温馨提示：本平台仅供研究软件风险、安全评估，禁止用于非法用途。由于展示的数据过于全面，请耐心等待加载完成。如有疑问或建议， 可加入我们的微信群讨论

APP评分

病毒检测 文件安全

安全评分

文件信息

文件名称 com.chrisklimowski.otteretto v3.3.1.apk
文件大小 9.25MB
MD5 2295ee6ac84d61e12d0fa3df96db7b91
SHA1 464175fa11544a10e47c94443f5a21e134e6c1d0
SHA256 70717be11648878b56f245f404ee01123a9a569afb3cd7e1e730882f18d32eea

应用信息

应用名称 Otteretto
包名 com.chrisklimowski.otteretto
主活动 com.chrisklimowski.otteretto.MainActivity
目标SDK 33     最小SDK 22
版本号 3.3.1     子版本号 11
加固信息 未加壳

GooglePlay应用信息

标题 Otteretto
评分 4.4102564
安装 1,000+   次下载
价格 0
Android版本支持
分类 益智
Play 商店链接 com.chrisklimowski.otteretto
开发者 Chris Klimowski
开发者 ID Chris+Klimowski
开发者 地址 None
开发者 主页 https://otteretto.app/
开发者 Email contact@chrisklimowski.com
发布日期 2022年8月26日
隐私政策 Privacy link

关于此应用 
Otteretto 是一款关于回文（和水獭）的益智游戏。

新的拼图概念

这不是另一个匹配 3 游戏；这是一个全新的想法！你能做出多长的回文？

5 种无限重玩的游戏模式

经典：尝试在令人上瘾的原始模式中达到每个级别的得分目标。

每日堆栈：每天参加全球比赛！你和其他人一样可以从同一组正方形中得到多少分？

谜题：使用逻辑推理来弄清楚如何将一组正方形变成一个巨大的回文！

遏制：随着每一步添加更多的方块，你可以保持容器不溢出多长时间？

墙壁：在这个具有挑战性的变体中，您需要发挥创造力来绕过每个级别的不可逾越的墙壁。

与世界竞争

看看您如何在在线跨平台排行榜上排名靠前！

无广告，无微交易

免费玩经典模式和每日堆栈，没有限制！如果您喜欢这些，则可以购买完整游戏以永久解锁其余游戏。

组件导出信息

查看
查看
查看
查看

扫描选项

重新扫描 管理规则  动态分析

反编译代码

Manifest文件 查看
APK文件 下载
Java源代码 查看 -- 下载

证书信息 

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: True
v4 签名: False
主题: C=US, ST=California, L=Mountain View, O=Google Inc., OU=Android, CN=Android
签名算法: rsassa_pkcs1v15
有效期自: 2022-03-27 05:16:53+00:00
有效期至: 2052-03-27 05:16:53+00:00
发行人: C=US, ST=California, L=Mountain View, O=Google Inc., OU=Android, CN=Android
序列号: 0x127aedc1a920afdd4b8835d80e017356b8db2f88
哈希算法: sha256
证书MD5: 8501efab0c7f5acb23d7a56c92634fae
证书SHA1: ae3accecdf94cc1bca7025131901f630c03dd7f8
证书SHA256: a2f2de6d891b7ec8b0af586cf684c16f4ae6a9abb3c8dc13ce69a921f17103d3
证书SHA512: 9fcec1e399824aa2cfbe1d0f829e3336b956e9acb526dadaf802a5e845739761d6a3d2101fcdcfd232b991a74b82d059e5dca920b1003fe6b20944a5a234d0b1
公钥算法: rsa
密钥长度: 4096
指纹: 8c0069d7baaba2cc2a93d3b774998464d7b3f48924c8a7bdfaefd79ee7004f47
找到 1 个唯一证书

应用程序权限

权限名称 安全等级 权限内容 权限描述 关联代码
android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
com.android.vending.BILLING 普通 应用程序具有应用内购买 允许应用程序从 Google Play 进行应用内购买。

证书分析

高危
0
警告
1
信息
1
标题 严重程度 描述信息
已签名应用 信息 应用程序已使用代码签名证书进行签名

MANIFEST分析

高危
0
警告
1
信息
0
屏蔽
0
序号 问题 严重程度 描述信息 操作
1 应用程序可以安装在有漏洞的已更新 Android 版本上
Android 5.1-5.1.1, [minSdk=22] 		信息 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
对应用 com.chrisklimowski.otteretto 禁止使用 vulnerable_os_version 规则
2 应用程序数据可以被备份
[android:allowBackup=true] 		警告 这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。
对应用 com.chrisklimowski.otteretto 禁止使用 app_allowbackup 规则

