文件信息
文件名称 RM_677.apk应用信息
应用名称 RM新时代文件列表
证书信息
二进制文件已签名
v1 签名: False
v2 签名: True
v3 签名: False
v4 签名: False
主题: C=6CrK7S7g6CrK7S7g, ST=EuCS8MXbEuCS8MXb, L=Rt4aQH36Rt4aQH36, O=cwpWWy4gcwpWWy4g, OU=BKUp3P8UBKUp3P8U, CN=qQ8rz7VMqQ8rz7VM
签名算法: rsassa_pkcs1v15
有效期自: 2019-01-29 07:26:46+00:00
有效期至: 2069-01-16 07:26:46+00:00
发行人: C=6CrK7S7g6CrK7S7g, ST=EuCS8MXbEuCS8MXb, L=Rt4aQH36Rt4aQH36, O=cwpWWy4gcwpWWy4g, OU=BKUp3P8UBKUp3P8U, CN=qQ8rz7VMqQ8rz7VM
序列号: 0x2e7192d1
哈希算法: sha256
证书MD5: 452e1fb91a108f4fc362961c57b9e2f2
证书SHA1: ac48a0d77f26d779b6ab7ca9a5ad9d8b7f0211ec
证书SHA256: a5cf03565f33ad1052d3f9ec4cff9280c272e55af7f11a1f3e256208aca5dd99
证书SHA512: 4374799803aa4f121c0d030514c9003684d4c6f932512fe2cdc2496096d4137c37463a060d4c996f72ee371d85b15541abf53832548c2b5f88ccf6af96cf3899
公钥算法: rsa
密钥长度: 2048
指纹: baa107bff257cc875c6f2a07d532c67e7f08adc9b1a817741d0ec009d4c08eab
找到 1 个唯一证书应用程序权限
证书安全分析
| 标题 | 严重程度 | 描述信息 |
|---|---|---|
| 已签名应用 | 信息 | 应用程序使用代码签名证书进行签名 |
MANIFEST分析
| 序号 | 问题 | 严重程度 | 描述信息 | 操作 |
|---|---|---|---|---|
| 1 |
应用程序具有网络安全配置 [android:networkSecurityConfig=@xml/network_security_config] |
信息 | 网络安全配置功能让应用程序可以在一个安全的，声明式的配置文件中自定义他们的网络安全设置，而不需要修改应用程序代码。这些设置可以针对特定的域名和特定的应用程序进行配置。 | |
| 2 |
应用程序数据可以被备份 [android:allowBackup=true] |
警告 | 这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。 | |
| 3 |
Service (com.qsf.taogin.service.UPushNotificationService) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.BIND_JOB_SERVICE [android:exported=true] |
警告 | 发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。 | |
| 4 |
Activity设置了TaskAffinity属性 (com.umeng.message.notify.UPushMessageNotifyActivity) |
警告 | 如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名 | |
| 5 |
Activity设置了TaskAffinity属性 (com.umeng.message.UMessageNotifyActivity) |
警告 | 如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名 | |
| 6 |
Activity-Alias (com.umeng.message.UMessageNotifyActivity) 未被保护。 [android:exported=true] |
警告 | 发现 Activity-Alias与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。 | |
| 7 |
Broadcast Receiver (com.taobao.accs.EventReceiver) 未被保护。 [android:exported=true] |
警告 | 发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。 |
可浏览的Activity组件
| ACTIVITY | INTENT |
|---|
网络通信安全
| 序号 | 范围 | 严重级别 | 描述 |
|---|---|---|---|
| 1 | 119.29.29.98 119.28.28.98 | 高 | 域配置不安全地配置为允许明文流量到达范围内的这些域。 |
API调用分析
安全漏洞检测
| 序号 | 问题 | 等级 | 参考标准 | 文件位置 | 操作 |
|---|---|---|---|---|---|
| 1 | 应用程序记录日志信息,不得记录敏感信息 | 信息 |
CWE: CWE-532: 通过日志文件的信息暴露
OWASP MASVS: MSTG-STORAGE-3 |
升级会员：解锁高级权限 | |
| 2 | 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 | 警告 |
CWE: CWE-312: 明文存储敏感信息
OWASP Top 10: M9: Reverse Engineering OWASP MASVS: MSTG-STORAGE-14 |
升级会员：解锁高级权限 | |
| 3 | MD5是已知存在哈希冲突的弱哈希 | 警告 |
CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4 |
升级会员：解锁高级权限 | |
| 4 | SHA-1是已知存在哈希冲突的弱哈希 | 警告 |
CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4 |
升级会员：解锁高级权限 | |
| 5 | 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 | 警告 |
CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2 |
升级会员：解锁高级权限 | |
| 6 | 应用程序使用不安全的随机数生成器 | 警告 |
CWE: CWE-330: 使用不充分的随机数
OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-6 |
升级会员：解锁高级权限 | |
| 7 | 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 | 警告 |
CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2 |
升级会员：解锁高级权限 | |
| 8 | 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 | 警告 |
CWE: CWE-749: 暴露危险方法或函数
OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-7 |
升级会员：解锁高级权限 | |
| 9 | 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 | 警告 |
CWE: CWE-200: 信息泄露
OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-7 |
升级会员：解锁高级权限 | |
| 10 | 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 | 安全 |
OWASP MASVS: MSTG-NETWORK-4 |
升级会员：解锁高级权限 | |
| 11 | 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 | 警告 |
CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当（'SQL 注入'）
OWASP Top 10: M7: Client Code Quality |
升级会员：解锁高级权限 | |
| 12 | IP地址泄露 | 警告 |
CWE: CWE-200: 信息泄露
OWASP MASVS: MSTG-CODE-2 |
升级会员：解锁高级权限 | |
| 13 | 使用弱加密算法 | 高危 |
CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4 |
升级会员：解锁高级权限 | |
| 14 | 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 | 高危 |
CWE: CWE-649: 依赖于混淆或加密安全相关输入而不进行完整性检查
OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-3 |
升级会员：解锁高级权限 | |
| 15 | 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 | 信息 |
OWASP MASVS: MSTG-STORAGE-10 |
升级会员：解锁高级权限 | |
| 16 | 默认情况下，调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知，ECB模式很弱，因为它导致相同明文块的密文相同 | 高危 |
CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-2 |
