insight/e/b/b.java, line(s) 5,41
com/bykv/vk/openvk/component/video/a/b/b/d.java, line(s) 4,5,14
com/bykv/vk/openvk/preload/geckox/a/b.java, line(s) 6,7,125
com/fyber/fairbid/sdk/placements/database/ImpressionsStoreDbHelper.java, line(s) 4,5,14
com/myviocerecorder/voicerecorder/bean/RecordAudioBeanDao.java, line(s) 4,35
com/smaato/sdk/core/kpi/KpiDBHelper.java, line(s) 6,7,90
g2/o.java, line(s) 7,528
k2/c.java, line(s) 6,7,8,9,10,139
la/b.java, line(s) 6,48
la/f.java, line(s) 7,8,104
net/pubnative/lite/sdk/db/DatabaseHelper.java, line(s) 4,5,25
org/greenrobot/greendao/AbstractDao.java, line(s) 6,7,424
org/greenrobot/greendao/DbUtils.java, line(s) 6,44
org/greenrobot/greendao/database/StandardDatabase.java, line(s) 5,69

中危 应用程序使用不安全的随机数生成器

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/apm/insight/i.java, line(s) 9
com/applovin/exoplayer2/h/z.java, line(s) 4
com/applovin/impl/b/m.java, line(s) 18
com/fyber/inneractive/sdk/config/global/s.java, line(s) 13
com/fyber/inneractive/sdk/player/exoplayer2/upstream/cache/i.java, line(s) 21
com/smaato/sdk/core/errorreport/Report.java, line(s) 13
com/smaato/sdk/video/utils/RandomUtils.java, line(s) 3
ib/w.java, line(s) 8
net/pubnative/lite/sdk/interstitial/HyBidInterstitialBroadcastReceiver.java, line(s) 9
net/pubnative/lite/sdk/rewarded/HyBidRewardedBroadcastReceiver.java, line(s) 9
net/pubnative/lite/sdk/views/CloseableContainer.java, line(s) 11
net/pubnative/lite/sdk/vpaid/macros/GenericMacros.java, line(s) 7
org/greenrobot/greendao/test/DbTest.java, line(s) 7
rk/a.java, line(s) 3
rk/b.java, line(s) 3
sk/a.java, line(s) 3
sn/m.java, line(s) 13

中危 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据

应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
cj/c.java, line(s) 177
com/apm/insight/entity/d.java, line(s) 20
com/apm/insight/l/w.java, line(s) 33,79,90
com/apm/insight/nativecrash/c.java, line(s) 729
com/fyber/fairbid/http/requests/UrlParametersProvider.java, line(s) 138
com/fyber/inneractive/sdk/network/l0.java, line(s) 32
com/fyber/inneractive/sdk/util/p.java, line(s) 205
com/fyber/inneractive/sdk/web/i.java, line(s) 618
com/pgl/ssdk/ces/e.java, line(s) 171
de/a.java, line(s) 63,64,65,66,67
ge/j.java, line(s) 64
me/a.java, line(s) 101
net/pubnative/lite/sdk/mraid/nativefeature/MRAIDNativeFeatureProvider.java, line(s) 67,71
net/pubnative/lite/sdk/vpaid/utils/FileUtils.java, line(s) 68
vl/c.java, line(s) 24
vl/d.java, line(s) 14
xe/b0.java, line(s) 50
xe/x.java, line(s) 100

中危 MD5是已知存在哈希冲突的弱哈希

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/apm/insight/l/v.java, line(s) 128
com/bykv/vk/openvk/component/video/api/f/b.java, line(s) 49
com/bykv/vk/openvk/preload/geckox/utils/g.java, line(s) 36
com/fyber/fairbid/d0.java, line(s) 84
com/fyber/inneractive/sdk/player/cache/h.java, line(s) 499
mediation/ad/f.java, line(s) 22
net/pubnative/lite/sdk/utils/PNCrypto.java, line(s) 67
sn/m.java, line(s) 981
vl/d.java, line(s) 24

中危 IP地址泄露

IP地址泄露


Files:
com/applovin/mediation/BuildConfig.java, line(s) 4
com/applovin/mediation/adapters/ByteDanceMediationAdapter.java, line(s) 789
com/applovin/mediation/adapters/GoogleAdManagerMediationAdapter.java, line(s) 821
com/applovin/mediation/adapters/GoogleMediationAdapter.java, line(s) 857
com/applovin/mediation/adapters/NimbusMediationAdapter.java, line(s) 30
com/applovin/mediation/adapters/bytedance/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/facebook/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/google/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/googleadmanager/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/smaato/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/verve/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/vungle/BuildConfig.java, line(s) 10
com/fyber/fairbid/c2.java, line(s) 96
com/fyber/fairbid/sdk/mediation/adapter/meta/MetaAdapter.java, line(s) 227
com/fyber/fairbid/sdk/mediation/adapter/pangle/PangleAdapter.java, line(s) 226
com/smaato/sdk/core/dns/DiDns.java, line(s) 17
com/smaato/sdk/core/locationaware/DnsLookupImpl.java, line(s) 23
jn/d.java, line(s) 15
net/pubnative/lite/sdk/models/OpenRTBAdRequestFactory.java, line(s) 308
sn/i.java, line(s) 33
sn/q.java, line(s) 33