可浏览的ACTIVITIES

ACTIVITY INTENT

网络安全配置

序号 范围 严重级别 描述

API调用分析

API功能 源码文件
DEX-> 动态加载 com/getcapacitor/AndroidProtocolHandler.java
一般功能-> 文件操作
JavaScript 接口方法 com/getcapacitor/MessageHandler.java
com/getcapacitor/plugin/CapacitorCookies.java
com/getcapacitor/plugin/CapacitorHttp.java
组件-> 启动 Activity cc/fovea/PurchasePlugin.java
com/getcapacitor/Bridge.java
com/getcapacitor/Plugin.java
一般功能-> IPC通信
网络通信-> WebView JavaScript接口
网络通信-> WebView 相关 com/getcapacitor/Bridge.java
com/getcapacitor/BridgeWebViewClient.java
com/getcapacitor/cordova/MockCordovaWebViewImpl.java
加密解密-> 信息摘要算法 com/getcapacitor/AppUUID.java
网络通信-> TCP套接字 com/getcapacitor/Bridge.java
网络通信-> HTTP建立连接
网络通信-> URLConnection com/getcapacitor/WebViewLocalServer.java
加密解密-> Base64 加密 com/getcapacitor/WebViewLocalServer.java
com/getcapacitor/plugin/util/HttpRequestHandler.java
调用java反射机制

源代码分析

高危
0
警告
3
信息
1
安全
0
屏蔽
0
序号 问题 等级 参考标准 文件位置 操作
1 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
OWASP MASVS: MSTG-STORAGE-3 		cc/fovea/PurchasePlugin.java
com/getcapacitor/Logger.java
com/getcapacitor/plugin/CapacitorHttp.java
Suppress the rule android_logging in com.chrisklimowski.otteretto Suppress the rule android_logging in com.chrisklimowski.otteretto only from these files
2 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
OWASP Top 10: M9: Reverse Engineering
OWASP MASVS: MSTG-STORAGE-14 		com/getcapacitor/AppUUID.java
com/getcapacitor/Bridge.java
com/getcapacitor/Plugin.java
Suppress the rule android_hardcoded in com.chrisklimowski.otteretto Suppress the rule android_hardcoded in com.chrisklimowski.otteretto only from these files
3 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2 		com/getcapacitor/BridgeWebChromeClient.java
com/getcapacitor/FileUtils.java
Suppress the rule android_read_write_external in com.chrisklimowski.otteretto Suppress the rule android_read_write_external in com.chrisklimowski.otteretto only from these files
4 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2 		com/getcapacitor/BridgeWebChromeClient.java
Suppress the rule android_temp_file in com.chrisklimowski.otteretto Suppress the rule android_temp_file in com.chrisklimowski.otteretto only from these files

动态库分析

No Shared Objects found.
序号 动态库 NX(堆栈禁止执行) STACK CANARY(栈保护) RELRO RPATH（指定SO搜索路径） RUNPATH（指定SO搜索路径） FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)

文件分析

序号 问题 文件

VIRUSTOTAL扫描

  检出率： 0 / 67       完整报告

滥用权限

恶意软件常用权限 0/30
其它常用权限 1/46
android.permission.INTERNET

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地图

域名检测

手机号码

网址

网址信息 源码文件
https://github.com/j3k0/cordova-plugin-purchase/issues/777
https://github.com/jashkenas/underscore
http://billing.fovea.cc/
https://capacitorjs.com/
https://phaser.io
https://billing.fovea.cc
http://jsperf.com/b64tests
https://github.com/j3k0/cordova-plugin-purchase/wiki/HOWTO
https://validator.fovea.cc
https://github.com/j3k0/cordova-plugin-purchase/blob/master/doc/ios.md
https://github.com/pvorb/node-md5
https://github.com/DomenicoDeFelice/jsrand
https://developer.apple.com/library/ios/releasenotes/General/ValidateAppStoreReceipt/Chapters/ReceiptFields.html
https://developer.apple.com/videos/play/wwdc2019/305/
https://otteretto.app
https://stackoverflow.com/questions/29249132/wkwebview-complex-communication-between-javascript-native-code/49474323
https://developer.apple.com/app-store/subscriptions/
https://github.com/auth0/auth0-cordova/issues/46
自研引擎-A
http://play.google.com/store/paymentmethods
http://play.google.com/store/account/subscriptions
cc/fovea/PurchasePlugin.java
http://play.google.com/store/paymentmethods
http://play.google.com/store/account/subscriptions
自研引擎-S

