温馨提示:本平台仅供研究软件风险、安全评估,禁止用于非法用途。由于展示的数据过于全面,请耐心等待加载完成。如有疑问或建议, 可加入我们的微信群讨论

APP评分

病毒检测 4 个厂商报毒

安全评分

文件信息

文件名称 501b0155f7c32edc18bec186c0b2a5f74a957e79a95f8ad2cbaadf1ef4efa1d5.apk
文件大小 10.62MB
MD5 3741d2f75347ded60deb2ddef00aec39
SHA1 65a4660b5b605f6c48940a684da3b0c567db7a9e
SHA256 501b0155f7c32edc18bec186c0b2a5f74a957e79a95f8ad2cbaadf1ef4efa1d5

应用信息

应用名称 ConnectPlus
包名 com.connectplus.http
主活动 com.connectplus.http.LauncherActivity
目标SDK 31     最小SDK 21
版本号 1.4.6     子版本号 33
加固信息 未加壳

组件导出信息

反编译代码

Manifest文件 查看
APK文件 下载
Java源代码 查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: False
v4 签名: False
主题: C=中国, ST=江苏, L=南京, O=np, OU=np, CN=np
签名算法: rsassa_pkcs1v15
有效期自: 2021-04-25 09:03:56+00:00
有效期至: 3020-08-26 09:03:56+00:00
发行人: C=中国, ST=江苏, L=南京, O=np, OU=np, CN=np
序列号: 0x45ff9a3
哈希算法: sha512
证书MD5: 68170b6b26e52338bc07ae665303cc36
证书SHA1: 26b02d233509f4aecf56980032343456ceab722a
证书SHA256: 492682f877607ee99df2ddd2bd5953fd727bdf6e19d397de9dbbafd582bcad75
证书SHA512: 763b51023083622bb9f06465082814259210ea0b60d32b81d46f324fce73d0a9cd7397dc4392aa27933d74b4ac2a8ee5c3b51dc0877f30386321209eeeed355a
公钥算法: rsa
密钥长度: 2048
指纹: cd58737fe1197c47782434eb7f19c6746d03fc4622e5d358dcf20f512bbcd4a9
找到 1 个唯一证书

应用程序权限

权限名称 安全等级 权限内容 权限描述 关联代码
android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
android.permission.FOREGROUND_SERVICE 普通 创建前台Service Android 9.0以上允许常规应用程序使用 Service.startForeground,用于podcast播放(推送悬浮播放,锁屏播放)
android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
android.permission.WAKE_LOCK 危险 防止手机休眠 允许应用程序防止手机休眠,在手机屏幕关闭后后台进程仍然运行。
android.permission.POWER_SERVICE 未知 未知权限 来自 android 引用的未知权限。
com.google.android.gms.permission.AD_ID 普通 应用程序显示广告 此应用程序使用 Google 广告 ID,并且可能会投放广告。
android.permission.POST_NOTIFICATIONS 危险 发送通知的运行时权限 允许应用发布通知,Android 13 引入的新权限。
com.google.android.c2dm.permission.RECEIVE 普通 接收推送通知 允许应用程序接收来自云的推送通知。
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE 普通 Google 定义的权限 由 Google 定义的自定义权限。
android.permission.RECEIVE_BOOT_COMPLETED 普通 开机自启 允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间,而且如果应用程序一直运行,会降低手机的整体速度。

证书分析

高危
0
警告
1
信息
1
标题 严重程度 描述信息
已签名应用 信息 应用程序已使用代码签名证书进行签名

MANIFEST分析

高危
0
警告
9
信息
0
屏蔽
0
序号 问题 严重程度 描述信息 操作
1 应用程序可以安装在有漏洞的已更新 Android 版本上
Android 5.0-5.0.2, [minSdk=21]
信息 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
2 应用程序数据可以被备份
[android:allowBackup=true]
警告 这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。
3 Activity (com.connectplus.http.activities.ConfigImportFileActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
4 Service (com.google.android.play.core.assetpacks.AssetPackExtractionService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
5 Activity设置了TaskAffinity属性
(com.connectplus.sshservice.LaunchVpn)
警告 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
6 Activity (com.connectplus.sshservice.LaunchVpn) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
7 Broadcast Receiver (com.connectplus.sshservice.MainReceiver) 未被保护。
[android:exported=true]
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
8 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。
Permission: com.google.android.c2dm.permission.SEND
[android:exported=true]
警告 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
9 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.BIND_JOB_SERVICE
[android:exported=true]
警告 发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
10 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.DUMP
[android:exported=true]
警告 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