中危 SHA-1是已知存在哈希冲突的弱哈希

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/applovin/impl/sdk/utils/StringUtils.java, line(s) 75
com/applovin/impl/sdk/utils/p.java, line(s) 96
com/fyber/fairbid/el.java, line(s) 130
com/fyber/fairbid/fl.java, line(s) 20
com/fyber/fairbid/internal/Utils.java, line(s) 169
com/fyber/fairbid/rj.java, line(s) 210
com/fyber/inneractive/sdk/player/cache/h.java, line(s) 486
com/pgl/ssdk/ces/e.java, line(s) 306
jc/a0.java, line(s) 83
net/pubnative/lite/sdk/utils/PNCrypto.java, line(s) 91
sn/m.java, line(s) 927

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/fyber/inneractive/sdk/web/r.java, line(s) 535,527
net/pubnative/lite/sdk/vpaid/VideoAdControllerVpaid.java, line(s) 108,84

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
g2/o0.java, line(s) 64
ip/d.java, line(s) 1044
to/e.java, line(s) 34,246,256
y1/b.java, line(s) 110

中危 此应用可能包含硬编码机密信息

从应用程序中识别出以下机密确保这些不是机密或私人信息
AdMob广告平台的=> "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-4902626407763154~2676521265"
AppLovin广告SDK的=> "applovin.sdk.key" : "wQ8t6g3eOdL2Z0lKFfrEA10HeJ8VGsN8tftHkoLveJy8_daTAHBa4h8wwLMVTxZm3JRKTHuDGBENMqnuSleGvQ"
"com.google.firebase.crashlytics.mapping_file_id" : "2d2b0c42110649a693c70571a9ba139b"
"private_privacy" : "Privacidad"
"facebook_client_token" : "195a66e662165480efac707cd7a7cfac"
"google_api_key" : "AIzaSyDsHOLWsK8vE5fq4ye3IA9qltrA7OO1gX0"
"google_crash_reporting_api_key" : "AIzaSyDsHOLWsK8vE5fq4ye3IA9qltrA7OO1gX0"
"private_privacy" : "Datenschutz"
WXMAAAsTAAALEwEAmpwYAAAAB3RJTUUH3goHFBQe/AkWfQAADBBJREFUeNrtXUFIW1kUPT9VqyKM
wB8AioZhnKMlnoN+h4hiRJQi/yVlPcudFjJyQe8noqdEtEPqyo71jP0txMSA3kFEU0T0jvSTd9az
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
3KRZ38wacMqmcieM1sxnBr9cLmvt3cvYLZTLZV4StKu05qd4PPyenp4W8A3a09PDu1NIKeET8Dh8
470fa2b4ae81cd56ecbcda9735803434cec591fa
VxeHDh2iqamJ2SR+v5+SkhIWLlxopNsR4GkrD6ZEWQh+XNDeF8j2qa2tnTWzXksb3HfffUa6lAf9
HsiRFRCFECnAHjtMwwzJi8BfJ6dnmyOAHBHiAAXYD/zKZaBXMZaTR7Vq527WEWAKP+EJxu4p3uvQ
bJDZSHpaUZQyVVV/llUbsvKuXoNAIEBZWVlIL23btm1kZ2cDsG7dOgoLC41umjhCoqKiKCwsZN26
d79bfac645e9a792d4d5f17bb1ce637e
wDKbvu4H4AhQDpwHWoQQw3MECD/oKcAWYFcQ8JmUI8D7wBkhxI9zBLAP9FTgCeBl4F6HPuY14HXg
0dvb64jFoqysLB588EG9Zi8KIf5PRgMA/FVvtIKCAukHTEpKYvPmzRGRhDEcjuGzzz5rSBNIYjEl
a2n41TCMLzdx1k+Jmk6VSoUKhQIlk0kyTZPa2toIgFBta2sj0zQpmUxSoVCgSqUi0iJM3TRzv+F2
y6mUcqA9oFIeJbWUqjg0YLoTLBpbg5HeopMMkwYSE+ZexfnLa7y65Bpn5p8ZNJeaeCcxPpLxcpEM