FIREBASE实例

邮箱

追踪器

名称 类别 网址

密钥凭证

字符串列表

建议导出为TXT，方便查看。

活动列表

已显示 2 个activities
1、 com.chrisklimowski.otteretto.MainActivity
2、 com.android.billingclient.api.ProxyBillingActivity

服务列表

广播接收者列表

内容提供者列表

已显示 2 个providers
1、 androidx.core.content.FileProvider
2、 androidx.startup.InitializationProvider

第三方SDK

SDK名称 开发者 描述信息
Google Play Billing Google Google Play 结算服务可让您在 Android 上销售数字内容。本文档介绍了 Google Play 结算服务解决方案的基本构建基块。要决定如何实现特定的 Google Play 结算服务解决方案，您必须了解这些构建基块。
File Provider Android FileProvider 是 ContentProvider 的特殊子类，它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
Jetpack App Startup Google App Startup 库提供了一种直接，高效的方法来在应用程序启动时初始化组件。库开发人员和应用程序开发人员都可以使用 App Startup 来简化启动顺序并显式设置初始化顺序。App Startup 允许您定义共享单个内容提供程序的组件初始化程序，而不必为需要初始化的每个组件定义单独的内容提供程序。这可以大大缩短应用启动时间。

文件列表

AndroidManifest.xml
META-INF/androidx.activity_activity.version
META-INF/androidx.annotation_annotation-experimental.version
META-INF/androidx.appcompat_appcompat-resources.version
META-INF/androidx.appcompat_appcompat.version
META-INF/androidx.arch.core_core-runtime.version
META-INF/androidx.coordinatorlayout_coordinatorlayout.version
META-INF/androidx.core_core-ktx.version
META-INF/androidx.core_core-splashscreen.version
META-INF/androidx.core_core.version
META-INF/androidx.cursoradapter_cursoradapter.version
META-INF/androidx.customview_customview.version
META-INF/androidx.drawerlayout_drawerlayout.version
META-INF/androidx.emoji2_emoji2-views-helper.version
META-INF/androidx.emoji2_emoji2.version
META-INF/androidx.fragment_fragment.version
META-INF/androidx.interpolator_interpolator.version
META-INF/androidx.lifecycle_lifecycle-livedata-core.version
META-INF/androidx.lifecycle_lifecycle-livedata.version
META-INF/androidx.lifecycle_lifecycle-process.version
META-INF/androidx.lifecycle_lifecycle-runtime.version
META-INF/androidx.lifecycle_lifecycle-viewmodel-savedstate.version
META-INF/androidx.lifecycle_lifecycle-viewmodel.version
META-INF/androidx.loader_loader.version
META-INF/androidx.savedstate_savedstate.version
META-INF/androidx.startup_startup-runtime.version
META-INF/androidx.tracing_tracing.version
META-INF/androidx.vectordrawable_vectordrawable-animated.version
META-INF/androidx.vectordrawable_vectordrawable.version
META-INF/androidx.versionedparcelable_versionedparcelable.version
META-INF/androidx.viewpager_viewpager.version
META-INF/androidx.webkit_webkit.version
META-INF/com/android/build/gradle/app-metadata.properties
assets/capacitor.config.json
assets/capacitor.plugins.json
assets/dexopt/baseline.prof
assets/dexopt/baseline.profm
assets/native-bridge.js
assets/public/cordova.js
assets/public/cordova_plugins.js
assets/public/dist/1.game.js
assets/public/dist/game.js
assets/public/font/info.fnt
assets/public/font/info.png
assets/public/font/info_big.fnt
assets/public/font/info_big.png
assets/public/font/info_bold.fnt
assets/public/font/info_bold.png
assets/public/font/info_bold_big.fnt
assets/public/font/info_bold_big.png
assets/public/font/score.fnt
assets/public/font/score.png
assets/public/font/score_big.fnt
assets/public/font/score_big.png
assets/public/glsl/underwater.frag
assets/public/img/9-by-16-button.png
assets/public/img/achievement-block.png
assets/public/img/achievements-button.png
assets/public/img/achievements-meter-inside.png
assets/public/img/achievements-meter.png
assets/public/img/ambiance-button.png
assets/public/img/arrow-button.png
assets/public/img/arrow-up.png
assets/public/img/back-button.png
assets/public/img/back-to-map-button.png
assets/public/img/blank-difficulty.png