可浏览的ACTIVITIES

ACTIVITY INTENT

网络安全配置

序号 范围 严重级别 描述

API调用分析

API功能 源码文件
一般功能-> IPC通信
a/a.java
a3/a.java
a3/b.java
a3/c.java
a3/d.java
a4/a.java
a4/g.java
a4/i.java
a4/j.java
a4/t.java
a4/u.java
c2/a.java
c2/g.java
c2/i.java
c2/l.java
c3/a5.java
c3/a6.java
c3/a7.java
c3/a9.java
c3/b.java
c3/b1.java
c3/b4.java
c3/b5.java
c3/b7.java
c3/b8.java
c3/b9.java
c3/c.java
c3/c2.java
c3/c4.java
c3/ca.java
c3/d2.java
c3/d8.java
c3/d9.java
c3/da.java
c3/e1.java
c3/e5.java
c3/e9.java
c3/f1.java
c3/f2.java
c3/f5.java
c3/f7.java
c3/f8.java
c3/f9.java
c3/fa.java
c3/g2.java
c3/g6.java
c3/g9.java
c3/ga.java
c3/h1.java
c3/h5.java
c3/h6.java
c3/h8.java
c3/h9.java
c3/hc.java
c3/i.java
c3/i1.java
c3/i2.java
c3/i5.java
c3/i9.java
c3/ia.java
c3/ic.java
c3/j.java
c3/j1.java
c3/j8.java
c3/j9.java
c3/ja.java
c3/k0.java
c3/k2.java
c3/k5.java
c3/k9.java
c3/l1.java
c3/l2.java
c3/l5.java
c3/l8.java
c3/l9.java
c3/la.java
c3/lb.java
c3/m.java
c3/m0.java
c3/m1.java
c3/ma.java
c3/n0.java
c3/n2.java
c3/n5.java
c3/n6.java
c3/n9.java
c3/o.java
c3/o1.java
c3/o5.java
c3/o6.java
c3/o9.java
c3/p1.java
c3/p4.java
c3/pa.java
c3/q5.java
c3/r1.java
c3/r4.java
c3/r5.java
c3/rb.java
c3/s0.java
c3/s4.java
c3/sb.java
c3/t1.java
c3/t5.java
c3/ta.java
c3/u1.java
c3/u5.java
c3/u9.java
c3/v0.java
c3/v9.java
c3/w4.java
c3/w5.java
c3/x1.java
c3/x2.java
c3/x8.java
c3/x9.java
c3/y0.java
c3/y1.java
c3/y4.java
c3/y5.java
c3/y6.java
c3/y8.java
c3/y9.java
c3/z1.java
c3/z5.java
c3/z8.java
com/connectplus/http/ConnectPlusMainActivity.java
com/connectplus/http/ExceptionActivity.java
com/connectplus/http/LauncherActivity.java
com/connectplus/http/Speedtest.java
com/connectplus/http/TorrentDetection.java
com/connectplus/http/TutosTu.java
com/connectplus/http/activities/ConfigGeralActivity.java
com/connectplus/http/activities/ConfigImportFileActivity.java
com/connectplus/http/c.java
com/connectplus/http/preference/SettingsAdvancedPreference.java
com/connectplus/http/preference/SettingsPreference.java
com/connectplus/http/preference/SettingsSSHPreference.java
com/connectplus/sshservice/ConnectPlusService.java
com/connectplus/sshservice/LaunchVpn.java
com/connectplus/sshservice/MainReceiver.java
com/connectplus/sshservice/NetSpeedNotification.java
com/connectplus/sshservice/aidl/IUltraSSHServiceInternal.java
com/connectplus/sshservice/logger/SkStatus.java
com/connectplus/sshservice/tunnel/TunnelManagerHelper.java
com/connectplus/sshservice/tunnel/TunnelManagerThread.java
com/connectplus/sshservice/tunnel/vpn/Tunnel.java
com/connectplus/sshservice/tunnel/vpn/TunnelVpnManager.java
com/connectplus/sshservice/tunnel/vpn/TunnelVpnService.java
d2/a.java
d3/a.java
d3/d.java
d3/e.java
d4/a.java
e3/a.java
e3/b.java
e3/e.java
f0/a.java
f3/a.java
g/a.java
g/d.java
g/g.java
g3/a.java
g3/b.java
g3/d.java
g4/d0.java
g4/e0.java
g4/g0.java
g4/h.java
g4/h0.java
g4/i.java
g4/l.java
g4/l0.java
g4/m.java
g4/m0.java
g4/q0.java
g4/s0.java
h1/d.java
h4/c.java
h4/d.java
i0/a.java
k3/j.java
k3/k.java
k3/z.java
l4/d.java
m3/a.java
m3/b.java
m3/c.java
m3/g.java
o/a.java
p2/a.java
p2/b.java
p2/d.java
p2/e.java
p2/i.java
p2/r.java
p2/s.java
p2/y.java
q2/a.java
q2/a0.java
q2/b.java
q2/e.java
q2/e0.java
q2/f.java
q2/f0.java
q2/n.java
q2/z.java
s2/d0.java
s2/e.java
s2/f0.java
s2/g.java
s2/p.java
t2/b0.java
t2/c.java
t2/c0.java
t2/d0.java
t2/e1.java
t2/f.java
t2/f1.java
t2/g1.java
t2/i.java
t2/k.java
t2/k0.java
t2/l0.java
t2/l1.java
t2/m0.java
t2/n1.java
t2/o0.java
t2/o1.java
t2/p0.java
t2/p1.java
t2/q0.java
t2/v0.java
t2/x0.java
t2/y0.java
t2/z0.java
u2/b.java
u2/c.java
v2/a.java
v2/e.java
w2/a.java
z0/a.java
z0/b.java
z0/c.java
z0/e.java
z0/f.java
调用java反射机制
一般功能-> 文件操作
a4/w.java
a5/b.java
a5/c.java
b1/v.java
b4/e.java
b5/c.java
c1/c.java
c1/e.java
c3/ac.java
c3/dc.java
c3/ec.java
c3/fc.java
c3/gb.java
c3/gc.java
c3/mb.java
c3/r9.java
c3/s3.java
cn/pedant/SweetAlert/widget/OptAnimationLoader.java
com/connectplus/http/ConnectPlusMainActivity.java
com/connectplus/http/activities/ConfigExportFileActivity.java
com/connectplus/http/activities/ConfigImportFileActivity.java
com/connectplus/http/c.java
com/connectplus/http/preference/SettingsSSHPreference.java
com/connectplus/sshservice/TopExceptionHandler.java
com/connectplus/sshservice/config/ConfigParser.java
com/connectplus/sshservice/config/Settings.java
com/connectplus/sshservice/logger/LogItem.java
com/connectplus/sshservice/logger/SkStatus.java
com/connectplus/sshservice/tunnel/DNSTunnelThread.java
com/connectplus/sshservice/tunnel/HttpProxyCustom.java
com/connectplus/sshservice/tunnel/SSLProxy.java
com/connectplus/sshservice/tunnel/SSLTunnelProxy.java
com/connectplus/sshservice/tunnel/TLSSocketFactory.java
com/connectplus/sshservice/tunnel/TunnelManagerThread.java
com/connectplus/sshservice/tunnel/TunnelUtils.java
com/connectplus/sshservice/tunnel/vpn/Pdnsd.java
com/connectplus/sshservice/tunnel/vpn/Tun2Socks.java
com/connectplus/sshservice/tunnel/vpn/Tunnel.java
com/connectplus/sshservice/tunnel/vpn/VpnUtils.java
com/connectplus/sshservice/util/Cripto.java
com/connectplus/sshservice/util/CustomNativeLoader.java
com/connectplus/sshservice/util/FileUtils.java
com/connectplus/sshservice/util/StreamGobbler.java
com/connectplus/sshservice/util/securepreferences/SecurePreferences.java
com/jcraft/jzlib/DeflaterOutputStream.java
com/jcraft/jzlib/GZIPException.java
com/jcraft/jzlib/GZIPHeader.java
com/jcraft/jzlib/GZIPInputStream.java
com/jcraft/jzlib/GZIPOutputStream.java
com/jcraft/jzlib/Inflate.java
com/jcraft/jzlib/InflaterInputStream.java