df6b721c8b4d3b6eb44c861d4415007e5a35fc95
vRDiL64ggBDCA7xlZFFndHSUuro6Dh8+PCtWgYqLi8nKyiIqytDrPwg8J4QYcSwBggcxPsLAFm1X
tgLRb4bjuZVA8xvQ9uHNs8UtpBIOiUcagzvtKyyfCofk5U5sNb54GgVVYxa6p4A1ObdJv1jjlUOnzR8keX5LsAM4Ia7xeqiFh0GER4l0ulVChy
yJLAjM2HsRU/ScfvUSFEg16jaJmRVFX9VlGUjYBmCY9Vq1ZRVVUlU7pMmgRuA1+GBGbBj4uLo7S0
GATwDYBO61++ADgB8DeAzwAKAD4C2LE+FwEcG4bxX9DGyggA2LcsoL8D8D2AHwAMSfq5vwCsAfgd
CdyqJ8Bws7+sVCqex9q99gmCAn5NGfoYDjOv/24zfVXfHchc87PZLBmG4fnYMRwQxZiPfv1u5CBj
G0Sw+AGyW8SoWKKt63LgtEWMb02iVG3OoKNj6LhJlEUCz9vEyQRfVOq2TpbAcZs4iwCeNorUpS2L
FHw3kiAqKoqSkpI7wJ9MjuTkZGpra02N39rayuLFi1myZIle098oivInVVWHQjUBz+s16OrqCmlX
dde3c298b47648459f8ada4a982fa92d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zptUU4nH45FZCOrwBGvP/aDVKtSUbk51+Orr6zl27BinT592bH4CsyKB2Q9CiMD4XsARrZarV6+O
e3tpYWGBTk5OAgO+LBKcnJzQwsIC9fb2+ndtnEUAoRdHDg4OCiWBSlW6okhQA39wcND/iyNZrQBP
ykqpBw9FEzg9OYNZTfDVV19x8uRJQ9+1Z88evWqh457/SdMEAFAU5Rt0agnNmzdP2hSYJYFbMnMY
W1zcp5YuPDw8mIQDVCH2uQY7qs2ejdZj5LIgIz4CbQ0wg53rlwE7DDQM6MNUgZLnzNmMSMfFrpE7
sogoEqhYou2WBE7Al3p1LGtgiPfyaLckULk+3w0JfvnlF/Uuj2bdEfBeH++UBDo0Z3BCAl7w4dX1
Gi5cuDAjJM7JyWHDhg2kp6cTFxcX6nAngNJwm4WoMIO/Hfi72f7Dw8M0NTVRWVnJ5cuXHWXUMzMz
NNWwE8Afdww9Hg+bN282mlxpVoE/7rgHAgG9tDPJMXoRgJOuZY07hoAjSTDu8M2EzZ8OO52UM2ke
+fN8+eWXlmuCkpISW30C2TjfLPgVFRXcuHHDVH9JTBQZE6C55NvT0xPyaV67SGDn3oFVDp8d4ANc
Qdls9qt3WV9fdx0sYowYbogGnymB0214txF8XUlQP/Mbxa0lME3T20RTIur04mDnOvB1I8FVM79R
GE32CYxGB7NRdu/eLevwwdhGzyuhfJ8VqWKfQ+d6+bgsX76cffv2yVxcmHUSFxfHvn37ZJd4Cb7z
VFRIHy5xm+Tl5ZGfny9zkGOqUO8vdjyTrRfVhRCFQb/AkHR0dFBeXh4x6wZZWVkUFBToVfGcToqE
OIdvfFevubnZthtIM0kCCcyOwD9vBmnmGfP7/TMy88N1S9fOa2gzRQIJzMonE+C8VstwH7Waibt6
y+WyMrl3snyCoIFfU4Yikn4Q0YSKDqCOJPDL4XPhCE7Y7gBkxf+DthyoNPM5zgViIVxcqnit5PN5
IYRomSPAnfb91QgGfioivOYEPyFqhoGPB563Q9UHAgF6e3vp7Oykvb194qezs5Pu7m76+voIBMbC
ypWGeV2rFzQS8JaGKVUc6metnqwyNK8PkHiLQ5UpD/e7Slf3PoaM6z9RfXm4RQLfG0SoUqKtOwm4
e74483c4b5e6dc78e088d9fb0243ae66
q1e5ePEiIyMjlj6vx+MhOzub1atX4/f7WbhwIR6Px6rhHxVCnJwVBAiq+3eBwlDGGRwcpLm5mZqa
fXV1daZI0NHRwZkzZ1wP/mQStLa20tLSQkNDg+EM7Dt37iQjI0Om6XtCiD8ZGTva6B+jKMpJ4N8B
uHCBnp4evWb7NU1AcOHnTa0RqqqqLNmmHRkZobm5maGhIdasWWPZy7QjRLTa4bMa/HFJSEjg7rvv
IcHAwABVVVVUVlbKVPn4hepfvny5TNMnVFUdCokAqqoOKYpSCfxGq92SJUv46aefpI9CGyGBm9Ky
dh0qmal1AgnMzk8mQIueQ5GTkxMRM1/vJI8dt5LDncwyJycHj0d3p78FgvkBVFUdVRRlPTDtlIuP
Fvj9rPt8Ny86Pj5Oq6url1YkEoloDX5t9q6urromAUecoF8GATZYInxugzzr6+tffWc2m9XSEhiG