升级会员：解锁高级权限 | |
| 17 | 应用程序可以写入应用程序目录。敏感信息应加密 | 信息 |
CWE: CWE-276: 默认权限不正确
OWASP MASVS: MSTG-STORAGE-14 |
升级会员：解锁高级权限 | |
| 18 | SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击 | 高危 |
CWE: CWE-295: 证书验证不恰当
OWASP Top 10: M3: Insecure Communication OWASP MASVS: MSTG-NETWORK-3 |
升级会员：解锁高级权限 | |
| 19 | 此应用程序可能会请求root（超级用户）权限 | 警告 |
CWE: CWE-250: 以不必要的权限执行
OWASP MASVS: MSTG-RESILIENCE-1 |
升级会员：解锁高级权限 | |
| 20 | 此应用程序可能具有Root检测功能 | 安全 |
OWASP MASVS: MSTG-RESILIENCE-1 |
升级会员：解锁高级权限 |
Native库安全分析
| 序号 | 动态库 | NX(堆栈禁止执行) | PIE | STACK CANARY(栈保护) | RELRO | RPATH（指定SO搜索路径） | RUNPATH（指定SO搜索路径） | FORTIFY(常用函数加强检查) | SYMBOLS STRIPPED(裁剪符号表) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | arm64-v8a/libtnet-3.1.14.so |
True
info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。 |
动态共享对象 (DSO)
info 共享库是使用 -fPIC 标志构建的，该标志启用与地址无关的代码。这使得面向返回的编程 （ROP） 攻击更难可靠地执行。 |
True
info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出 |
Full RELRO
info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。 |
None
info 二进制文件没有设置运行时搜索路径或RPATH |
None
info 二进制文件没有设置 RUNPATH |
True
info 二进制文件有以下加固函数: ['__strrchr_chk', '__strlen_chk', '__sprintf_chk', '__strchr_chk', '__strcpy_chk'] |
True
info 符号被剥离 |
文件分析
| 序号 | 问题 | 文件 |
|---|---|---|
| 1 | 应用程序内硬编码的证书/密钥文件。 |
res/Tki.pub |
行为分析
| 编号 | 行为 | 标签 | 文件 |
|---|---|---|---|
| 00091 | 从广播中检索数据 |
信息收集 |
升级会员：解锁高级权限 |
| 00013 | 读取文件并将其放入流中 |
文件 |
升级会员：解锁高级权限 |
| 00162 | 创建 InetSocketAddress 对象并连接到它 |
socket |
升级会员：解锁高级权限 |
| 00163 | 创建新的 Socket 并连接到它 |
socket |
升级会员：解锁高级权限 |
| 00022 | 从给定的文件绝对路径打开文件 |
文件 |
升级会员：解锁高级权限 |
| 00012 | 读取数据并放入缓冲流 |
文件 |
升级会员：解锁高级权限 |
| 00063 | 隐式意图（查看网页、拨打电话等） |
控制 |
升级会员：解锁高级权限 |
| 00191 | 获取短信收件箱中的消息 |
短信 |
升级会员：解锁高级权限 |
| 00036 | 从 res/raw 目录获取资源文件 |
反射 |
升级会员：解锁高级权限 |
| 00183 | 获取当前相机参数并更改设置 |
相机 |
升级会员：解锁高级权限 |
| 00125 | 检查给定的文件路径是否存在 |
文件 |
升级会员：解锁高级权限 |
| 00092 | 发送广播 |
命令 |
升级会员：解锁高级权限 |
| 00192 | 获取短信收件箱中的消息 |
短信 |
升级会员：解锁高级权限 |
| 00011 | 从 URI 查询数据（SMS、CALLLOGS） |
短信 通话记录 信息收集 |
升级会员：解锁高级权限 |
| 00077 | 读取敏感数据（短信、通话记录等） |
信息收集 短信 通话记录 日历 |
升级会员：解锁高级权限 |
| 00089 | 连接到 URL 并接收来自服务器的输入流 |
命令 网络 |
升级会员：解锁高级权限 |
| 00046 | 方法反射 |
反射 |
升级会员：解锁高级权限 |
| 00175 | 获取通知管理器并取消通知 |
通知 |
升级会员：解锁高级权限 |
| 00030 | 通过给定的 URL 连接到远程服务器 |
网络 |
升级会员：解锁高级权限 |
| 00109 | 连接到 URL 并获取响应代码 |
网络 命令 |
升级会员：解锁高级权限 |
| 00094 | 连接到 URL 并从中读取数据 |
命令 网络 |
升级会员：解锁高级权限 |
| 00108 | 从给定的 URL 读取输入流 |
网络 命令 |
升级会员：解锁高级权限 |
| 00051 | 通过setData隐式意图（查看网页、拨打电话等） |
控制 |
升级会员：解锁高级权限 |
| 00166 | 获取短信正文并从中检索字符串（可能是 PIN / mTAN） |
短信 PIN码 |
升级会员：解锁高级权限 |
敏感权限分析
恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。
IP地理位置
恶意域名检测
| 域名 | 状态 | 中国境内 | 位置信息 | 解析 |
|---|---|---|---|---|
| c.k33uc.com |
安全 |
否 | 没有可用的地理位置信息。 |
|
| tg.zjqde.cn |
安全 |
否 | 没有可用的地理位置信息。 |
|
| ip-api.com |
安全 |
否 |
IP地址: 208.95.112.1 国家: 美国 地区: 北卡罗来纳州 城市: Skyland 查看: Google 地图 |
|
| www.jihai8.com |
安全 |
是 |
IP地址: 47.95.126.66 国家: 中国 地区: 北京 城市: 北京 查看: 高德地图 |
|
| h5.minod56cqyt.shop |
安全 |
否 |
IP地址: 157.185.156.141 国家: 美国 地区: 加利福尼亚 城市: 圣何塞 查看: Google 地图 |
|
| app.ngnkx.cn |
安全 |
否 | 没有可用的地理位置信息。 |
|
| 2021euapi.k33uc.com |
安全 |
否 | 没有可用的地理位置信息。 |
|
| live.leisu.com |
安全 |
是 |
IP地址: 58.215.157.239 国家: 中国 地区: 江苏 城市: 无锡 查看: 高德地图 |
|
| cn.investing.com |
安全 |
否 |
IP地址: 104.18.32.151 国家: 美国 地区: 加利福尼亚 城市: 旧金山 查看: Google 地图 |
|
| app.tpxdrme.cn |
安全 |
是 |
IP地址: 221.228.32.13 国家: 中国 地区: 江苏 城市: 无锡 查看: 高德地图 |
|
| 2021eu.k33uc.com |
安全 |
否 | 没有可用的地理位置信息。 |
|
| m1.rmnewera.org |
安全 |
否 | 没有可用的地理位置信息。 |
|
| c42cn.com |
安全 |
否 |
IP地址: 157.185.156.141 国家: 美国 地区: 加利福尼亚 城市: 圣何塞 查看: Google 地图 |
|
| testws.ynhpqc.cn |
安全 |
否 |
IP地址: 38.173.73.184 国家: 日本 地区: 东京 城市: 东京 查看: Google 地图 |
|
手机号提取
URL链接分析
| URL信息 | 源码文件 |
|---|---|
|
https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/ederson-moraes_055d6f4.jpg https://www.bola.net/inggris/keberadaan-aguero-dan-jesus-bikin-guardiola-tambah-pusing-9a70ab.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/hl-gomezcahyono_53b50a5.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/175/gareth-bale_87b2388.jpg https://www.bola.net/spanyol/prediksi-villarreal-vs-barcelona-11-desember-2017-1a1d5a.html https://cdns.klimg.com/bola.net/library/upload/21/2017/08/philippe-coutinho_7faa348.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/175/otavio-dutra-1_6e3deef.jpg https://www.bola.net/inggris/direktur-liverpool-pun-gelap-soal-masa-depan-coutinho-6eedb7.html https://cdns.klimg.com/bola.net/library/upload/21/2017/09/otavio-dutra-1_6e3deef.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/asisten-pelatih-pss-_268d57b.jpg https://www.bola.net/inggris/tanda-tanda-evans-ke-city-atau-arsenal-kian-nyata-24a41c.