com/jcraft/jzlib/ZInputStream.java
com/jcraft/jzlib/ZOutputStream.java
com/jcraft/jzlib/ZStreamException.java
com/trilead/ssh2/Connection.java
com/trilead/ssh2/HTTPProxyData.java
com/trilead/ssh2/HTTPProxyException.java
com/trilead/ssh2/IOWarningException.java
com/trilead/ssh2/KnownHosts.java
com/trilead/ssh2/LocalStreamForwarder.java
com/trilead/ssh2/SCPClient.java
com/trilead/ssh2/SFTPException.java
com/trilead/ssh2/SFTPv3Client.java
com/trilead/ssh2/Session.java
com/trilead/ssh2/StreamGobbler.java
com/trilead/ssh2/auth/AuthenticationManager.java
com/trilead/ssh2/channel/Channel.java
com/trilead/ssh2/channel/ChannelInputStream.java
com/trilead/ssh2/channel/ChannelManager.java
com/trilead/ssh2/channel/ChannelOutputStream.java
com/trilead/ssh2/channel/DynamicAcceptThread.java
com/trilead/ssh2/channel/FifoBuffer.java
com/trilead/ssh2/channel/LocalAcceptThread.java
com/trilead/ssh2/channel/RemoteAcceptThread.java
com/trilead/ssh2/channel/RemoteX11AcceptThread.java
com/trilead/ssh2/channel/StreamForwarder.java
com/trilead/ssh2/crypto/Base64.java
com/trilead/ssh2/crypto/PEMDecoder.java
com/trilead/ssh2/crypto/SimpleDERReader.java
com/trilead/ssh2/crypto/cipher/CipherInputStream.java
com/trilead/ssh2/crypto/cipher/CipherOutputStream.java
com/trilead/ssh2/jenkins/SFTPClient.java
com/trilead/ssh2/packets/PacketChannelOpenConfirmation.java
com/trilead/ssh2/packets/PacketChannelOpenFailure.java
com/trilead/ssh2/packets/PacketChannelWindowAdjust.java
com/trilead/ssh2/packets/PacketDisconnect.java
com/trilead/ssh2/packets/PacketIgnore.java
com/trilead/ssh2/packets/PacketKexDHReply.java
com/trilead/ssh2/packets/PacketKexDhGexGroup.java
com/trilead/ssh2/packets/PacketKexDhGexReply.java
com/trilead/ssh2/packets/PacketKexInit.java
com/trilead/ssh2/packets/PacketNewKeys.java
com/trilead/ssh2/packets/PacketOpenSessionChannel.java
com/trilead/ssh2/packets/PacketServiceAccept.java
com/trilead/ssh2/packets/PacketServiceRequest.java
com/trilead/ssh2/packets/PacketUserauthBanner.java
com/trilead/ssh2/packets/PacketUserauthFailure.java
com/trilead/ssh2/packets/PacketUserauthInfoRequest.java
com/trilead/ssh2/packets/PacketUserauthRequestNone.java
com/trilead/ssh2/packets/PacketUserauthRequestPassword.java
com/trilead/ssh2/packets/PacketUserauthRequestPublicKey.java
com/trilead/ssh2/packets/TypesReader.java
com/trilead/ssh2/packets/TypesWriter.java
com/trilead/ssh2/signature/DSAKeyAlgorithm.java
com/trilead/ssh2/signature/DSASHA1Verify.java
com/trilead/ssh2/signature/ECDSAKeyAlgorithm.java
com/trilead/ssh2/signature/ED25519KeyAlgorithm.java
com/trilead/ssh2/signature/KeyAlgorithm.java
com/trilead/ssh2/signature/OpenSshCertificateDecoder.java
com/trilead/ssh2/signature/RSAKeyAlgorithm.java
com/trilead/ssh2/signature/RSASHA1Verify.java
com/trilead/ssh2/transport/ClientServerHello.java
com/trilead/ssh2/transport/KexManager.java
com/trilead/ssh2/transport/TransportConnection.java
com/trilead/ssh2/transport/TransportManager.java
com/trilead/ssh2/util/IOUtils.java
d2/a.java
d2/d.java
d5/a.java
d6/t0.java
e1/a.java
f/g.java
f1/c.java
f1/d.java
g4/t.java
g4/u.java
g4/v.java
g4/w.java
g4/x.java
h1/a.java
h1/b.java
h1/c.java
h3/a.java
h3/b.java
h5/b.java
h6/a.java
h6/c.java
h6/d.java
i6/i.java
m0/a.java
m0/c.java
m0/d.java
m1/n.java
m5/h.java
n0/b.java
n0/c.java
n0/d.java
n1/u.java
n2/a.java
n5/r.java
n5/s.java
net/i2p/crypto/eddsa/EdDSAEngine.java
net/i2p/crypto/eddsa/math/Curve.java
net/i2p/crypto/eddsa/math/Field.java
net/i2p/crypto/eddsa/math/FieldElement.java
net/i2p/crypto/eddsa/math/GroupElement.java
net/i2p/crypto/eddsa/math/bigint/BigIntegerLittleEndianEncoding.java
net/i2p/crypto/eddsa/spec/EdDSAParameterSpec.java
net/sourceforge/jsocks/Proxy.java
net/sourceforge/jsocks/ProxyMessage.java
net/sourceforge/jsocks/Socks5Message.java
net/sourceforge/jsocks/SocksException.java
net/sourceforge/jsocks/server/ServerAuthenticator.java
net/sourceforge/jsocks/server/ServerAuthenticatorNone.java
o/a.java
o0/b.java
o5/c.java
o5/h.java
org/mindrot/jbcrypt/BCrypt.java
p/f.java
p2/d.java
pl/droidsonroids/gif/GifIOException.java
pl/droidsonroids/gif/GifInfoHandle.java
pl/droidsonroids/gif/f.java
q/e.java
q/g.java
q/i.java
q/j.java
q/k.java
q2/u.java
q4/a.java
q5/a.java
s2/d0.java
s2/f0.java
s4/d.java
s4/e.java
t4/b.java
t4/f.java
t4/h.java
u0/h.java
u5/a.java
v4/g.java
v4/l.java
w1/d.java
w5/e.java
x2/k.java
x2/m.java
x5/c.java
y/b.java
加密解密-> Crypto加解密组件
一般功能-> 获取系统服务(getSystemService)
加密解密-> Base64 加密
加密解密-> 信息摘要算法
组件-> 启动 Service
网络通信-> TCP套接字
命令执行-> getRuntime.exec()
一般功能-> 获取网络接口信息 com/connectplus/sshservice/tunnel/TunnelUtils.java
com/connectplus/sshservice/tunnel/vpn/VpnUtils.java
一般功能-> Android通知
进程操作-> 杀死进程
进程操作-> 获取进程pid
网络通信-> HTTP建立连接
进程操作-> 获取运行的进程\服务 c1/f.java
组件-> 启动 Activity
网络通信-> UDP数据包 net/sourceforge/jsocks/server/ServerAuthenticator.java
net/sourceforge/jsocks/server/ServerAuthenticatorNone.java
网络通信-> SSL证书处理 com/connectplus/sshservice/tunnel/TLSSocketFactory.java
DEX-> 动态加载
组件-> 发送广播 p2/d.java
一般功能-> 加载so文件 com/kimchangyoun/rootbeerFresh/RootBeerNative.java
h6/e.java
pl/droidsonroids/gif/h.java
加密解密-> Base64 解密
网络通信-> TCP服务器套接字 com/trilead/ssh2/channel/DynamicAcceptThread.java
com/trilead/ssh2/channel/LocalAcceptThread.java
一般功能-> 获取活动网路信息
组件-> ContentProvider c3/w2.java
网络通信-> WebView JavaScript接口 com/connectplus/http/Speedtest.java
com/connectplus/http/TutosTu.java
网络通信-> WebView 相关 com/connectplus/http/Speedtest.java
com/connectplus/http/TutosTu.java
网络通信-> URLConnection b5/c.java
辅助功能accessibility相关 a0/d.java
z/a.java