xmrpTSudnZ2Oesl2OYZudvhCwO4eD2NFFaeV9vZ2R6ras2fPWr5i6Ha1bwK7lR7GKmq6jgBOIYFT
eWzIsJF4PExQap9HK6Vlz8DGlgGwoiLCtyOEK0Bfu
d7R8AAcmHsCPAF4HhMuzAH4zDOOf1rRuDnyYiBYpuLJIROEW0lev70EG/ioiKOEnGD4D3wngJxmm
7roDYTsCK7nTtmLH6eB1dXVpTQKRZv+qJW1iYsLRczFWIHWwEMA26uc24ieLBLJ9Apkz3w34HBHC
d98374d3-3b69-4a4b-a2c1-9dcb4c588849
c56fb7d591ba6704df047fd98f535372fea00211
7c22942b749fe6a6e361b675e96b3ee9
cc2751449a350f668590264ed76692694a80308a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ds0e4LpWC5M17yLC5rudBBLYXfcA37qNAE4AfzIJnOoYSmD3rQf4zk0ECKfD53bHUAK773RNgJN8
8OcD3TL+Q3V1NUePHp1DMwTZvn07ubm5Mk1HgCSjG0hmnMAymX719fVz4FsgR48epb6+XhbLMltN
HSrCHRtOan6wp2kwOIGJC1RDtuSrF2mWVbio2aBcMHX9KF3iTJ1lLSzCKP1ZSo5yNolPNw1kCTtWpxELFF4ah1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AN3d3ejr60M4HMbIyAjGxsYudXR0FAMDA+jq6pIxBLMAfjUM4wtusljLwiLdHFm8UeaegwjhgBNh
96e380195959b8e7e05d6c6029154dc99e7fe954
94628ee5-fe99-436d-94b5-f3270ad06529
CPGz6wkghFgD1AOGDWZ7ezsVFRUzpuKtMBH5+fksWrTIlGsDrBNCXHEtAYQQhcBxo/06OjooLy+n
KB9++KHsA5kC3w2aYNzhk1DPE+1DcQwbGxvJzc3VmxCP6DmEehrgVZkQxcxhjpSUFHbs2CENvpM1
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
KRYCvLMr1BQxmLpZAlVnfr0yFKS+cx34EV2l++zZMykDKtISqDzz0VCV7CowRBc97prW54ueWaov
8eP1elmwYIFd1dNeBN4UQvTPFAaOKHMRNAuvYmDxyOVyEHgt3OresQSYRIQ04KUIJsJB4A0hRItT
94628ee5-fe99-436d-94b5-f3270ad06530
cca47107bfcbdb211d88f3385aeede40
ZjXBpUuX2LRpEzExMVrNHlIU5b9VVe02qgFe0nuAioqKsIM/LuvWrUNRFHw+n+tmvpWaQBKDlwxp
IsSCCHw3ES07HZGDgwOan59XDvTrdH5+ng4ODtyQYJmIuoMC/jgRnTsZhXw+76uJF7FE5PN5pyQ4
Tj6B20aRnrWK1a0njw4kcN0q1iKB9GbROph9HZcD182iLQJIbRevezcuVR1Dke3ipV0YITu272Wt
9b8f518b086098de3d77736f9458a3d2f6f95a37
1yQIAviNJPjw4YNj8HO5HCv4Maklx0S0zOq0OSXByspKYMCvaWdnJz18+JDu3r3L/b8cZyjL0mvO
0BA+n4958+ZZ8uLCGR3oxfmhSH19PTU1NYYnSFtbG+vXrychIUEvIviDqqrDehpAscP2j0sgEOD8
8/MdF+rV19eHJRuXUx1DSUzuwPYOg6Gq6rCiKP3AI9ONkpCQQFtbG21tbYZmvt25d+26ETSVtLW1
5Yb/yOjoaK5cuWLaYXSKT2DU4TOiCdasWaOn0s1isUdKAwQPd2rqlfb2do4fN3zfg9HRUW7evMnQ
a4b7452e2ed8f5f191058ca7bbfd26b0d3214bfc
dsQRIEiCeOB54I9Wjx0IBOjt7aWzs5P29vaJn87OTrq7u+nr65s4nBEbG0tCQgJJSUl4vV4WLVo0
StK3WDUSiBZeS6DjzK9Xhp5FsasI0LS8K51OexZo8dMx1HXm12s6nbZ7lFQj+Ldk7/11IEEQwOeI
we0On6xkZ2ejKIopTdDU1CR7ZvJVUxogeFHzI63O/f39vPPOO6bAVxRlwts3Kl6v1zEh4nQOn5H+
8RYBOll+iTdvkJcEOnXmYCWBE7PPYfqJiDpF9RCYYvk13gghKwl0Ap+VBE7BZ4z4sUX9OEmwYfeL
92d6421e44a44dff9f05b29be0ca5bef
0000016742C00BDA259000000168CE0F13200000016588840DCE7118A0002FBF1C31C3275D78