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/mu-city-996x664_2fe9f58.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/eric-bailly_0593ac0.jpg https://www.bola.net/indonesia/kalahkan-pss-sleman-persebaya-berpesta-dalam-celebration-game-f492b5.html https://www.bola.net/inggris/cahill-chelsea-main-di-bawah-standart-e03862.html https://www.bola.net/inggris/januari-liverpool-tak-perlu-repot-cari-pemain-baru-dfebc8.html https://cdns.klimg.com/bola.net/library/upload/21/2017/11/175/hlprancis_77a994e.jpg https://www.bola.net/inggris/demi-derby-manchester-lingard-lupakan-teman-dan-persahabatan-1b85d6.html https://cdns.klimg.com/bola.net/library/upload/21/2017/08/1_1d7e2a8.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/fyodor-smolov_4aaa8b7.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/old-trafford_f666102.jpg https://www.bola.net/inggris/hadapi-derby-mourinho-disarankan-parkir-lukaku-256152.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/theo-walcott_275d82b.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/theo-walcott_275d82b.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/175/zlatan-ibrahimovic_41a1dde.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/persebaya-vs-pss-sle_ba6b0b1.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/10/1_392b6fa.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/1_be6153c.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/irfan-jaya_d75ad59.jpg https://www.bola.net/inggris/derby-manchester-guardiola-tak-ambil-pusing-perkara-rekor-1e8ea2.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/eden-hazard_439141a.jpg https://www.bola.net/inggris/guardiola-sesumbar-de-bruyne-sanggup-lakukan-apapun-ae597d.html https://www.bola.net/italia/ini-alasan-allegri-cadangkan-banyak-bintang-juve-lawan-inter-0bb745.html https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/moreno_27091c8.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/jesse-lingard_52ee20a.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/persib-peduli_0d8bd52.jpg https://www.bola.net/asia/2nd-journalist-games-jadi-ajang-sosialisasi-maskot-inapgoc-4fe28f.html https://www.bola.net/open-play/video-ronaldo-minta-bikin-anak-lagi-pacarnya-cuma-senyum-bc3175.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/selebrasi-gol-toni-k_8491cb7.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/moreno_27091c8.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/andik-vermansah_8bbef45.jpg https://www.bola.net/inggris/digosipkan-pulangkan-gareth-bale-begini-reaksi-bos-spurs-1541a5.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/fc-binjai_328da7d.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/juventus-vs-inter-mi_341f21b.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/mu-city-996x664_2fe9f58.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/10/175/josep-guardiola_a604308.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/hl-mourinho5_53b7f8f.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/175/jose-mourinho_7da9614.jpg https://www.bola.net/inggris/wenger-lempar-handuk-dalam-perburuan-juara-epl-146925.html https://www.bola.net/spanyol/1-babak-5-gol-masih-bukan-yang-terbaik-bagi-zidane-bb08e7.html https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/angel-alfredo-vera_09375d6.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/manchester-united_f1ebb04.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/175/jesse-lingard_52ee20a.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/cristiano-ronaldo_c401207.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/zlatan-ibrahimovic_41a1dde.jpg https://www.bola.net/spanyol/madrid-goda-neymar-dengan-ballon-d-or-bos-psg-beri-reaksi-101992.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/cristiano-ronaldo-vs_5a35ada.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/10/josep-guardiola_a604308.jpg https://www.bola.net/inggris/mourinho-berkeras-juara-epl-belum-digariskan-untuk-mu-d72eb8.html https://cdns.klimg.com/bola.net/library/upload/21/2017/11/marcos-rojo_ba6e126.jpg https://www.bola.net/spanyol/marcelo-kita-beruntung-hidup-di-era-ronaldo-messi-522668.html https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/dani-carvajal_dd46ff2.jpg https://www.bola.net/inggris/ibrahimovic-tak-menyesal-belum-cicipi-juara-liga-champions-e7fe5f.html https://cdns.klimg.com/bola.net/library/upload/21/2017/08/angel-alfredo-vera_09375d6.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/fc-binjai_328da7d.