APK逆向工程 - "乐享借 v7.9.5" 源码深度安全分析

源码安全分析说明

<manifest xmlns:ns0="http://schemas.android.com/apk/res/android" ns0:versionCode="141" ns0:versionName="7.9.5" ns0:installLocation="0" ns0:compileSdkVersion="30" ns0:compileSdkVersionCodename="11" package="com.lightpalm.fenqia" platformBuildVersionCode="30" platformBuildVersionName="11">
  <uses-sdk ns0:minSdkVersion="21" ns0:targetSdkVersion="30"/>
  <uses-permission ns0:name="android.permission.ACCESS_COARSE_LOCATION"/>
  <uses-permission ns0:name="android.permission.ACCESS_FINE_LOCATION"/>
  <uses-permission ns0:name="android.permission.ACCESS_WIFI_STATE"/>
  <uses-permission ns0:name="android.permission.CHANGE_WIFI_STATE"/>
  <uses-permission ns0:name="android.permission.READ_PHONE_STATE"/>
  <uses-permission ns0:name="android.permission.READ_SMS"/>
  <uses-permission ns0:name="android.permission.INTERNET"/>
  <uses-permission ns0:name="android.permission.CAMERA"/>
  <uses-permission ns0:name="android.permission.WRITE_EXTERNAL_STORAGE"/>
  <uses-permission ns0:name="android.permission.GET_TASKS"/>
  <uses-permission ns0:name="android.permission.ACCESS_NETWORK_STATE"/>
  <uses-permission ns0:name="android.permission.READ_EXTERNAL_STORAGE"/>
  <uses-permission ns0:name="android.permission.ACCESS_LOCATION_EXTRA_COMMANDS"/>
  <uses-permission ns0:name="android.permission.REQUEST_INSTALL_PACKAGES"/>
  <uses-permission ns0:name="android.permission.READ_CONTACTS"/>
  <uses-permission ns0:name="android.permission.WRITE_CALL_LOG"/>
  <uses-permission ns0:name="android.permission.READ_CALL_LOG"/>
  <uses-permission ns0:name="android.permission.CHANGE_NETWORK_STATE"/>
  <uses-permission ns0:name="android.permission.RECORD_AUDIO"/>
  <uses-permission ns0:name="android.permission.WRITE_SETTINGS"/>
  <uses-permission ns0:name="com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA"/>
  <uses-permission ns0:name="android.permission.QUERY_ALL_PACKAGES"/>
  <uses-permission ns0:name="android.permission.GET_TASKS"/>
  <uses-feature ns0:name="android.hardware.camera" ns0:required="True"/>
  <supports-screens ns0:anyDensity="True" ns0:smallScreens="True" ns0:normalScreens="True" ns0:largeScreens="True" ns0:resizeable="True"/>
  <uses-permission ns0:name="com.asus.msa.SupplementaryDID.ACCESS"/>
  <uses-permission ns0:name="freemme.permission.msa"/>
  <uses-permission ns0:name="android.permission.WAKE_LOCK"/>
  <uses-permission ns0:name="android.permission.BROADCAST_PACKAGE_ADDED"/>
  <uses-permission ns0:name="android.permission.BROADCAST_PACKAGE_CHANGED"/>
  <uses-permission ns0:name="android.permission.BROADCAST_PACKAGE_INSTALL"/>
  <uses-permission ns0:name="android.permission.BROADCAST_PACKAGE_REPLACED"/>
  <uses-permission ns0:name="android.permission.RESTART_PACKAGES"/>
  <uses-permission ns0:name="com.lightpalm.fenqia.permission.MIPUSH_RECEIVE"/>
  <uses-permission ns0:name="com.google.android.gms.permission.AD_ID"/>
  <application ns0:theme="0x7f0d0005" ns0:label="乐享借" ns0:icon="0x7f06007b" ns0:name="com.lightpalm.daidai.MyApp" ns0:testOnly="False" ns0:allowBackup="True" ns0:largeHeap="True" ns0:supportsRtl="True" ns0:networkSecurityConfig="0x7f0f0001">
    <activity ns0:name="com.lightpalm.daidai.webview.LDPrivacyActivity" ns0:exported="False"/>
    <activity ns0:theme="0x7f0d0006" ns0:name="com.lightpalm.daidai.loan.launch.LaunchActivity" ns0:screenOrientation="1">
      <intent-filter>
        <action ns0:name="android.intent.action.MAIN"/>
        <category ns0:name="android.intent.category.LAUNCHER"/>
      </intent-filter>
      <intent-filter>