信息 应用程序记录日志信息,不得记录敏感信息

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
a0/f.java, line(s) 96
a5/a.java, line(s) 135,132
aj/a.java, line(s) 73
aj/c.java, line(s) 48
b5/c.java, line(s) 15
b5/d.java, line(s) 43
b5/f.java, line(s) 100
b5/s.java, line(s) 91
b5/t.java, line(s) 37
c0/a.java, line(s) 220
c9/f.java, line(s) 74
c9/g.java, line(s) 65
ca/a.java, line(s) 741
ce/a.java, line(s) 123,358,388
cg/e.java, line(s) 19
cj/c.java, line(s) 73,110,113,118,179
cj/e.java, line(s) 35
com/apm/insight/b/j.java, line(s) 55
com/apm/insight/k/k.java, line(s) 85
com/apm/insight/l/q.java, line(s) 27,33,39
com/apm/insight/runtime/o.java, line(s) 55
com/applovin/exoplayer2/l/q.java, line(s) 42
com/applovin/impl/sdk/a/f.java, line(s) 59,65,71
com/applovin/impl/sdk/x.java, line(s) 87,124
com/bykv/vk/openvk/component/video/a/b/b.java, line(s) 187
com/bykv/vk/openvk/component/video/a/b/d.java, line(s) 337
com/bykv/vk/openvk/component/video/a/b/f.java, line(s) 180,192,256
com/bykv/vk/openvk/component/video/a/b/g.java, line(s) 140,173,208,271,279,284,295,299,392,506,546,564,571,611,615
com/bykv/vk/openvk/component/video/a/c/a.java, line(s) 219,225,232,239,248,253,333,340
com/bykv/vk/openvk/component/video/api/f/c.java, line(s) 105,112
com/bykv/vk/openvk/preload/falconx/a/a.java, line(s) 24
com/bykv/vk/openvk/preload/geckox/h/a.java, line(s) 23
com/fyber/fairbid/ads/OfferWall.java, line(s) 398
com/fyber/fairbid/adtransparency/interceptors/admob/AdMobInterceptor.java, line(s) 82,99,119,150,210,235,257
com/fyber/fairbid/adtransparency/interceptors/applovin/AppLovinInterceptor.java, line(s) 45
com/fyber/fairbid/adtransparency/interceptors/ironsource/IronSourceInterceptor.java, line(s) 191,207
com/fyber/fairbid/adtransparency/interceptors/mintegral/MintegralInterceptor.java, line(s) 134
com/fyber/fairbid/adtransparency/interceptors/unityads/UnityAdsInterceptor.java, line(s) 63
com/fyber/fairbid/ij.java, line(s) 22
com/fyber/fairbid/internal/DevLogger.java, line(s) 12,16
com/fyber/fairbid/internal/Logger.java, line(s) 73,79,22
com/fyber/fairbid/internal/Utils.java, line(s) 291
com/fyber/fairbid/mi.java, line(s) 122,141
com/fyber/fairbid/nh.java, line(s) 65
com/fyber/fairbid/o.java, line(s) 31
com/fyber/fairbid/sdk/mediation/adapter/gam/GAMAdapter.java, line(s) 182,205,227,276
com/fyber/fairbid/se.java, line(s) 12
com/fyber/fairbid/v8.java, line(s) 69,86,106
com/fyber/inneractive/sdk/external/InneractiveAdManager.java, line(s) 362
com/fyber/inneractive/sdk/logger/a.java, line(s) 19,21
com/fyber/inneractive/sdk/network/f0.java, line(s) 157
com/fyber/inneractive/sdk/player/cache/c.java, line(s) 270
com/fyber/inneractive/sdk/player/exoplayer2/audio/c.java, line(s) 662
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ogg/j.java, line(s) 239
com/fyber/inneractive/sdk/player/exoplayer2/extractor/wav/c.java, line(s) 41,64,71
com/fyber/inneractive/sdk/player/exoplayer2/h.java, line(s) 220,1051,1283,1288,1293
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/d.java, line(s) 355,358
com/fyber/inneractive/sdk/player/exoplayer2/upstream/cache/i.java, line(s) 156
com/fyber/inneractive/sdk/player/exoplayer2/upstream/o.java, line(s) 153,173,350
com/fyber/inneractive/sdk/player/exoplayer2/upstream/x.java, line(s) 157,163,175
com/iab/omid/library/applovin/utils/d.java, line(s) 17
com/iab/omid/library/bytedance2/utils/d.java, line(s) 17
com/iab/omid/library/fyber/utils/d.java, line(s) 17
com/iab/omid/library/pubnativenet/utils/d.java, line(s) 17
com/iab/omid/library/vungle/utils/d.java, line(s) 17
com/myviocerecorder/voicerecorder/App.java, line(s) 349
com/myviocerecorder/voicerecorder/ui/activities/CropActivity.java, line(s) 342,368
com/myviocerecorder/voicerecorder/ui/activities/TrimActivity.java, line(s) 345,371