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/asisten-pelatih-pss-_268d57b.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/175/irfan-jaya_d75ad59.jpg https://www.bola.net/bolatainment/kelewat-pede-fans-chelsea-janji-potong-alat-vitalnya-e775c1.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/west-ham-vs-chelsea_d405b56.jpg https://www.bola.net/indonesia/persib-klaim-kasus-mario-gomes-sudah-clear-25b15a.html https://www.bola.net/inggris/detik-detik-derby-merseyside-moreno-alami-cedera-langka-933125.html https://www.bola.net/inggris/derby-manchester-terancam-dibatalkan-karena-masalah-ini-b592eb.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/1_bbf0493.jpg https://www.bola.net/inggris/liverpool-kembali-moncer-ini-rahasianya-f82e94.html https://www.bola.net/inggris/dua-pemuda-ini-dapat-tempat-khusus-di-hati-mourinho-132ae2.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/cristiano-ronaldo-vs_5a35ada.jpg https://www.bola.net/inggris/united-terpaksa-tampil-tanpa-bailly-di-derby-manchester-7c6cfc.html https://www.bola.net/spanyol/lini-serang-mandul-madrid-import-striker-dari-rusia-33f782.html https://cdns.klimg.com/bola.net/library/upload/21/2017/07/175/sam-allardyce-afp_d7647d8.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/06/175/michael-essien-01-fi_30aca24.jpg https://www.bola.net/indonesia/mirip-ronaldo-begini-cara-andik-tanggapi-rumor-soal-bali-united-1b29d3.html https://www.bola.net/indonesia/pss-sleman-bangga-jadi-tamu-kehormatan-persebaya-e4b916.html https://www.bola.net/bolatainment/bersama-alexis-sanchez-aktris-cantik-ini-kembali-temukan-gairah-f7b886.html https://www.bola.net/indonesia/pss-sleman-jadikan-celebration-game-sebagai-ajang-seleksi-8a42be.html https://www.bola.net/inggris/bungkam-chelsea-moyes-puji-spirit-pasukannya-60a501.html https://www.bola.net/indonesia/shohei-matsunaga-boleh-tinggalkan-persib-54408e.html https://www.bola.net/inggris/demi-kalahkan-mu-guardiola-sebut-city-pantang-setengah-hati-36e15a.html https://cdns.klimg.com/bola.net/library/upload/21/2017/09/175/arema-fc_64813c7.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/1_1d7e2a8.jpg https://www.bola.net/inggris/jarang-dimainkan-wenger-hembuskan-angin-surga-pada-pemain-ini-dc8805.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/1_be6153c.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/massimiliano-allegri_4b6da65.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/liverpool-12_00bc111.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/khitan-massal-persib_eaecd71.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/billy-obrien_3d7cb69.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/1_078dd47.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/massimiliano-allegri_4b6da65.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/10/175/josep-guardiola_518db1b.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/paul-pogba_b12f50d.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/175/1_078dd47.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/ederson-moraes_055d6f4.jpg https://www.bola.net/indonesia/sriwijaya-fc-upayakan-naturalisasi-dua-pemain-asing-ini-7aa5fa.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/billy-obrien_3d7cb69.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/hl-solergomez4_f778bae.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/hl-ronaldo4_21d68c2.jpg https://www.bola.net/indonesia/psis-resmi-diperkuat-ruud-gullid-di-liga-1-musim-depan-2efadc.html https://www.bola.net/indonesia/alfredo-vera-ingin-boyong-penyerang-asal-argentina-423407.html https://cdns.klimg.com/bola.net/library/upload/21/2017/11/arsenal_960bfab.jpg https://www.bola.net/inggris/mourinho-anggap-derby-manchester-spesial-alasannya-tak-terduga-c769b7.html https://www.bola.net/bolatainment/via-vallen-pendukung-manchester-united-atau-manchester-city-406d33.html https://cdns.klimg.com/bola.net/library/upload/21/2017/10/175/ronaldo-messi_5b8ab00.jpg https://www.bola.net/inggris/mourinho-anggap-guardiola-diistimewakan-premier-league-e9da9a.html https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/evan-dimas-2_df340a1.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/hl-dafak_57df21d.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/06/jose-mourinho-afp_c2b8c29.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/hl-vilbar_8b04be5.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/10/josep-guardiola_518db1b.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/gennaro-gattuso_f85e7d9.