assets/public/img/bubble.png
assets/public/img/button-ripple.png
assets/public/img/check-button.png
assets/public/img/checkbox.png
assets/public/img/classic-button.png
assets/public/img/clear-all-notes-button.png
assets/public/img/connection.png
assets/public/img/container-3x4.png
assets/public/img/container.png
assets/public/img/containment-button.png
assets/public/img/containment.png
assets/public/img/countdown-button.png
assets/public/img/credits-button.png
assets/public/img/daily-stack-button.png
assets/public/img/daily-stack.png
assets/public/img/difficult-button.png
assets/public/img/easy-button.png
assets/public/img/end-game-button.png
assets/public/img/exit-button.png
assets/public/img/fit-to-screen-button.png
assets/public/img/full-leaderboard-button.png
assets/public/img/full-screen-button.png
assets/public/img/game-over.png
assets/public/img/give-up-button.png
assets/public/img/globe-button.png
assets/public/img/glow.png
assets/public/img/go-button.png
assets/public/img/high-scores-button.png
assets/public/img/highlight.png
assets/public/img/hooray-button.png
assets/public/img/how-to-play-button.png
assets/public/img/labyrinth-button.png
assets/public/img/labyrinth.png
assets/public/img/lets-start-button.png
assets/public/img/loading-small.png
assets/public/img/loading.png
assets/public/img/locked.png
assets/public/img/logo-symmetrical.png
assets/public/img/logo.png
assets/public/img/main-menu-button.png
assets/public/img/medium-button.png
assets/public/img/menu-button.png
assets/public/img/meter-glow.png
assets/public/img/meter-inside-tall.png
assets/public/img/meter-inside.png
assets/public/img/meter-tall.png
assets/public/img/meter.png
assets/public/img/minus-button.png
assets/public/img/music-button.png
assets/public/img/next-button.png
assets/public/img/nightmarish-button.png
assets/public/img/note.png
assets/public/img/off-button.png
assets/public/img/okay-button.png
assets/public/img/on-button.png
assets/public/img/options-button.png
assets/public/img/options-text-button.png
assets/public/img/otter1.png
assets/public/img/otter2.png
assets/public/img/otter3.png
assets/public/img/otter4.png
assets/public/img/otter5.png
assets/public/img/otter6.png
assets/public/img/otter7.png
assets/public/img/otter8.png
assets/public/img/pencil-button.png
assets/public/img/play-again-button.png
assets/public/img/play-button.png
assets/public/img/plus-button.png
assets/public/img/plus.png
assets/public/img/puzzle-button.png
assets/public/img/puzzle.png
assets/public/img/question-button.png
assets/public/img/quit-button.png
assets/public/img/replay-tutorial-button.png
assets/public/img/restore-purchase-button.png
assets/public/img/resume-button.png
assets/public/img/row-button.png
assets/public/img/save-and-exit-button.png
assets/public/img/scores-button.png
assets/public/img/skip-tutorial-button.png
assets/public/img/sounds-button.png
assets/public/img/squares-colorblind.png
assets/public/img/squares-hollow.png
assets/public/img/squares-letters.png
assets/public/img/squares-patterns.png
assets/public/img/squares-plain.png
assets/public/img/squares-waves.png
assets/public/img/star-button.png
assets/public/img/star-special.png
assets/public/img/star.png
assets/public/img/start-button.png
assets/public/img/stats-button.png
assets/public/img/story1.png
assets/public/img/tutorial-button.png
assets/public/img/undo-button.png
assets/public/img/unlock-more-modes-button.png
assets/public/img/upgrade-now-button.png
assets/public/img/upgrade-to-premium-button.png
assets/public/img/vanish.png
assets/public/img/view-scores-button.png