com/myviocerecorder/voicerecorder/view/AudioRangeSeekBar.java, line(s) 489
com/smaato/sdk/adapters/admob/banner/SMAAdMobBannerViewAd.java, line(s) 112
com/smaato/sdk/adapters/admob/banner/SMAAdMobSmaatoBannerAdapter.java, line(s) 44
com/smaato/sdk/adapters/admob/interstitial/SMAAdMobInterstitialAd.java, line(s) 85
com/smaato/sdk/adapters/admob/interstitial/SMAAdMobSmaatoInterstitialAdapter.java, line(s) 27
com/smaato/sdk/core/AndroidsInjector.java, line(s) 89
com/smaato/sdk/core/SmaatoSdk.java, line(s) 126,258,371,502
com/smaato/sdk/core/ad/KeyValuePairs.java, line(s) 20,24,29,43,57,62
com/smaato/sdk/core/browser/SmaatoSdkBrowserActivity.java, line(s) 218
com/smaato/sdk/core/gdpr/tcfv2/TCModel.java, line(s) 197,205,220,264,351,373
com/smaato/sdk/core/gdpr/tcfv2/encoder/Base64Converter.java, line(s) 35
com/smaato/sdk/core/gdpr/tcfv2/encoder/field/FixedVectorEncoder.java, line(s) 33
com/smaato/sdk/core/gdpr/tcfv2/encoder/field/IntEncoder.java, line(s) 21
com/smaato/sdk/core/gdpr/tcfv2/encoder/field/LangEncoder.java, line(s) 24
com/smaato/sdk/core/gdpr/tcfv2/encoder/field/PurposeRestrictionVectorEncoder.java, line(s) 58
com/smaato/sdk/core/gdpr/tcfv2/encoder/field/VendorVectorEncoder.java, line(s) 61
com/smaato/sdk/core/gdpr/tcfv2/encoder/segment/CoreTCEncoder.java, line(s) 56,68,73
com/smaato/sdk/core/gdpr/tcfv2/encoder/segment/OOBVendorsEncoder.java, line(s) 67
com/smaato/sdk/core/gdpr/tcfv2/encoder/segment/PublisherTCEncoder.java, line(s) 51
com/smaato/sdk/core/linkhandler/LinkHandler.java, line(s) 219
com/smaato/sdk/core/util/Intents.java, line(s) 55
com/smaato/sdk/core/util/Threads.java, line(s) 169
com/vungle/ads/VungleAds.java, line(s) 100
com/vungle/ads/internal/ui/AdActivity.java, line(s) 189
d5/a.java, line(s) 81
d9/d.java, line(s) 148,31,38,47,177,240,256,269,279
dj/a.java, line(s) 33
dj/j.java, line(s) 321,384,622
e5/b0.java, line(s) 183
e5/c.java, line(s) 53,68
e5/d.java, line(s) 15
e5/k.java, line(s) 183,203,205,223,228,235,241,270,279,364,376,386,404,407
e5/m.java, line(s) 102,190,235,400,483,523
e5/n.java, line(s) 41,50
e5/r.java, line(s) 110,123,127,131,135,139,144,148,154
e5/z.java, line(s) 110,113,123,130,135
f8/b.java, line(s) 79,62
f9/f.java, line(s) 95
f9/i.java, line(s) 80
fm/d.java, line(s) 438
g0/d.java, line(s) 91,247
g0/g.java, line(s) 42
g0/l.java, line(s) 183,204,212,264,308,320,333,343
g0/p.java, line(s) 62
g1/a.java, line(s) 690,698,732,744,756,768,780,792,804,816,828,835,844,855,132
g2/o.java, line(s) 382,387,497,525,699,701
g9/c.java, line(s) 48,102
ga/d.java, line(s) 68
gj/d.java, line(s) 56
gj/e.java, line(s) 56,86
h/a.java, line(s) 103
h9/h.java, line(s) 54
hc/a.java, line(s) 34,50,58,81
hj/f.java, line(s) 311,323,334,435
ho/g.java, line(s) 25,31
i5/a.java, line(s) 70,101,108,115
i5/d.java, line(s) 21
i5/j.java, line(s) 39
i8/a.java, line(s) 104,242
ia/b.java, line(s) 75
j2/h.java, line(s) 76
jc/a0.java, line(s) 142
jc/c0.java, line(s) 55,73,94
jc/e0.java, line(s) 80
jc/h0.java, line(s) 63
jc/i0.java, line(s) 89,147,72,72,92
jc/m0.java, line(s) 207,215,106,106
jc/n0.java, line(s) 176,98,117,117
jj/b.java, line(s) 98
jj/e.java, line(s) 23,66
jj/g.java, line(s) 66,69,159,171,180,264
jj/l.java, line(s) 21,28,35,47
jj/q.java, line(s) 49
k0/c.java, line(s) 59
k0/d.java, line(s) 67
k0/h.java, line(s) 321,327,333
k5/e.java, line(s) 35,57,71
k5/f.java, line(s) 11
k5/o.java, line(s) 153
k5/p.java, line(s) 179
k5/r.java, line(s) 92
k5/s.java, line(s) 108,114
l0/h.java, line(s) 70
l0/i.java, line(s) 41
l0/j.java, line(s) 56
l0/n.java, line(s) 105
l4/a.java, line(s) 7,11
l5/e.java, line(s) 49,54,57,65,72
la/e.java, line(s) 194
mediation/ad/c.java, line(s) 98,100
mediation/ad/d.java, line(s) 8,20