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/175/eric-bailly_0593ac0.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/10/gerard-deulofeu-001-_45a0a56.jpg https://www.bola.net/italia/silva-dan-calhanoglu-terancam-dipinjamkan-3b0697.html http://cdn.link.net/154335.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/10/jose-mourinho_a128fac.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/hlprancis_77a994e.jpg http://purl.org/rss/1.0/modules/content/ https://www.bola.net/indonesia/pss-sleman-diharapkan-susul-persebaya-di-liga-1-f5da8b.html https://www.bola.net/indonesia/persebaya-beri-isyarat-datangkan-pemain-yang-diharamkan-bonek-b1be07.html https://cdns.klimg.com/bola.net/library/upload/21/2017/11/mauricio-pochettino-_fbb6877.jpg https://www.bola.net/inggris/tak-jelas-di-arsenal-wilshere-disarankan-hengkang-02edff.html https://cdns.klimg.com/bola.net/library/upload/21/2017/09/175/arsene-wenger_6451159.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/ancelotti_080ae7d.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/daniel-sturridge-005_0b729d9.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/liverpool-12_00bc111.jpg https://www.bola.net/indonesia/mantan-pemain-bhayangkara-fc-ini-haram-kembali-ke-persebaya-e05418.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/1_61b71a1.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/175/marcos-rojo_ba6e126.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/dani-carvajal_dd46ff2.jpg https://www.bola.net/indonesia/aji-santoso-rekomendasikan-empat-pemain-muda-5e3d3e.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/fyodor-smolov_4aaa8b7.jpg https://www.bola.net/inggris/mourinho-kunci-rapat-rahasia-taktiknya-untuk-derby-manchester-8ebde2.html https://www.bola.net/inggris/mignolet-antusias-sambut-derby-merseyside-62562f.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/josep-guardiola_6872a45.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/manchester-united_f1ebb04.jpg https://www.bola.net/indonesia/lulusan-diklat-persib-ini-menunggu-kepastian-borneo-775d89.html https://www.bola.net/indonesia/pengakuan-jujur-essien-soal-sepakbola-tanah-air-607976.html https://www.bola.net/inggris/sturridge-masuk-radar-klub-spanyol-ini-381cbe.html https://www.bola.net/spanyol/merasa-tidak-adil-madrid-akan-banding-hukuman-carvajal-f60206.html https://www.bola.net/inggris/ederson-optimis-city-patahkan-kutukan-old-trafford-28b4c4.html https://cdns.klimg.com/bola.net/library/upload/21/2017/07/175/borneo-fc_23f149e.jpg https://www.bola.net/spanyol/nacho-inilah-madrid-yang-sesungguhnya-8b7d88.html https://www.bola.net/bolatainment/mengejutkan-pacar-mantan-pemain-man-city-ini-tewas-gantung-diri-3d0e80.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/jonny-evans_1ac83ae.jpg https://www.bola.net/indonesia/juan-revi-dan-jefri-kurniawan-gabung-arema-62d391.html https://www.bola.net/inggris/rojo-sudah-tidak-sabar-bungkam-city-di-old-trafford-3e7fc0.html https://cdns.klimg.com/bola.net/library/upload/21/2017/10/175/jose-mourinho_a128fac.jpg https://www.bola.net/spanyol/nacho-dukung-ronaldo-kembali-tajam-di-la-liga-668bc7.html https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/daniel-sturridge-005_0b729d9.jpg https://www.bola.net/inggris/arsenal-langsung-gelar-pertemuan-usai-kalah-dari-mu-4f9f2a.html https://www.bola.net/inggris/soal-peluang-juara-chelsea-cahill-tunggu-derby-manchester-4722c3.html https://cdns.klimg.com/bola.net/library/upload/21/2017/09/gareth-bale_87b2388.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/07/175/esteban-vizcarra_d5c6664.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/via-vallen_43ba263.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/simon-mignolet_b5eb5f1.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/hl-dafak_57df21d.jpg https://www.bola.net/spanyol/bantai-sevilla-pemain-ini-catatkan-sejarah-baru-di-madrid-37ae65.html https://www.bola.net/spanyol/bukan-bale-mu-ingin-hadirkan-gelandang-bintang-madrid-ini-82e268.html https://www.bola.net/italia/gattuso-lawan-bologna-tak-boleh-gagal-734e3a.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/achraf-hakimi_41812ef.jpg https://www.bola.net/spanyol/kalahkan-sevilla-nacho-sanjung-dua-youngster-madrid-99c9c3.html https://cdns.klimg.com/bola.net/library/upload/21/2017/07/175/1_3441187.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/06/alfredo_eaeefeb.jpg https://www.bola.net/inggris/walcott-tunda-kontrak-baru-di-arsenal-59a9a3.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/1_a32d6bc.