assets/public/img/volume-meter-inside.png
assets/public/img/volume-meter.png
assets/public/img/warning-square.png
assets/public/img/windowed-button.png
assets/public/img/x-button.png
assets/public/index.html
assets/public/lib/jsrand.min.js
assets/public/lib/phaser.min.js
assets/public/lib/superagent.min.js
assets/public/plugins/cordova-plugin-purchase/www/store-android.js
assets/public/sfx/achievement-special.mp3
assets/public/sfx/achievement-special.ogg
assets/public/sfx/achievement.mp3
assets/public/sfx/achievement.ogg
assets/public/sfx/bonus-row.mp3
assets/public/sfx/bonus-row.ogg
assets/public/sfx/click-down.mp3
assets/public/sfx/click-down.ogg
assets/public/sfx/click-up.mp3
assets/public/sfx/click-up.ogg
assets/public/sfx/level-complete-1.mp3
assets/public/sfx/level-complete-1.ogg
assets/public/sfx/level-complete-2.mp3
assets/public/sfx/level-complete-2.ogg
assets/public/sfx/level-complete-3.mp3
assets/public/sfx/level-complete-3.ogg
assets/public/sfx/level-complete-4.mp3
assets/public/sfx/level-complete-4.ogg
assets/public/sfx/loss.ogg
assets/public/sfx/menu-music.mp3
assets/public/sfx/menu-music.ogg
assets/public/sfx/newspaper.mp3
assets/public/sfx/newspaper.ogg
assets/public/sfx/notep1.mp3
assets/public/sfx/notep1.ogg
assets/public/sfx/notep2.mp3
assets/public/sfx/notep2.ogg
assets/public/sfx/notep3.mp3
assets/public/sfx/notep3.ogg
assets/public/sfx/notep4.mp3
assets/public/sfx/notep4.ogg
assets/public/sfx/notep5.mp3
assets/public/sfx/notep5.ogg
assets/public/sfx/otter-1b.mp3
assets/public/sfx/otter-1b.ogg
assets/public/sfx/otter-2b.mp3
assets/public/sfx/otter-2b.ogg
assets/public/sfx/otter-3b.mp3
assets/public/sfx/otter-3b.ogg
assets/public/sfx/otter-4b.mp3
assets/public/sfx/otter-4b.ogg
assets/public/sfx/points3.mp3
assets/public/sfx/points3.ogg
assets/public/sfx/pop-all-few.mp3
assets/public/sfx/pop-all-few.ogg
assets/public/sfx/pop-all.mp3
assets/public/sfx/pop-all.ogg
assets/public/sfx/pop-few.mp3
assets/public/sfx/pop-few.ogg
assets/public/sfx/pop-many.mp3
assets/public/sfx/pop-many.ogg
assets/public/sfx/pop-more.mp3
assets/public/sfx/pop-more.ogg
assets/public/sfx/pop-most.mp3
assets/public/sfx/pop-most.ogg
assets/public/sfx/release1.mp3
assets/public/sfx/release1.ogg
assets/public/sfx/release2.mp3
assets/public/sfx/release2.ogg
assets/public/sfx/release3.mp3
assets/public/sfx/release3.ogg
assets/public/sfx/release4.mp3
assets/public/sfx/release4.ogg
assets/public/sfx/release5.mp3
assets/public/sfx/release5.ogg
assets/public/sfx/reverse1.mp3
assets/public/sfx/reverse1.ogg
assets/public/sfx/reverse2.mp3
assets/public/sfx/reverse2.ogg
assets/public/sfx/reverse3.mp3
assets/public/sfx/reverse3.ogg
assets/public/sfx/reverse4.mp3
assets/public/sfx/reverse4.ogg
assets/public/sfx/reverse5.mp3
assets/public/sfx/reverse5.ogg
assets/public/sfx/roar-1.mp3
assets/public/sfx/roar-1.ogg
assets/public/sfx/roar-2.mp3
assets/public/sfx/roar-2.ogg
assets/public/sfx/roar-3.mp3
assets/public/sfx/roar-3.ogg
assets/public/sfx/roar-4.mp3
assets/public/sfx/roar-4.ogg
assets/public/sfx/select1.mp3
assets/public/sfx/select1.ogg
assets/public/sfx/select1p.mp3
assets/public/sfx/select1p.ogg
assets/public/sfx/select2.mp3
assets/public/sfx/select2.ogg
assets/public/sfx/select2p.mp3
assets/public/sfx/select2p.ogg
assets/public/sfx/select3.mp3
assets/public/sfx/select3.ogg
assets/public/sfx/select3p.mp3
assets/public/sfx/select3p.ogg
assets/public/sfx/select4.mp3
assets/public/sfx/select4.ogg
assets/public/sfx/select4p.mp3
assets/public/sfx/select4p.ogg
assets/public/sfx/select5.mp3