mj/a.java, line(s) 385,437
n5/j.java, line(s) 15
net/pubnative/lite/sdk/models/NativeAd.java, line(s) 71
net/pubnative/lite/sdk/mraid/MRAIDView.java, line(s) 187,212,218,224,230,236,242,248,253,257,263,283,299,305,392,397,402,409,412,413,418,424,429,434,442,454,460,465,469,481,487,568,592,598,642,650,651,652,655,676,682,686,711,716,740,759,781,791,849,858,867,874,892,901,930,931,932,933,996,998,1011,1070,1141,1159,1190,1205,1229,1251,1276,1278,1297,1357,1395,1424,1508,1518,1565,1569,1589,1601,1637,1641,1648,1652,1657,1755,1769,1786,1793,1816,1817,1866,1951,1959,1974,1980,1985,2026,2031,2034,2051,2060,2072,2114,2122,2168,2188,2194,2208,2209,955,971,1019,1047,1169,1201,206,1894,1898,1227,2070
net/pubnative/lite/sdk/mraid/internal/MRAIDLog.java, line(s) 45,51
net/pubnative/lite/sdk/mraid/internal/MRAIDNativeFeatureManager.java, line(s) 24,30,36,42,48,54
net/pubnative/lite/sdk/mraid/internal/MRAIDParser.java, line(s) 83,96,105
net/pubnative/lite/sdk/mraid/nativefeature/MRAIDNativeFeatureProvider.java, line(s) 88,83,107,109,167,62,68,75,95,105
net/pubnative/lite/sdk/utils/Logger.java, line(s) 53
net/pubnative/lite/sdk/utils/PNAdvertisingIdClient.java, line(s) 58,91,118,152,160
net/pubnative/lite/sdk/utils/json/JsonModel.java, line(s) 98
net/pubnative/lite/sdk/views/PNAPIContentInfoView.java, line(s) 146
net/pubnative/lite/sdk/vpaid/response/VastProcessor.java, line(s) 105,504,598
o5/j.java, line(s) 56,138
oi/a.java, line(s) 19
oi/c.java, line(s) 125,143,145,163,168,175,181,198,201,235,247,257,275,278
org/greenrobot/greendao/AbstractDao.java, line(s) 481,733,791
org/greenrobot/greendao/DaoException.java, line(s) 28,29
org/greenrobot/greendao/DaoLog.java, line(s) 15,19,27,35,39,43,51,55,23,59,63,67
org/greenrobot/greendao/DbUtils.java, line(s) 65,35
org/greenrobot/greendao/async/AsyncOperationExecutor.java, line(s) 293,303,315,391
org/greenrobot/greendao/internal/LongHashMap.java, line(s) 67
org/greenrobot/greendao/query/QueryBuilder.java, line(s) 102,105
org/greenrobot/greendao/test/AbstractDaoTest.java, line(s) 29,32,61
org/greenrobot/greendao/test/AbstractDaoTestLongPk.java, line(s) 19,24
org/greenrobot/greendao/test/AbstractDaoTestSinglePk.java, line(s) 31
org/greenrobot/greendao/test/DbTest.java, line(s) 64
pm/c.java, line(s) 48,85,85
q2/h.java, line(s) 1018,1021
q5/b.java, line(s) 20
r/l.java, line(s) 27,36,46,55,64,73,82
r/o.java, line(s) 26,35,44
rd/d.java, line(s) 17
ri/a.java, line(s) 156
ri/c.java, line(s) 293
ri/j.java, line(s) 287,383,427,441
s5/a.java, line(s) 63
s8/w2.java, line(s) 26
s8/x2.java, line(s) 25
s8/y1.java, line(s) 81
t2/h.java, line(s) 33,40
t4/a.java, line(s) 275
ti/c.java, line(s) 321,427,470,550,613,683,757,843,908,1078,1126
tl/a0.java, line(s) 446
u0/g0.java, line(s) 387,404
u0/v.java, line(s) 1228,1346
u0/z.java, line(s) 44,53,67,87,101,116,130
u4/d.java, line(s) 99,132
u4/e.java, line(s) 71,95,114
ui/b.java, line(s) 57,78
v0/c.java, line(s) 188
v8/a.java, line(s) 40
w4/c.java, line(s) 104
w4/e.java, line(s) 55,95
wm/i.java, line(s) 272
x/c.java, line(s) 137
x4/h.java, line(s) 378,392,528
x4/i.java, line(s) 55
x4/k.java, line(s) 14
x4/z.java, line(s) 106
x9/b.java, line(s) 64
y/d.java, line(s) 92
y/f.java, line(s) 167
y/g.java, line(s) 214,216
y/h.java, line(s) 31,57
y/i.java, line(s) 121,126
y/k.java, line(s) 93,339
y/l.java, line(s) 129,269,275,283,289,299,305
y/m.java, line(s) 213,217,221
y/n.java, line(s) 470
y/q.java, line(s) 139,141
y/r.java, line(s) 176,178,511
y1/a.java, line(s) 124,230,271,273
y4/i.java, line(s) 137,180
y4/j.java, line(s) 107,121,140,149,181,213,225,242,251
yi/h.java, line(s) 69,111
yi/j.java, line(s) 246,370
z0/c.java, line(s) 163
z4/e.java, line(s) 37,47,73,87
z4/i.java, line(s) 107