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/1_a32d6bc.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/06/175/alfredo_eaeefeb.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/simon-mignolet_b5eb5f1.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/1_61b71a1.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/jose-mourinho_b0bf113.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/achraf-hakimi_41812ef.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/selebrasi-gol-liverp_8705655.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/evan-dimas-2_df340a1.jpg https://www.bola.net/inggris/neville-mu-haram-terpeleset-di-derby-a865b8.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/persebaya-vs-pss-sle_ba6b0b1.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/175/psis-semarang_2ea84a9.jpg https://www.bola.net/italia/napoli-lirik-gerard-deulofeu-2cf8db.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/imam-nahrawi_74f1e8b.jpg https://www.bola.net/bolatainment/real-madrid-foundation-lanjutkan-kerjasama-dengan-issd-foundation-indonesia-f74a4e.html https://www.bola.net/inggris/mignolet-big-sam-buat-everton-jadi-berbahaya-4caf2a.html https://www.bola.net/inggris/ancelotti-pindah-ke-london-tangani-chelsea-atau-arsenal-f38a8c.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/juventus-vs-inter-mi_341f21b.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/old-trafford_f666102.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/hl-neymar_8ae4278.jpg http://wellformedweb.org/CommentAPI/ https://www.bola.net/italia/hasil-pertandingan-juventus-vs-inter-milan-0-0-f2f793.html https://www.bola.net/inggris/neville-lukaku-harus-buktikan-diri-di-derby-manchester-5940e1.html https://www.bola.net/inggris/ini-petuah-conte-agar-hazard-menang-ballon-d-or-accb4e.html https://cdns.klimg.com/bola.net/library/upload/21/2017/10/ronaldo-messi_5b8ab00.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/persib-peduli_0d8bd52.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/10/175/gerard-deulofeu-001-_45a0a56.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/1_cd0266b.jpg https://www.bola.net/inggris/arnautovic-luar-biasa-kami-pantas-menang-eb8b48.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/hl-solergomez4_f778bae.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/06/175/jose-mourinho-afp_c2b8c29.jpg https://www.bola.net/inggris/mourinho-berurai-air-mata-setelah-terima-tawaran-madrid-0f3ead.html https://cdns.klimg.com/bola.net/library/upload/21/2017/10/175/jose-mourinho_285b44f.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/arema-fc_64813c7.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/paul-pogba_b12f50d.jpg https://www.bola.net/inggris/dilarang-putus-asa-arsenal-masih-bisa-juara-premier-league-4c977a.html https://www.bola.net/indonesia/termasuk-evan-dimas-4-pemain-indonesia-ini-masuk-dalam-daftar-25-pemain-terbaik-asia-96a7de.html https://cdns.klimg.com/bola.net/library/upload/21/2017/10/175/1_392b6fa.jpg https://www.bola.net/inggris/klopp-yakinkan-coutinho-liverpool-bisa-wujudkan-ambisinya-0860cc.html https://www.bola.net/olahraga_lain_lain/lolos-final-pansa-fc-dan-ikip-budi-utomo-promosi-ke-liga-1-wpfl-d355e7.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/antonio-conte_0375f9f.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/selebrasi-gol-liverp_8705655.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/cristiano-ronaldo_c401207.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/07/175/lukaku_2b512ec.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/andik-vermansah_8bbef45.jpg https://www.bola.net/bolatainment/belum-disunat-riyad-mahrez-ikut-khitanan-massal-di-bandung-d16d92.html https://cdns.klimg.com/bola.net/library/upload/21/2017/06/michael-essien-01-fi_30aca24.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/hl-gomezcahyono_53b50a5.jpg https://www.bola.net/indonesia/mario-gomes-datang-posisi-herrie-cs-masih-aman-b255ca.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/tim-futsal-putri-bud_cc6ee0e.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/jose-mourinho_7da9614.jpg https://www.bola.net/inggris/kalah-cahill-sindir-taktik-parkir-bus-west-ham-d7a61b.html https://www.bola.net/indonesia/persib-masih-bimbang-pilih-turnamen-pramusim-6c9b0e.html https://cdns.klimg.com/bola.net/library/upload/21/2017/07/borneo-fc_23f149e.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/imam-nahrawi_74f1e8b.jpg https://www.bola.net/inggris/dibekuk-west-ham-ini-alibi-conte-d492ec.