源代码分析

高危
3
警告
9
信息
1
安全
2
屏蔽
0
序号 问题 等级 参考标准 文件位置 操作
1 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
OWASP MASVS: MSTG-STORAGE-3
2 应用程序使用不安全的随机数生成器 警告 CWE: CWE-330: 使用不充分的随机数
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-6
3 使用弱加密算法 高危 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
com/connectplus/sshservice/util/Cripto.java
4 SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击 高危 CWE: CWE-295: 证书验证不恰当
OWASP Top 10: M3: Insecure Communication
OWASP MASVS: MSTG-NETWORK-3
com/connectplus/sshservice/tunnel/SSLProxy.java
com/connectplus/sshservice/tunnel/SSLTunnelProxy.java
5 IP地址泄露 警告 CWE: CWE-200: 信息泄露
OWASP MASVS: MSTG-CODE-2
6 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
OWASP Top 10: M9: Reverse Engineering
OWASP MASVS: MSTG-STORAGE-14
7 SHA-1是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
a5/b.java
com/connectplus/sshservice/logger/LogItem.java
com/trilead/ssh2/RandomFactory.java
8 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
9 MD5是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
c3/bb.java
10 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 安全
OWASP MASVS: MSTG-NETWORK-4
com/connectplus/sshservice/tunnel/TLSSocketFactory.java
11 此应用程序可能具有Root检测功能 安全
OWASP MASVS: MSTG-RESILIENCE-1
g4/r.java
h5/b.java
12 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 高危 CWE: CWE-649: 依赖于混淆或加密安全相关输入而不进行完整性检查
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-3
h1/a.java
13 此应用程序可能会请求root(超级用户)权限 警告 CWE: CWE-250: 以不必要的权限执行
OWASP MASVS: MSTG-RESILIENCE-1
h5/a.java
14 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 警告 CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当('SQL 注入')
OWASP Top 10: M7: Client Code Quality
o0/a.java
w1/m0.java
w1/t0.java
15 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
a5/c.java

动态库分析

序号 动态库 NX(堆栈禁止执行) STACK CANARY(栈保护) RELRO RPATH(指定SO搜索路径) RUNPATH(指定SO搜索路径) FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)
1 armeabi-v7a/libdns.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
False
high
这个二进制文件没有在栈上添加栈哨兵值。栈哨兵是用于检测和防止攻击者覆盖返回地址的一种技术。使用选项-fstack-protector-all来启用栈哨兵。这对于Dart/Flutter库不适用,除非使用了Dart FFI
No RELRO
high
此共享对象未启用 RELRO。整个 GOT(.got 和 .got.plt)都是可写的。如果没有此编译器标志,全局变量上的缓冲区溢出可能会覆盖 GOT 条目。使用选项 -z,relro,-z,now 启用完整 RELRO,仅使用 -z,relro 启用部分 RELRO。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
False
warning
二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
True
info
符号被剥离
2 armeabi-v7a/libtool-checker.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
True
info
这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
Full RELRO
info
此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
False
warning
二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
False
warning
符号可用

文件分析

序号 问题 文件

VIRUSTOTAL扫描

  检出率: 4 / 68       完整报告

反病毒引擎 检出结果
AhnLab-V3 PUP/Android.Malct.1018863
Google Detected
Ikarus Trojan.AndroidOS.Locker
Sophos Android Abused Certificate (PUA)

滥用权限

恶意软件常用权限 2/30
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
其它常用权限 9/46
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.AD_ID
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地图

域名检测

域名 状态 中国境内 位置信息 解析
admob-gmats.uc.r.appspot.com 安全
IP地址: 142.251.42.180
国家: 日本
地区: 东京
城市: 东京
查看: Google 地图





app-measurement.com 安全
IP地址: 180.163.151.166
国家: 中国
地区: 上海
城市: 上海
查看: 高德地图





google.com 安全
IP地址: 172.217.25.174
国家: 美利坚合众国
地区: 加利福尼亚
城市: 山景城
查看: Google 地图





t.me 安全
IP地址: 149.154.167.99
国家: 大不列颠及北爱尔兰联合王国
地区: 英格兰
城市: 沃灵顿
查看: Google 地图





googleads.g.doubleclick.net 安全
IP地址: 180.163.151.166
国家: 中国
地区: 上海
城市: 上海
查看: 高德地图





goo.gl 安全
IP地址: 142.250.76.142
国家: 美利坚合众国
地区: 加利福尼亚
城市: 山景城
查看: Google 地图





wa.me 安全
IP地址: 157.240.209.60
国家: 日本
地区: 大阪
城市: 大阪
查看: Google 地图





pagead2.googlesyndication.com 安全
IP地址: 180.163.151.166
国家: 中国
地区: 上海
城市: 上海
查看: 高德地图





jsocks.sourceforge.net 安全
IP地址: 104.18.12.149
国家: 美利坚合众国
地区: 加利福尼亚
城市: 旧金山
查看: Google 地图





googlemobileadssdk.page.link 安全
IP地址: 142.250.207.1
国家: 日本
地区: 东京
城市: 东京
查看: Google 地图





www.bamsoftware.com 安全
IP地址: 69.164.193.231
国家: 美利坚合众国
地区: 得克萨斯州
城市: 理查森
查看: Google 地图





resolver.example 安全
没有可用的地理位置信息。




bitbin.it 安全
IP地址: 172.67.150.13
国家: 美利坚合众国
地区: 加利福尼亚
城市: 旧金山
查看: Google 地图





connecplus.speedtestcustom.com 安全
IP地址: 146.75.50.219
国家: 瑞典
地区: Vastra Gotalands lan
城市: Goeteborg
查看: Google 地图