assets/public/sfx/select5.ogg
assets/public/sfx/select5p.mp3
assets/public/sfx/select5p.ogg
assets/public/sfx/silence.mp3
assets/public/sfx/silence.ogg
assets/public/sfx/sploosh.mp3
assets/public/sfx/sploosh.ogg
assets/public/sfx/underwater.mp3
assets/public/sfx/underwater.ogg
assets/public/sfx/unlock-reminder.mp3
assets/public/sfx/unlock-reminder.ogg
assets/public/sfx/unlock.mp3
assets/public/sfx/unlock.ogg
billing.properties
classes.dex
kotlin/annotation/annotation.kotlin_builtins
kotlin/collections/collections.kotlin_builtins
kotlin/coroutines/coroutines.kotlin_builtins
kotlin/internal/internal.kotlin_builtins
kotlin/kotlin.kotlin_builtins
kotlin/ranges/ranges.kotlin_builtins
kotlin/reflect/reflect.kotlin_builtins
org/apache/cordova/allowlist/index.html
org/apache/cordova/allowlist/index2.html
res/anim/abc_fade_in.xml
res/anim/abc_fade_out.xml
res/anim/abc_grow_fade_in_from_bottom.xml
res/anim/abc_popup_enter.xml
res/anim/abc_popup_exit.xml
res/anim/abc_shrink_fade_out_from_bottom.xml
res/anim/abc_slide_in_bottom.xml
res/anim/abc_slide_in_top.xml
res/anim/abc_slide_out_bottom.xml
res/anim/abc_slide_out_top.xml
res/anim/abc_tooltip_enter.xml
res/anim/abc_tooltip_exit.xml
res/anim/btn_checkbox_to_checked_box_inner_merged_animation.xml
res/anim/btn_checkbox_to_checked_box_outer_merged_animation.xml
res/anim/btn_checkbox_to_checked_icon_null_animation.xml
res/anim/btn_checkbox_to_unchecked_box_inner_merged_animation.xml
res/anim/btn_checkbox_to_unchecked_check_path_merged_animation.xml
res/anim/btn_checkbox_to_unchecked_icon_null_animation.xml
res/anim/btn_radio_to_off_mtrl_dot_group_animation.xml
res/anim/btn_radio_to_off_mtrl_ring_outer_animation.xml
res/anim/btn_radio_to_off_mtrl_ring_outer_path_animation.xml
res/anim/btn_radio_to_on_mtrl_dot_group_animation.xml
res/anim/btn_radio_to_on_mtrl_ring_outer_animation.xml
res/anim/btn_radio_to_on_mtrl_ring_outer_path_animation.xml
res/anim-v21/fragment_fast_out_extra_slow_in.xml
res/animator/fragment_close_enter.xml
res/animator/fragment_close_exit.xml
res/animator/fragment_fade_enter.xml
res/animator/fragment_fade_exit.xml
res/animator/fragment_open_enter.xml
res/animator/fragment_open_exit.xml
res/color/abc_background_cache_hint_selector_material_dark.xml
res/color/abc_background_cache_hint_selector_material_light.xml
res/color/abc_btn_colored_text_material.xml
res/color/abc_hint_foreground_material_dark.xml
res/color/abc_hint_foreground_material_light.xml
res/color/abc_primary_text_disable_only_material_dark.xml
res/color/abc_primary_text_disable_only_material_light.xml
res/color/abc_primary_text_material_dark.xml
res/color/abc_primary_text_material_light.xml
res/color/abc_search_url_text.xml
res/color/abc_secondary_text_material_dark.xml
res/color/abc_secondary_text_material_light.xml
res/color/abc_tint_btn_checkable.xml
res/color/abc_tint_default.xml
res/color/abc_tint_edittext.xml
res/color/abc_tint_seek_thumb.xml
res/color/abc_tint_spinner.xml
res/color/abc_tint_switch_track.xml
res/color/switch_thumb_material_dark.xml
res/color/switch_thumb_material_light.xml
res/color-v21/abc_btn_colored_borderless_text_material.xml
res/color-v23/abc_btn_colored_borderless_text_material.xml
res/color-v23/abc_btn_colored_text_material.xml
res/color-v23/abc_color_highlight_material.xml
res/color-v23/abc_tint_btn_checkable.xml
res/color-v23/abc_tint_default.xml
res/color-v23/abc_tint_edittext.xml
res/color-v23/abc_tint_seek_thumb.xml
res/color-v23/abc_tint_spinner.xml
res/color-v23/abc_tint_switch_track.xml
res/drawable/abc_btn_borderless_material.xml
res/drawable/abc_btn_check_material.xml