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/1_958a505.jpg https://www.bola.net/inggris/tanpa-pogba-mu-diragukan-bisa-kalahkan-city-12c646.html https://www.bola.net/inggris/raksasa-premier-league-saling-sikut-demi-tanda-tangan-modric-cf0c14.html https://www.bola.net/spanyol/hasil-pertandingan-real-madrid-vs-sevilla-skor-5-0-a61624.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/1_bbf0493.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/1_4bc603d.jpg https://www.bola.net/ https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/via-vallen_43ba263.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/psis-semarang_2ea84a9.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/175/mauricio-pochettino-_fbb6877.jpg https://www.bola.net/open-play/highlights-la-liga-real-madrid-5-0-sevilla-7460d4.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/philippe-coutinho-4_a7a03e8.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/gennaro-gattuso_f85e7d9.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/175/hl-neymar_8ae4278.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/mayte-rodriguez_ffccb98.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/175/jack-wilshere-2_c7e9d90.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/ancelotti_080ae7d.jpg https://www.bola.net/inggris/terpeleset-lagi-conte-minta-chelsea-lekas-move-on-101595.html https://www.bola.net/olahraga_lain_lain/kalah-kelas-fc-binjai-dan-dumai-fc-gagal-ke-final-3fabb1.html https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/hl-mourinho5_53b7f8f.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/175/romelu-lukaku-7_a81bbc7.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/selebrasi-gol-toni-k_8491cb7.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/06/175/aji-santoso-1_7401e5f.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/jonny-evans_1ac83ae.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/mayte-rodriguez_ffccb98.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/west-ham-vs-chelsea_d405b56.jpg https://cdns.klimg.com/bola.net/library/logo.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/07/esteban-vizcarra_d5c6664.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/josep-guardiola_6872a45.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/07/lukaku_2b512ec.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/07/sam-allardyce-afp_d7647d8.jpg https://www.bola.net/piala_dunia/thuram-berharap-prancis-juara-di-piala-dunia-2018-1225ec.html https://cdns.klimg.com/bola.net/library/upload/21/2017/09/jack-wilshere-2_c7e9d90.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/1_cd0266b.jpg https://www.bola.net/spanyol/data-dan-fakta-la-liga-villarreal-vs-barcelona-accaa5.html https://cdns.klimg.com/bola.net/library/upload/21/2017/11/175/arsenal_960bfab.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/philippe-coutinho-4_a7a03e8.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/romelu-lukaku-7_a81bbc7.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/07/1_3441187.jpg https://www.bola.net/inggris/mourinho-akui-city-dan-united-sama-sama-bertambah-kuat-898bce.html https://www.bola.net/indonesia/persebaya-tak-enak-hati-lepas-sebagian-pemainnya-9a5e6e.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/hl-teddy_f464bed.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/09/arsene-wenger_6451159.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/eden-hazard_439141a.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/1_958a505.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/10/jose-mourinho_285b44f.jpg https://www.bola.net/bolatainment/karena-bertemu-pemain-persib-bobotoh-ini-mau-disunat-anu-nya-577caa.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/1_4bc603d.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/11/175/jose-mourinho_b0bf113.jpg https://www.bola.net/open-play/highlights-serie-a-juventus-0-0-inter-milan-7dba70.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/tim-futsal-putri-bud_cc6ee0e.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/hl-teddy_f464bed.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/08/175/philippe-coutinho_7faa348.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/hl-vilbar_8b04be5.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/06/aji-santoso-1_7401e5f.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/175/hl-ronaldo4_21d68c2.jpg https://www.bola.net/inggris/hasil-pertandingan-west-ham-vs-chelsea-skor-1-0-736f06.html https://cdns.klimg.com/bola.net/library/upload/21/2017/12/khitan-massal-persib_eaecd71.jpg https://cdns.klimg.com/bola.net/library/upload/21/2017/12/antonio-conte_0375f9f.jpg |