信息 应用程序可以写入应用程序目录。敏感信息应加密

应用程序可以写入应用程序目录。敏感信息应加密


Files:
com/fyber/fairbid/cb.java, line(s) 14,14
com/fyber/fairbid/dd.java, line(s) 16,16
com/fyber/fairbid/fk.java, line(s) 17,17
com/fyber/fairbid/internal/c.java, line(s) 24,24
com/fyber/fairbid/pi.java, line(s) 39,39
com/fyber/fairbid/sdk/session/UserSessionStorage.java, line(s) 52,52
com/fyber/fairbid/t0.java, line(s) 15,15
com/fyber/fairbid/x5.java, line(s) 25,25

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/smaato/sdk/core/browser/a.java, line(s) 5,160

信息 此应用程序使用SQL Cipher。SQLCipher为sqlite数据库文件提供256位AES加密

此应用程序使用SQL Cipher。SQLCipher为sqlite数据库文件提供256位AES加密


Files:
org/greenrobot/greendao/database/SqlCipherEncryptedHelper.java, line(s) 15,4,5

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
nn/f.java, line(s) 88,77,86,86
om/c.java, line(s) 109,108,107
om/d.java, line(s) 126,116,136,124,124
om/g.java, line(s) 110,109,108,108
om/h.java, line(s) 233,221,231,231

安全 此应用程序可能具有Root检测功能

此应用程序可能具有Root检测功能
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/apm/insight/nativecrash/c.java, line(s) 536,536,536,536,536

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.lan-sha.com) 通信。

{'ip': '43.255.30.135', 'country_short': 'HK', 'country_long': '中国', 'region': '香港', 'city': '香港', 'latitude': '22.285521', 'longitude': '114.157692'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (app-measurement.com) 通信。

{'ip': '172.217.175.46', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (firebase-settings.crashlytics.com) 通信。

{'ip': '180.163.150.162', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

安全评分: ( MyRecorder 1.01.90.0219)