        <action ns0:name="android.intent.action.VIEW"/>
        <category ns0:name="android.intent.category.DEFAULT"/>
        <category ns0:name="android.intent.category.BROWSABLE"/>
        <data ns0:scheme="fenqi" ns0:host="loan" ns0:path="/splash"/>
      </intent-filter>
    </activity>
    <activity ns0:name="com.lightpalm.daidai.loan.login.LoginActivity" ns0:screenOrientation="1" ns0:windowSoftInputMode="0x14"/>
    <receiver ns0:name="com.lightpalm.daidai.http.download.receivers.ApkInstallReceiver">
      <intent-filter>
        <action ns0:name="android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED"/>
        <action ns0:name="android.intent.action.DOWNLOAD_COMPLETE"/>
      </intent-filter>
    </receiver>
    <service ns0:name="com.taobao.accs.ChannelService" ns0:exported="False"/>
    <service ns0:name="com.taobao.accs.data.MsgDistributeService" ns0:exported="False"/>
    <receiver ns0:name="com.taobao.accs.EventReceiver" ns0:exported="False"/>
    <receiver ns0:name="com.taobao.accs.ServiceReceiver" ns0:exported="False"/>
    <service ns0:name="org.android.agoo.accs.AgooService" ns0:exported="False"/>
    <service ns0:name="com.umeng.message.UmengIntentService" ns0:exported="False"/>
    <service ns0:name="com.umeng.message.XiaomiIntentService" ns0:exported="False"/>
    <receiver ns0:name="com.taobao.agoo.AgooCommondReceiver" ns0:exported="False"/>
    <service ns0:name="com.umeng.message.UmengMessageIntentReceiverService" ns0:exported="False"/>
    <provider ns0:name="android.support.v4.content.FileProvider" ns0:exported="False" ns0:authorities="com.lightpalm.fenqia.fileprovider" ns0:grantUriPermissions="True">
      <meta-data ns0:name="android.support.FILE_PROVIDER_PATHS" ns0:resource="0x7f0f0000"/>
    </provider>
    <activity ns0:name="com.lightpalm.daidai.loan.download.DownloadActivity" ns0:screenOrientation="1"/>
    <activity ns0:name="com.lightpalm.daidai.loan.login.LoginInputActivity" ns0:launchMode="2" ns0:screenOrientation="1" ns0:windowSoftInputMode="0x14"/>
    <activity ns0:theme="0x1030006" ns0:name="com.alipay.sdk.app.H5PayActivity" ns0:exported="False" ns0:screenOrientation="3" ns0:configChanges="0x4e0" ns0:windowSoftInputMode="0x12"/>
    <activity ns0:theme="0x1030006" ns0:name="com.alipay.sdk.app.H5AuthActivity" ns0:exported="False" ns0:screenOrientation="3" ns0:configChanges="0xe0" ns0:windowSoftInputMode="0x12"/>
    <activity ns0:theme="0x103000f" ns0:name="com.lightpalm.daidai.wxapi.WXPayEntryActivity" ns0:exported="True" ns0:launchMode="1">
      <intent-filter>
        <action ns0:name="android.intent.action.VIEW"/>
        <category ns0:name="android.intent.category.DEFAULT"/>
        <data ns0:scheme="wx4c555b67e97b2233"/>
      </intent-filter>
    </activity>
    <activity ns0:theme="0x1030010" ns0:name="com.lightpalm.daidai.wxapi.WXEntryActivity" ns0:exported="True" ns0:configChanges="0x4a0"/>
    <activity ns0:theme="0x103000f" ns0:name="com.lightpalm.fenqia.wxapi.WXPayEntryActivity" ns0:exported="True" ns0:launchMode="1">
      <intent-filter>
        <action ns0:name="android.intent.action.VIEW"/>
        <category ns0:name="android.intent.category.DEFAULT"/>
        <data ns0:scheme="wx4c555b67e97b2233"/>
      </intent-filter>
    </activity>
    <activity ns0:theme="0x1030010" ns0:name="com.luo.CashPocket.wxapi.WXEntryActivity" ns0:exported="True" ns0:configChanges="0x4a0"/>
    <activity ns0:theme="0x103000f" ns0:name="com.luo.CashPocket.wxapi.WXPayEntryActivity" ns0:exported="True" ns0:launchMode="1">
      <intent-filter>
        <action ns0:name="android.intent.action.VIEW"/>