自研引擎-A |
|
wss://testws.ynhpqc.cn?token= |
com/qsf/taogin/websocket/WebSocketManager.java |
|
wss://2021eu.k33uc.com/ws?token= |
com/qsf/taogin/websocket/ChatWebSocketManager.java |
|
https://2021euapi.k33uc.com/api/?token= |
com/qsf/taogin/websocket/BigMatchWebSocketManager.java |
|
43.132.55.55 43.132.43.43 |
com/tencent/msdk/dns/a.java |
|
127.0.0.1 |
com/qsf/taogin/api/TGapiCallback.java |
|
https://h5.minod56cqyt.shop |
com/qsf/taogin/micronet/view/VipDetailFragment.java |
|
https://github.com/tootallnate/java-websocket/wiki/lost-connection-detection |
org/java_websocket/AbstractWebSocket.java |
|
https://cn.investing.com/currency-converter/?tag=cryptocurrency |
com/qsf/taogin/account/view/USDTChargeFragmentV2.java |
|
https://c42cn.com:9888/qsf/iframe/user/login https://tg.zjqde.cn/ |
com/qsf/taogin/utility/CS_contact.java |
|
http://%s:%d/%s |
com/danikula/videocache/f.java |
|
https://app.ngnkx.cn/info/bfwwf/android.html |
com/qsf/taogin/api/HeaderInterceptor.java |
|
http://ip-api.com/ |
com/qsf/taogin/api/RetrofitClient.java |
|
127.0.0.1 http://%s:%d/%s |
com/danikula/videocache/HttpProxyCacheServer.java |
|
https://m1.rmnewera.org |
com/qsf/taogin/Splash/vi/SplashActivity.java |
|
https://c.k33uc.com/?lang= https://www.jihai8.com/zq/ https://live.leisu.com |
com/qsf/taogin/MainActivity.java |
|
https://h5.minod56cqyt.shop |
com/qsf/taogin/micronet/view/RuleWebViewFragment.java |
|
https://%s/d?%s |
com/tencent/msdk/dns/core/n/c/b.java |
|
https://app.tpxdrme.cn/info/erefs |
com/qsf/taogin/SubNetSettings.java |
|
https://h5.minod56cqyt.shop |
com/qsf/taogin/micronet/view/MicronetHelpFragment.java |
|
http://%s/d?%s&alg=des |
com/tencent/msdk/dns/core/n/b/c.java |
|
https://2021euapi.k33uc.com/api/ |
com/qsf/taogin/bigMatch/api/BigMatchLiveRetrofitManager.java |
|
http://%s/d?%s&alg=aes |
com/tencent/msdk/dns/core/n/a/c.java |
|
114.114.114.114 |
自研引擎-S |
Firebase配置检测
邮箱地址提取
| 源码文件 | |
|---|---|
|
this@calendarfragment.requirec |
com/qsf/taogin/micronet/view/CalendarFragment.java |
第三方追踪器
| 名称 | 类别 | 网址 |
|---|---|---|
| Sentry | Crash reporting | https://reports.exodus-privacy.eu.org/trackers/447 |
| Umeng Analytics | https://reports.exodus-privacy.eu.org/trackers/119 | |
| Yueying Crash SDK | Analytics, Crash reporting | https://reports.exodus-privacy.eu.org/trackers/448 |
敏感凭证泄露
活动列表
显示 46 个 activities
服务列表
显示 11 个 services
广播接收者列表
显示 3 个 receivers
内容提供者列表
显示 7 个 providers
第三方SDK
| SDK名称 | 开发者 | 描述信息 |
|---|---|---|
| 岳鹰全景监控 | Alibaba | 岳鹰全景监控，是阿里 UC 官方出品的先进移动应用线上监控平台，为多家知名企业提供服务。 |
| 腾讯云 HTTPDNS | Tencent | HTTPDNS 基于 HTTP 协议向腾讯云的 DNS 服务器发送域名解析请求，替代了基于 DNS 协议向运营商 LocalDNS 发起解析请求的传统方式，可以避免 LocalDNS 造成的域名劫持和跨网访问问题，解决移动互联网服务中域名解析异常带来的困扰。 |
| android-gif-drawable | koral-- | android-gif-drawable 是在 Android 上显示动画 GIF 的绘制库。 |
| RenderScript | Android | RenderScript 是用于在 Android 上以高性能运行计算密集型任务的框架。RenderScript 主要用于数据并行计算，不过串行工作负载也可以从中受益。RenderScript 运行时可在设备上提供的多个处理器（如多核 CPU 和 GPU）间并行调度工作。这样您就能够专注于表达算法而不是调度工作。RenderScript 对于执行图像处理、计算摄影或计算机视觉的应用来说尤其有用。 |
| Sentry | Sentry | Sentry 是一个实时事件日志记录和聚合平台，它专门用于监视错误和提取执行适当的事后操作所需的所有信息。 |
| 移动统计分析 | Umeng | U-App 作为一款专业、免费的移动统计分析产品。在日常业务中帮您解决多种数据相关问题，如数据采集与管理、业务监测、用户行为分析、App 稳定性监控及实现多种运营方案等。助力互联网企业充分挖掘用户行为数据价值，找到产品更新迭代方向，实现精细化运营，全面提升业务增长效能。 |
| 友盟推送 | Umeng | 基于友盟+全域数据建立精准的消息推送平台，为开发者提供更灵活、更智能、更有效的消息推送方案，有效提升用户粘性，提高 App 活跃度。 |
| EasyPermissions | EasyPermissions 是一个包装器库，用于简化针对 Android M 或更高版本的基本系统权限逻辑。 | |
| File Provider | Android | FileProvider 是 ContentProvider 的特殊子类，它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。 |
| Jetpack App Startup | App Startup 库提供了一种直接，高效的方法来在应用程序启动时初始化组件。库开发人员和应用程序开发人员都可以使用 App Startup 来简化启动顺序并显式设置初始化顺序。App Startup 允许您定义共享单个内容提供程序的组件初始化程序，而不必为需要初始化的每个组件定义单独的内容提供程序。这可以大大缩短应用启动时间。 | |
| Picasso | Square | 一个强大的 Android 图片下载缓存库。 |
| Jetpack Media | 与其他应用共享媒体内容和控件。已被 media2 取代。 | |
| Jetpack AppCompat | Allows access to new APIs on older API versions of the platform (many using Material Design). | |
| Jetpack Room | Room 持久性库在 SQLite 的基础上提供了一个抽象层，让用户能够在充分利用 SQLite 的强大功能的同时，获享更强健的数据库访问机制。 |
污点分析
当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……| 规则名称 | 描述信息 | 操作 |
|---|---|---|
| 病毒分析 | 使用安卓恶意软件常用的API进行污点分析 | 开始分析 |
| 漏洞挖掘 | 漏洞挖掘场景下的污点分析 | 开始分析 |
| 隐私合规 | 隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 | 开始分析 |
| 密码分析 | 分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等 | 开始分析 |
| Callback | 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员 | 开始分析 |