手机号码

网址

网址信息 源码文件
http://www.bouncycastle.org
http://consumercal.org/california-online-privacy-protection-act-caloppa/
http://www.trilead.com
http://www.inf.ethz.ch
https://github.com/jenkinsci/trilead-ssh2
https://github.com/ambrop72/badvpn
自研引擎-A
https://%s/%s/%s
b5/c.java
https://googlemobileadssdk.page.link/admob-android-update-manifest
https://googlemobileadssdk.page.link/ad-manager-android-update-manifest
c3/w2.java
https://www.google.com/dfp/linkdevice
https://www.google.com/dfp/inapppreview
https://www.google.com/dfp/debugsignals
https://www.google.com/dfp/senddebugdata
https://admob-gmats.uc.r.appspot.com/
c3/y3.java
https://t.me/juanitoprsniff
https://t.me/+tjcg5qegco9mnwex
https://wa.me/554999944285
https://connecplus.speedtestcustom.com/
http://t.me/mrx470
com/connectplus/http/ConnectPlusMainActivity.java
https://connecplus.speedtestcustom.com/
com/connectplus/http/Speedtest.java
1.1.1.1
127.0.0.1
com/connectplus/sshservice/config/Settings.java
127.0.0.1
com/connectplus/sshservice/tunnel/DNSTunnelThread.java
127.0.0.1
com/connectplus/sshservice/tunnel/TunnelManagerThread.java
8.8.8.8
com/connectplus/sshservice/tunnel/vpn/Tunnel.java
8.8.8.8
8.8.4.4
com/connectplus/sshservice/tunnel/vpn/TunnelConstants.java
8.8.4.4
8.8.8.8
127.0.0.1
10.0.0.1
10.0.0.2
172.16.0.1
172.16.0.2
192.168.0.1
192.168.0.2
169.254.1.1
169.254.1.2
com/connectplus/sshservice/tunnel/vpn/VpnUtils.java
127.0.0.1
com/trilead/ssh2/LocalStreamForwarder.java
127.0.0.1
com/trilead/ssh2/channel/DynamicAcceptThread.java
https://pagead2.googlesyndication.com/pagead/gen_204?id=gmob-apps
d2/b.java
https://bitbin.it/d7oipusv/raw/
e1/a.java
https://bitbin.it/hphv6jce/raw/
g1/a.java
https://plus.google.com/
t2/l1.java
169.254.1.1
https://www.google.com/dfp/senddebugdata
https://goo.gl/naoooi
https://googlemobileadssdk.page.link/admob-android-update-manifest
127.0.0.1
https://bitbin.it/d7oipusv/raw/
http://t.me/mrx470
https://www.google.com/dfp/debugsignals
https://jsocks.sourceforge.net
https://app-measurement.com/a
172.16.0.1
https://admob-gmats.uc.r.appspot.com/
https://www.google.com
https://firebase.google.com/support/privacy/init-options
https://firebase.google.com/support/guides/disable-analytics
192.168.0.1
1.1.1.1
8.8.8.8
https://t.me/juanitoprsniff
https://connecplus.speedtestcustom.com/
https://goo.gl/j1swqy
192.168.0.2
https://plus.google.com/
https://github.com/jenkinsci/trilead-ssh2
https://www.google.com/dfp/inapppreview
169.254.1.2
2.5.29.37
10.0.0.2
https://google.com/search?
https://wa.me/554999944285
https://t.me/+tjcg5qegco9mnwex
https://%s/%s/%s
https://googlemobileadssdk.page.link/ad-manager-android-update-manifest
10.0.0.1
https://pagead2.googlesyndication.com/pagead/gen_204?id=gmob-apps
https://www.google.com/dfp/linkdevice
172.16.0.2
www.google.com
8.8.4.4
自研引擎-S
www.bamsoftware.com/git/dnstt.git/dns.name.string
www.bamsoftware.com/git/dnstt.git/dns
www.bamsoftware.com/git/dnstt.git/turbotunnel.newremotemap.func1
1.4.13.1
1.1.1.1
1.4.9.1
www.bamsoftware.com/git/dnstt.git/dns.name.trimsuffix
www.bamsoftware.com/git/dnstt.git/noise.newsocket
1.4.10.1
www.bamsoftware.com/git/dnstt.git/dnstt-client
www.bamsoftware.com/git/dnstt.git/turbotunnel.newremotemap
www.bamsoftware.com/git/dnstt.git/turbotunnel.clientid.network
1.4.7.1
www.bamsoftware.com/git/dnstt.git/dns.parsename
www.bamsoftware.com/git/dnstt.git/dns.readmessage
www.bamsoftware.com/git/dnstt.git/noise.newsocket.func1.1
www.bamsoftware.com/git/dnstt.git/dns.newname
1.2.2.1
www.bamsoftware.com/git/dnstt.git/turbotunnel.remoterecord
www.bamsoftware.com/git/dnstt.git/turbotunnel.init
www.bamsoftware.com/git/dnstt.git/dns.newmessagebuilder
1.4.14.2
www.bamsoftware.com/git/dnstt.git/turbotunnel.newqueuepacketconn
1.2.7.1
1.4.1.1
1.4.3.1
www.bamsoftware.com/git/dnstt.git/noise.decodekey
https://resolver.example/dns-query
127.0.0.1
www.bamsoftware.com/git/dnstt.git/noise
www.bamsoftware.com/git/dnstt.git/noise.socket
1.1.3.1
www.bamsoftware.com/git/dnstt.git/turbotunnel
www.bamsoftware.com/git/dnstt.git/dns.readrr
www.bamsoftware.com/git/dnstt.git/dns.readname
www.bamsoftware.com/git/dnstt.git/turbotunnel.newclientid
www.bamsoftware.com/git/dnstt.git/dns.readquestion
www.bamsoftware.com/git/dnstt.git/noise.writemessage
1.1.2.1
1.4.4.1
www.bamsoftware.com/git/dnstt.git/noise.readmessage
www.bamsoftware.com/git/dnstt.git/turbotunnel.queuepacketconn
www.bamsoftware.com/git/dnstt.git/noise.newconfig
1.2.1.1
1.2.3.1
1.4.12.1
www.bamsoftware.com/git/dnstt.git/noise.newsocket.func1
www.bamsoftware.com/git/dnstt.git/dns.messagefromwireformat
www.bamsoftware.com/git/dnstt.git/turbotunnel.dummyaddr.network
www.bamsoftware.com/git/dnstt.git/noise.readkey
1.2.9.1
1.4.14.1
1.4.6.1
www.bamsoftware.com/git/dnstt.git/dns.ptr
www.bamsoftware.com/git/dnstt.git/dns.rr
www.bamsoftware.com/git/dnstt.git/dns.count
www.bamsoftware.com/git/dnstt.git
1.4.11.1
www.bamsoftware.com/git/dnstt.git/turbotunnel.clientid.string
http://invalidlookup
www.bamsoftware.com/git/dnstt.git/noise.init
www.bamsoftware.com/git/dnstt.git/noise.socket.close
www.bamsoftware.com/git/dnstt.git/noise.newclient
1.2.5.1
www.bamsoftware.com/git/dnstt.git/dns.init
1.4.8.1
www.bamsoftware.com/git/dnstt.git/turbotunnel.dummyaddr.string
www.bamsoftware.com/git/dnstt.git/dns.decoderdatatxt
lib/armeabi-v7a/libdns.so