        <category ns0:name="android.intent.category.DEFAULT"/>
        <data ns0:scheme="wx4c555b67e97b2233"/>
      </intent-filter>
    </activity>
    <activity ns0:theme="0x1030010" ns0:name="com.lightpalm.fenqia.wxapi.WXEntryActivity" ns0:exported="True" ns0:configChanges="0x4a0"/>
    <activity ns0:theme="0x7f0d016b" ns0:name="com.cmic.sso.sdk.activity.LoginAuthActivity" ns0:screenOrientation="3"/>
    <activity ns0:name="com.lightpalm.daidai.webview.WebAppActivity" ns0:screenOrientation="1"/>
    <activity ns0:name="com.lightpalm.daidai.webview.MainActivity" ns0:launchMode="2" ns0:screenOrientation="1"/>
    <meta-data ns0:name="android.max_aspect" ns0:value="2"/>
    <activity ns0:theme="0x7f0d016c" ns0:name="com.megvii.meglive_sdk.detect.fmp.FmpLivenessActivity" ns0:screenOrientation="1" ns0:configChanges="0x4a0" ns0:hardwareAccelerated="True"/>
    <activity ns0:theme="0x7f0d016c" ns0:name="com.megvii.meglive_sdk.detect.action.ActionLivenessActivity" ns0:screenOrientation="1" ns0:configChanges="0x4a0" ns0:hardwareAccelerated="True"/>
    <activity ns0:theme="0x7f0d016c" ns0:name="com.megvii.meglive_sdk.detect.color.FmpColorfulActivity" ns0:screenOrientation="1" ns0:configChanges="0x4a0"/>
    <activity ns0:theme="0x103000d" ns0:name="com.megvii.meglive_sdk.detect.guide.GrantActivity" ns0:screenOrientation="1" ns0:configChanges="0x4a0"/>
    <activity ns0:theme="0x103000d" ns0:name="com.megvii.meglive_sdk.detect.agreement.UserAgreementActivity" ns0:configChanges="0x4a0"/>
    <uses-library ns0:name="org.apache.http.legacy" ns0:required="False"/>
    <activity ns0:theme="0x1030010" ns0:name="com.alipay.sdk.app.PayResultActivity" ns0:exported="True" ns0:launchMode="3" ns0:configChanges="0x4e0"/>
    <activity ns0:theme="0x1030010" ns0:name="com.alipay.sdk.app.AlipayResultActivity" ns0:exported="True" ns0:launchMode="2"/>
    <activity ns0:name="com.alipay.sdk.app.H5OpenAuthActivity" ns0:exported="False" ns0:screenOrientation="3" ns0:configChanges="0x4e0" ns0:windowSoftInputMode="0x12"/>
    <activity ns0:theme="0x1030010" ns0:name="com.alipay.sdk.app.APayEntranceActivity" ns0:exported="False" ns0:configChanges="0x4e0"/>
    <meta-data ns0:name="wb_version_WbCloudFaceLiveSdk" ns0:value="v4.3.2.1.0-c2aa557"/>
    <activity ns0:theme="0x7f0d0175" ns0:name="com.webank.facelight.ui.FaceVerifyActivity" ns0:exported="False" ns0:launchMode="1" ns0:screenOrientation="1" ns0:configChanges="0xd00"/>
    <activity ns0:theme="0x7f0d0172" ns0:name="com.webank.facelight.ui.FaceGuideActivity" ns0:exported="False" ns0:screenOrientation="1"/>
    <activity ns0:theme="0x7f0d0175" ns0:name="com.webank.facelight.ui.FaceProtocalActivity" ns0:exported="False" ns0:screenOrientation="1"/>
    <meta-data ns0:name="android.webkit.WebView.EnableSafeBrowsing" ns0:value="True"/>
    <meta-data ns0:name="wb_version_WbCloudFaceSdk" ns0:value="v4.3.2.1-33bcd587"/>
    <meta-data ns0:name="wb_version_simplewa" ns0:value="v1.2.0-c5ce045"/>
    <meta-data ns0:name="wb_version_wecamera" ns0:value="v1.0.46-1cc4763"/>
    <meta-data ns0:name="wb_version_WbCloudNormal" ns0:value="v5.0.8-fac9c59"/>
    <activity ns0:theme="0x1030007" ns0:name="com.webank.mbank.ocr.ui.CaptureActivity" ns0:exported="False" ns0:screenOrientation="1" ns0:configChanges="0x4a0" ns0:windowSoftInputMode="0x3"/>
    <activity ns0:theme="0x1030009" ns0:name="com.webank.mbank.ocr.ui.IDCardEditActivity" ns0:exported="False" ns0:launchMode="2" ns0:screenOrientation="1" ns0:configChanges="0x4a0"/>