res/drawable/abc_btn_check_material_anim.xml
res/drawable/abc_btn_default_mtrl_shape.xml
res/drawable/abc_btn_radio_material.xml
res/drawable/abc_btn_radio_material_anim.xml
res/drawable/abc_cab_background_internal_bg.xml
res/drawable/abc_cab_background_top_material.xml
res/drawable/abc_ic_ab_back_material.xml
res/drawable/abc_ic_arrow_drop_right_black_24dp.xml
res/drawable/abc_ic_clear_material.xml
res/drawable/abc_ic_go_search_api_material.xml
res/drawable/abc_ic_menu_copy_mtrl_am_alpha.xml
res/drawable/abc_ic_menu_cut_mtrl_alpha.xml
res/drawable/abc_ic_menu_overflow_material.xml
res/drawable/abc_ic_menu_paste_mtrl_am_alpha.xml
res/drawable/abc_ic_menu_selectall_mtrl_alpha.xml
res/drawable/abc_ic_menu_share_mtrl_alpha.xml
res/drawable/abc_ic_search_api_material.xml
res/drawable/abc_ic_voice_search_api_material.xml
res/drawable/abc_item_background_holo_dark.xml
res/drawable/abc_item_background_holo_light.xml
res/drawable/abc_list_selector_background_transition_holo_dark.xml
res/drawable/abc_list_selector_background_transition_holo_light.xml
res/drawable/abc_list_selector_holo_dark.xml
res/drawable/abc_list_selector_holo_light.xml
res/drawable/abc_ratingbar_indicator_material.xml
res/drawable/abc_ratingbar_material.xml
res/drawable/abc_ratingbar_small_material.xml
res/drawable/abc_seekbar_thumb_material.xml
res/drawable/abc_seekbar_tick_mark_material.xml
res/drawable/abc_seekbar_track_material.xml
res/drawable/abc_spinner_textfield_background_material.xml
res/drawable/abc_star_black_48dp.xml
res/drawable/abc_star_half_black_48dp.xml
res/drawable/abc_switch_thumb_material.xml
res/drawable/abc_tab_indicator_material.xml
res/drawable/abc_text_cursor_material.xml
res/drawable/abc_textfield_search_material.xml
res/drawable/abc_vector_test.xml
res/drawable/btn_checkbox_checked_mtrl.xml
res/drawable/btn_checkbox_checked_to_unchecked_mtrl_animation.xml
res/drawable/btn_checkbox_unchecked_mtrl.xml
res/drawable/btn_checkbox_unchecked_to_checked_mtrl_animation.xml
res/drawable/btn_radio_off_mtrl.xml
res/drawable/btn_radio_off_to_on_mtrl_animation.xml
res/drawable/btn_radio_on_mtrl.xml
res/drawable/btn_radio_on_to_off_mtrl_animation.xml
res/drawable/compat_splash_screen.xml
res/drawable/compat_splash_screen_no_icon_background.xml
res/drawable/ic_launcher_background.xml
res/drawable/icon_background.xml
res/drawable/notification_bg.xml
res/drawable/notification_bg_low.xml
res/drawable/notification_icon_background.xml
res/drawable/notification_tile_bg.xml
res/drawable/test_level_drawable.xml
res/drawable/tooltip_frame_dark.xml
res/drawable/tooltip_frame_light.xml
res/drawable-anydpi-v24/$ic_launcher_foreground__0.xml
res/drawable-anydpi-v24/ic_launcher_foreground.xml
res/drawable-v21/abc_action_bar_item_background_material.xml
res/drawable-v21/abc_btn_colored_material.xml
res/drawable-v21/abc_dialog_material_background.xml
res/drawable-v21/abc_edit_text_material.xml
res/drawable-v21/abc_list_divider_material.xml
res/drawable-v21/notification_action_background.xml
res/drawable-v23/abc_control_background_material.xml
res/drawable-v23/compat_splash_screen.xml
res/drawable-v23/compat_splash_screen_no_icon_background.xml
res/drawable-watch-v20/abc_dialog_material_background.xml
res/interpolator/btn_checkbox_checked_mtrl_animation_interpolator_0.xml
res/interpolator/btn_checkbox_checked_mtrl_animation_interpolator_1.xml
res/interpolator/btn_checkbox_unchecked_mtrl_animation_interpolator_0.xml
res/interpolator/btn_checkbox_unchecked_mtrl_animation_interpolator_1.xml
res/interpolator/btn_radio_to_off_mtrl_animation_interpolator_0.xml