FIREBASE实例

邮箱

EMAIL 源码文件
admin@merlinbr.store
com/connectplus/http/ConnectPlusMainActivity.java
zlib@openssh.com
com/trilead/ssh2/compression/CompressionFactory.java
zlib@openssh.com
admin@merlinbr.store
自研引擎-S

追踪器

名称 类别 网址
Google AdMob Advertisement https://reports.exodus-privacy.eu.org/trackers/312
Google Firebase Analytics Analytics https://reports.exodus-privacy.eu.org/trackers/49

密钥凭证

已显示 30 个secrets
1、 AdMob广告平台的=> "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-1309163745720147~3831355953"
2、 "authfailed" : "Authfailed"
3、 "password" : "Password"
4、 "proxy_user" : "Usuario"
5、 "state_auth_success" : "Authenticated"
6、 "google_crash_reporting_api_key" : "AIzaSyDtaimDoRojd56M5I6CCnsis0iZH7SvpJ8"
7、 "auth_username" : "Username"
8、 "state_auth_success" : "Verificado"
9、 "state_auth" : "Verificando"
10、 "proxy_user" : "User"
11、 "state_auth" : "Authenticating"
12、 "google_api_key" : "AIzaSyDtaimDoRojd56M5I6CCnsis0iZH7SvpJ8"
13、 "authenticating" : "Authenticating"
14、 FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551
15、 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
16、 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
17、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
18、 4FE342E2FE1A7F9B8EE7EB4A7C0F9E162BCE33576B315ECECBB6406837BF51F5
19、 B3EEABB8EE11C2BE770B684D95219ECB
20、 AA87CA22BE8B05378EB1C71EF320AD746E1D3B628BA79B9859F741E082542A385502F25DBF55296C3A545E3872760AB7
21、 011839296A789A3BC0045C8A5FB42C7D1BD998F54449579B446817AFBD17273E662C97EE72995EF42640C550B9013FAD0761353C7086A272C24088BE94769FD16650
22、 0051953EB9618E1C9A1F929A21A0B68540EEA2DA725B99B315F3B8B489918EF109E156193951EC7E937B1652C0BD3BB1BF073573DF883D2C34F1EF451FD46B503F00
23、 179769313486231590770839156793787453197860296048756011706444423684197180216158519368947833795864925541502180565485980503646440548199239100050792877003355816639229553136239076508735759914822574862575007425302077447712589550957937778424442426617334727629299387668709205606050270810842907692932019128194467627007
24、 3617DE4A96262C6F5D9E98BF9292DC29F8F41DBD289A147CE9DA3113B5F0B8C00A60B1CE1D7E819D7A431D7C90EA0E5F
25、 00C6858E06B70404E9CD9E3ECB662395B4429C648139053FB521F828AF606B4D3DBAA14B5E77EFE75928FE1DC127A2FFA8DE3348B3C1856A429BF97E7E31C2E5BD66
26、 6B17D1F2E12C4247F8BCE6E563A440F277037D812DEB33A0F4A13945D898C296
27、 b0a00e4a271beec478e42fad0618432fa7d7fb3d99004d2b0bdfc14f8024832b
28、 5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b
29、 a3785913ca4deb75abd841414d0a700098e879777940c78c73fe6f2bee6c0352
30、 B3312FA7E23EE7E4988E056BE3F82D19181D9C6EFE8141120314088F5013875AC656398D8A2ED19D2A85C8EDD3EC2AEF

字符串列表

建议导出为TXT,方便查看。

活动列表

已显示 16 个activities
1、 com.connectplus.http.Speedtest
2、 com.connectplus.http.TutosTu
3、 com.connectplus.http.LauncherActivity
4、 com.connectplus.http.ConnectPlusMainActivity
5、 com.connectplus.http.activities.ConfigGeralActivity
6、 com.connectplus.http.activities.ConfigImportFileActivity
7、 com.connectplus.http.activities.ConfigExportFileActivity
8、 com.connectplus.http.activities.AboutActivity
9、 com.connectplus.http.ExceptionActivity
10、 com.google.android.play.core.missingsplits.PlayCoreMissingSplitsActivity
11、 com.google.android.play.core.common.PlayCoreDialogWrapperActivity
12、 com.connectplus.sshservice.LaunchVpn
13、 com.connectplus.sshservice.util.DummyActivity
14、 com.connectplus.compatstyle.NotImplemented
15、 com.google.android.gms.ads.AdActivity
16、 com.google.android.gms.common.api.GoogleApiActivity

服务列表

已显示 17 个services
1、 com.connectplus.http.PushNotification
2、 com.google.android.play.core.assetpacks.AssetPackExtractionService
3、 com.google.android.play.core.assetpacks.ExtractionForegroundService
4、 com.connectplus.sshservice.tunnel.vpn.TunnelVpnService
5、 com.connectplus.sshservice.ConnectPlusService
6、 com.connectplus.sshservice.NetSpeedNotification
7、 com.google.android.gms.ads.AdService
8、 com.google.firebase.messaging.FirebaseMessagingService
9、 com.google.firebase.components.ComponentDiscoveryService
10、 com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
11、 com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
12、 com.google.android.gms.measurement.AppMeasurementService
13、 com.google.android.gms.measurement.AppMeasurementJobService
14、 androidx.work.impl.background.systemalarm.SystemAlarmService
15、 androidx.work.impl.background.systemjob.SystemJobService
16、 androidx.work.impl.foreground.SystemForegroundService
17、 androidx.room.MultiInstanceInvalidationService

广播接收者列表

已显示 12 个receivers
1、 com.connectplus.sshservice.MainReceiver
2、 com.google.firebase.iid.FirebaseInstanceIdReceiver
3、 com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
4、 com.google.android.gms.measurement.AppMeasurementReceiver
5、 androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
6、 androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
7、 androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
8、 androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
9、 androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
10、 androidx.work.impl.background.systemalarm.RescheduleReceiver
11、 androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
12、 androidx.work.impl.diagnostics.DiagnosticsReceiver

内容提供者列表

已显示 3 个providers
1、 com.google.android.gms.ads.MobileAdsInitProvider
2、 com.google.firebase.provider.FirebaseInitProvider
3、 androidx.startup.InitializationProvider