    <activity ns0:theme="0x1030009" ns0:name="com.webank.mbank.ocr.ui.VehicleLicenseActivity" ns0:exported="False" ns0:launchMode="2" ns0:screenOrientation="1" ns0:configChanges="0x4a0"/>
    <activity ns0:theme="0x1030009" ns0:name="com.webank.mbank.ocr.ui.OcrProtocalActivity" ns0:exported="False" ns0:launchMode="2" ns0:configChanges="0x4a0"/>
    <activity ns0:theme="0x1030009" ns0:name="com.webank.mbank.ocr.ui.OcrGuideActivity" ns0:exported="False" ns0:launchMode="2" ns0:screenOrientation="1" ns0:configChanges="0x4a0"/>
    <meta-data ns0:name="wb_version_WbCloudOcrSdk" ns0:value="v2.7.4-649f0e0"/>
    <activity ns0:name="com.megvii.idcardlib.IDCardDetectActivity" ns0:launchMode="2" ns0:screenOrientation="1" ns0:configChanges="0x4a0"/>
    <provider ns0:name="android.arch.lifecycle.ProcessLifecycleOwnerInitializer" ns0:exported="False" ns0:multiprocess="True" ns0:authorities="com.lightpalm.fenqia.lifecycle-trojan"/>
    <meta-data ns0:name="com.huawei.hms.client.appid" ns0:value="100880491"/>
    <service ns0:name="com.taobao.accs.internal.AccsJobService" ns0:permission="android.permission.BIND_JOB_SERVICE" ns0:exported="False" ns0:process=":channel"/>
    <service ns0:name="com.taobao.accs.ChannelService$KernelService" ns0:exported="False" ns0:process=":channel"/>
    <receiver ns0:name="com.umeng.message.NotificationProxyBroadcastReceiver" ns0:exported="False"/>
    <service ns0:name="com.umeng.message.UmengMessageCallbackHandlerService" ns0:permission="android.permission.BIND_JOB_SERVICE" ns0:exported="False">
      <intent-filter>
        <action ns0:name="com.umeng.messge.registercallback.action"/>
      </intent-filter>
      <intent-filter>
        <action ns0:name="com.umeng.message.enablecallback.action"/>
      </intent-filter>
      <intent-filter>
        <action ns0:name="com.umeng.message.disablecallback.action"/>
      </intent-filter>
      <intent-filter>
        <action ns0:name="com.umeng.message.message.handler.action"/>
      </intent-filter>
      <intent-filter>
        <action ns0:name="com.umeng.message.message.sendmessage.action"/>
      </intent-filter>
    </service>
    <service ns0:name="com.umeng.message.UmengDownloadResourceService" ns0:permission="android.permission.BIND_JOB_SERVICE" ns0:exported="False"/>
    <provider ns0:name="com.umeng.message.provider.MessageProvider" ns0:exported="False" ns0:authorities="com.lightpalm.fenqia.umeng.message">
      <grant-uri-permission ns0:pathPattern=".*"/>
    </provider>
    <activity ns0:theme="0x7f0d015d" ns0:name="com.mobile.auth.gatewayauth.LoginAuthActivity" ns0:exported="False" ns0:launchMode="1" ns0:screenOrientation="3" ns0:configChanges="0x4a0"/>
    <activity ns0:theme="0x7f0d015d" ns0:name="com.mobile.auth.gatewayauth.PrivacyDialogActivity" ns0:exported="False" ns0:launchMode="1" ns0:screenOrientation="3" ns0:configChanges="0x4a0"/>
    <activity ns0:name="com.mobile.auth.gatewayauth.activity.AuthWebVeiwActivity" ns0:exported="False" ns0:launchMode="1" ns0:screenOrientation="3" ns0:configChanges="0x4a0"/>
    <activity ns0:name="com.tencent.tauth.AuthActivity" ns0:launchMode="2" ns0:noHistory="True">
      <intent-filter>
        <action ns0:name="android.intent.action.VIEW"/>
        <category ns0:name="android.intent.category.DEFAULT"/>
        <category ns0:name="android.intent.category.BROWSABLE"/>
        <data ns0:scheme="tencent1109435235"/>
      </intent-filter>
    </activity>
    <activity ns0:theme="0x1030010" ns0:name="com.tencent.connect.common.AssistActivity" ns0:screenOrientation="3" ns0:configChanges="0xa0"/>
  </application>
</manifest>