res/interpolator/btn_radio_to_on_mtrl_animation_interpolator_0.xml
res/interpolator/fast_out_slow_in.xml
res/layout/abc_action_bar_title_item.xml
res/layout/abc_action_bar_up_container.xml
res/layout/abc_action_menu_item_layout.xml
res/layout/abc_action_menu_layout.xml
res/layout/abc_action_mode_bar.xml
res/layout/abc_action_mode_close_item_material.xml
res/layout/abc_activity_chooser_view.xml
res/layout/abc_activity_chooser_view_list_item.xml
res/layout/abc_alert_dialog_button_bar_material.xml
res/layout/abc_alert_dialog_material.xml
res/layout/abc_alert_dialog_title_material.xml
res/layout/abc_cascading_menu_item_layout.xml
res/layout/abc_dialog_title_material.xml
res/layout/abc_expanded_menu_layout.xml
res/layout/abc_list_menu_item_checkbox.xml
res/layout/abc_list_menu_item_icon.xml
res/layout/abc_list_menu_item_layout.xml
res/layout/abc_list_menu_item_radio.xml
res/layout/abc_popup_menu_header_item_layout.xml
res/layout/abc_popup_menu_item_layout.xml
res/layout/abc_screen_content_include.xml
res/layout/abc_screen_simple.xml
res/layout/abc_screen_simple_overlay_action_mode.xml
res/layout/abc_screen_toolbar.xml
res/layout/abc_search_dropdown_item_icons_2line.xml
res/layout/abc_search_view.xml
res/layout/abc_select_dialog_material.xml
res/layout/abc_tooltip.xml
res/layout/activity_main.xml
res/layout/bridge_layout_main.xml
res/layout/custom_dialog.xml
res/layout/fragment_bridge.xml
res/layout/notification_template_part_chronometer.xml
res/layout/notification_template_part_time.xml
res/layout/select_dialog_item_material.xml
res/layout/select_dialog_multichoice_material.xml
res/layout/select_dialog_singlechoice_material.xml
res/layout/splash_screen_view.xml
res/layout/support_simple_spinner_dropdown_item.xml
res/layout-v21/notification_action.xml
res/layout-v21/notification_action_tombstone.xml
res/layout-v21/notification_template_custom_big.xml
res/layout-v21/notification_template_icon_group.xml
res/layout-v26/abc_screen_toolbar.xml
res/layout-watch-v20/abc_alert_dialog_button_bar_material.xml
res/layout-watch-v20/abc_alert_dialog_title_material.xml
res/mipmap-anydpi-v26/ic_launcher.xml
res/mipmap-anydpi-v26/ic_launcher_round.xml
res/mipmap-hdpi-v4/ic_launcher.png
res/mipmap-hdpi-v4/ic_launcher_background.png
res/mipmap-hdpi-v4/ic_launcher_foreground.png
res/mipmap-hdpi-v4/ic_launcher_round.png
res/mipmap-mdpi-v4/ic_launcher.png
res/mipmap-mdpi-v4/ic_launcher_background.png
res/mipmap-mdpi-v4/ic_launcher_foreground.png
res/mipmap-mdpi-v4/ic_launcher_round.png
res/mipmap-xhdpi-v4/ic_launcher.png
res/mipmap-xhdpi-v4/ic_launcher_background.png
res/mipmap-xhdpi-v4/ic_launcher_foreground.png
res/mipmap-xhdpi-v4/ic_launcher_round.png
res/mipmap-xxhdpi-v4/ic_launcher.png
res/mipmap-xxhdpi-v4/ic_launcher_background.png
res/mipmap-xxhdpi-v4/ic_launcher_foreground.png
res/mipmap-xxhdpi-v4/ic_launcher_round.png
res/mipmap-xxxhdpi-v4/ic_launcher.png
res/mipmap-xxxhdpi-v4/ic_launcher_background.png
res/mipmap-xxxhdpi-v4/ic_launcher_foreground.png
res/mipmap-xxxhdpi-v4/ic_launcher_round.png
res/xml/config.xml
res/xml/file_paths.xml
res/xml/splits0.xml
resources.arsc
stamp-cert-sha256
META-INF/BNDLTOOL.SF
META-INF/BNDLTOOL.RSA
META-INF/MANIFEST.MF

污点分析

当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……
规则名称 描述信息 操作
病毒分析 使用安卓恶意软件常用的API进行污点分析 开始分析  
漏洞挖掘 漏洞挖掘场景下的污点分析 开始分析  
隐私合规 隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 开始分析  
密码分析 分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等 开始分析  
Callback 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员 开始分析