第三方SDK

SDK名称 开发者 描述信息
Conscrypt Google Conscrypt 是一个 Java 安全提供程序 (JSP),它实现了部分 Java 加密扩展 (JCE) 和 Java 安全套接字扩展 (JSSE)。 它使用 BoringSSL 为 Android 和 OpenJDK 上的 Java 应用程序提供加密原语和传输层安全性 (TLS)。 有关所提供内容的详细信息,请参阅功能文档。
android-gif-drawable koral-- android-gif-drawable 是在 Android 上显示动画 GIF 的绘制库。
Tun2Socks Jason Lyu(xjasonlyu) Tun2Socks 是一个网络通信库,它可以处理来自当前设备的任意应用的所有网络流量,并通过 HTTP/Socks4/Socks5/Shadowsocks 远程连接,支持 Windows、macOS 等多平台,并且支持 IPv6,可以提供最佳的性能。
Google Play Service Google 借助 Google Play 服务,您的应用可以利用由 Google 提供的最新功能,例如地图,Google+ 等,并通过 Google Play 商店以 APK 的形式分发自动平台更新。 这样一来,您的用户可以更快地接收更新,并且可以更轻松地集成 Google 必须提供的最新信息。
Jetpack App Startup Google App Startup 库提供了一种直接,高效的方法来在应用程序启动时初始化组件。库开发人员和应用程序开发人员都可以使用 App Startup 来简化启动顺序并显式设置初始化顺序。App Startup 允许您定义共享单个内容提供程序的组件初始化程序,而不必为需要初始化的每个组件定义单独的内容提供程序。这可以大大缩短应用启动时间。
Jetpack WorkManager Google 使用 WorkManager API 可以轻松地调度即使在应用退出或设备重启时仍应运行的可延迟异步任务。
Firebase Google Firebase 提供了分析、数据库、消息传递和崩溃报告等功能,可助您快速采取行动并专注于您的用户。
Firebase Analytics Google Google Analytics(分析)是一款免费的应用衡量解决方案,可提供关于应用使用情况和用户互动度的分析数据。
Jetpack Room Google Room 持久性库在 SQLite 的基础上提供了一个抽象层,让用户能够在充分利用 SQLite 的强大功能的同时,获享更强健的数据库访问机制。

文件列表

classes.dex
res/anim/design_snackbar_in.xml
res/drawable/divider.xml
assets/flags/v2.png
res/layout/design_text_input_password_icon.xml
res/drawable/speed.png
res/drawable-anydpi-v21/border4.xml
res/drawable/common_google_signin_btn_icon_dark_normal.xml
res/layout/default_toast_layout.xml
kotlin/reflect/reflect.kotlin_builtins
res/drawable-xhdpi-v4/notification_bg_low_pressed.9.png
res/drawable-anydpi-v21/ic_error_outline_black_24dp.xml
res/color-v23/abc_btn_colored_text_material.xml
res/color/text_color.xml
res/drawable/notification_bg_low.xml
res/layout/preference.xml
res/drawable-xhdpi-v4/abc_ic_star_black_48dp.png
res/color/mtrl_btn_bg_color_selector.xml
res/drawable/abc_list_selector_background_transition_holo_light.xml
res/color/abc_primary_text_disable_only_material_dark.xml
assets/flags/ti.png
res/layout/abc_alert_dialog_button_bar_material.xml
firebase-analytics.properties
res/drawable/error_toast.xml
res/drawable/success_bow.xml
lib/armeabi-v7a/libconscrypt_jni.so
resources.arsc
res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_light.9.png
assets/flags/mo.png
res/layout/preference_widget_checkbox.xml
res/drawable-anydpi-v21/ic_power_settings_new_black_24dp.xml
res/drawable-anydpi-v21/dialog_background.xml
res/drawable-xhdpi-v4/ic_group_black_48dp.png
res/drawable/banner.png
res/drawable-xhdpi-v4/abc_text_select_handle_right_mtrl_dark.png
res/drawable/abc_list_selector_background_transition_holo_dark.xml
res/drawable-xhdpi-v4/abc_btn_radio_to_on_mtrl_000.png
assets/flags/mv.png
res/drawable-xhdpi-v4/ic_mode_edit_black_48dp.png
res/drawable/button_red.xml
lib/armeabi-v7a/libdns.so
res/color/abc_tint_spinner.xml
res/layout/pref_dialog_number.xml
res/drawable/abc_cab_background_top_material.xml
res/drawable-xhdpi-v4/googleg_standard_color_18.png
res/color/abc_primary_text_material_light.xml
res/color/mtrl_bottom_nav_item_tint.xml
res/drawable/background_toast.xml
res/layout/abc_screen_simple_overlay_action_mode.xml
res/drawable-xhdpi-v4/notify_panel_notification_icon_bg.png
res/drawable-anydpi-v21/ic_visibility_black_24dp.xml
res/drawable/bajada.png
res/drawable/tweaks.png
res/drawable/logo4.png
res/drawable-xhdpi-v4/ic_description_white_24dp.png
res/color/abc_primary_text_disable_only_material_light.xml
res/layout/spinner_item.xml
res/anim/abc_fade_in.xml
res/layout/activity_main.xml
res/drawable/splash_screen_background.xml
res/drawable-xhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png
res/anim/abc_popup_exit.xml
res/drawable/blue_button_background.xml
res/drawable/splash_screen.png
res/layout/activity_main_drawer.xml
play-services-base.properties
res/color/abc_search_url_text.xml
res/drawable/warning_circle.xml
res/drawable/ic_tuto.png
res/layout/activity_config_import.xml
res/drawable/notification_icon_background.xml
res/drawable-xhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-xxhdpi-v4/down.jpg
META-INF/services/kotlinx.coroutines.CoroutineExceptionHandler
res/drawable-anydpi-v21/voip.xml
res/drawable/red_button_background.xml
res/drawable-xxhdpi-v4/upload.jpg
play-services-tasks.properties
res/drawable/success_circle.xml
res/drawable-anydpi-v21/design_ic_visibility.xml
res/drawable-xhdpi-v4/abc_text_select_handle_left_mtrl_dark.png
res/drawable/abc_ratingbar_material.xml
res/drawable/common_google_signin_btn_icon_dark_focused.xml
res/drawable/abc_ic_voice_search_api_material.xml
res/drawable/background_mrx.xml
res/drawable-xhdpi-v4/abc_btn_radio_to_on_mtrl_015.png
res/drawable/abc_ic_ab_back_material.xml
res/drawable/background_rounded3.xml
res/drawable/default_toast.xml
res/color/mtrl_tabs_legacy_text_color_selector.xml
res/drawable/common_google_signin_btn_icon_light.xml
res/layout/design_navigation_item_subheader.xml
res/layout/design_layout_snackbar.xml
META-INF/services/kotlinx.coroutines.internal.MainDispatcherFactory
res/layout/adapter_manager_list.xml
play-services-measurement-base.properties
res/drawable-xhdpi-v4/abc_ic_menu_share_mtrl_alpha.png
assets/flags/cl.png
res/layout/preference_widget_seekbar.xml
res/color/mtrl_tabs_colored_ripple_color.xml
res/drawable/ic_mtrl_chip_close_circle.xml
res/layout/design_bottom_sheet_dialog.xml
kotlin/collections/collections.kotlin_builtins
res/layout/abc_dialog_title_material.xml
res/layout/notification_template_part_time.xml
res/color-v23/abc_btn_colored_borderless_text_material.xml
res/drawable/back_icon.png
res/layout/expand_button.xml
res/drawable-xhdpi-v4/common_google_signin_btn_icon_light_normal_background.9.png
res/drawable-xhdpi-v4/abc_text_select_handle_right_mtrl_light.png
res/anim/abc_popup_enter.xml
res/color/abc_tint_switch_track.xml
res/layout/success_toast_layout.xml
assets/AGRADECIMENTOS
res/color/abc_hint_foreground_material_light.xml
res/drawable/common_google_signin_btn_icon_dark.xml
res/layout/design_navigation_item_header.xml
res/layout/userpass.xml
res/drawable/logo3.png
res/drawable-anydpi-v21/h_pass.xml
res/drawable-anydpi-v21/ic_lock_black_24dp.xml
res/layout/activity_logs.xml
res/color-v23/abc_tint_spinner.xml
res/drawable-v21/$avd_show_password__2.xml
res/layout/activity_splash_screen.xml
res/color/abc_background_cache_hint_selector_material_dark.xml
res/layout/info_toast_layout.xml
firebase-measurement-connector.properties
res/drawable/tooltip_frame_light.xml
stamp-cert-sha256
res/drawable/button_blue.xml
res/layout/abc_search_view.xml
res/drawable-xxhdpi-v4/button_green.xml
assets/config/config.json
res/drawable/common_google_signin_btn_text_light_normal.xml
assets/flags/v1.png
res/layout/preference_widget_switch.xml
res/layout/preference_category.xml
res/drawable-xhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-xhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png
res/color-v23/design_tint_password_toggle.xml
res/drawable-xhdpi-v4/notification_bg_normal.9.png
res/drawable/abc_ic_go_search_api_material.xml
res/drawable/confusing_toast.xml
res/drawable-anydpi-v24/ic_wkk.xml
res/color/common_google_signin_btn_text_dark.xml
res/drawable/background_rounded.xml
transport-runtime.properties
res/anim/success_bow_roate.xml
res/color/mtrl_tabs_ripple_color.xml
res/layout/design_menu_item_action_area.xml
res/interpolator-v21/mtrl_fast_out_slow_in.xml
res/layout-v21/preference_information_material.xml
res/drawable-xhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png
firebase-datatransport.properties
res/drawable/common_google_signin_btn_icon_disabled.xml
res/layout/item.xml
res/layout/activity_config.xml
res/drawable-xhdpi-v4/abc_ic_star_half_black_48dp.png
res/color/mtrl_bottom_nav_colored_item_tint.xml
res/layout/design_layout_snackbar_include.xml
res/layout/preference_dropdown.xml
res/layout/abc_popup_menu_item_layout.xml
res/layout/design_bottom_navigation_item.xml
res/drawable-anydpi-v21/h_acnt.xml
res/drawable-xhdpi-v4/ic_delete_forever_white_24dp.png
res/layout/abc_expanded_menu_layout.xml
res/drawable-xhdpi-v4/ic_person_white_24dp.png
res/drawable/abc_ic_clear_material.xml
res/drawable-xhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png
res/interpolator-v21/mtrl_linear_out_slow_in.xml
res/font/fixedsys.ttf
assets/flags/ic.png
res/drawable-xhdpi-v4/abc_spinner_mtrl_am_alpha.9.png
res/drawable-anydpi-v21/ic_cloud_off_black_24dp.xml
res/drawable-xhdpi-v4/ic_bug_report_white_24dp.png
res/layout/abc_screen_toolbar.xml
res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable/abc_btn_borderless_material.xml
res/layout/abc_alert_dialog_material.xml
res/color-v23/abc_color_highlight_material.xml
res/layout/mtrl_layout_snackbar.xml
res/drawable/ic_timer2.png
firebase-annotations.properties
res/drawable-xhdpi-v4/abc_text_select_handle_middle_mtrl_dark.png
res/drawable/abc_tab_indicator_material.xml
res/drawable-v21/avd_show_password.xml
res/color/abc_tint_default.xml
res/animator/mtrl_fab_hide_motion_spec.xml
res/animator-v21/design_appbar_state_list_animator.xml
res/drawable/navigation_empty_icon.xml
res/drawable-xxhdpi-v4/gris.xml
res/drawable-xhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-anydpi-v21/background_rounded2.xml
res/drawable-xhdpi-v4/abc_textfield_default_mtrl_alpha.9.png
res/layout/preference_dialog_edittext.xml
firebase-installations.properties
res/raw/pdnsd_local
res/drawable-xhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-xhdpi-v4/ic_event_note_white_24dp.png
res/color/mtrl_tabs_icon_color_selector.xml
res/drawable-anydpi-v21/ic_wkk_bw1.xml
res/layout-v21/notification_template_icon_group.xml
res/drawable-anydpi-v21/ic_share_black_24dp.xml
res/color/mtrl_btn_stroke_color_selector.xml
res/layout/abc_activity_chooser_view_list_item.xml
res/drawable/abc_vector_test.xml
res/color/abc_tint_edittext.xml
res/interpolator-v21/mtrl_fast_out_linear_in.xml
res/drawable-xhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png
res/layout/abc_action_bar_title_item.xml
res/drawable/politica.jpeg
res/drawable/abc_btn_check_material.xml
res/drawable-v21/$avd_hide_password__0.xml
user-messaging-platform.properties
res/layout/adapter_manager_custom_title.xml
res/drawable-v21/notification_action_background.xml
play-services-ads-identifier.properties
res/anim/abc_slide_out_bottom.xml
res/drawable-anydpi-v21/torrent.xml
res/drawable/ic_na.png
res/layout-v21/preference_material.xml
assets/LICENSE
res/drawable/abc_btn_radio_material.xml
res/drawable/subida.png
res/drawable-xhdpi-v4/ic_rate_review_white_24dp.png
assets/flags/pe.png
res/drawable/common_google_signin_btn_icon_light_focused.xml
res/drawable/abc_cab_background_internal_bg.xml
res/layout-v21/notification_action_tombstone.xml
res/drawable/abc_item_background_holo_light.xml
play-services-measurement-api.properties
res/drawable/common_google_signin_btn_text_dark_normal.xml
res/color/mtrl_text_btn_text_color_selector.xml
res/drawable-v21/abc_dialog_material_background.xml
res/drawable-v21/design_bottom_navigation_item_background.xml
res/drawable/abc_seekbar_track_material.xml
res/drawable-xhdpi-v4/ic_launcher.png
res/drawable/error_center_x.xml
res/drawable-v21/design_password_eye.xml
res/drawable/file_icon.png
res/layout-v21/preference_category_material.xml
res/drawable/ic_up.xml
res/layout/select_dialog_item_material.xml
res/drawable-ldrtl-xhdpi-v17/abc_spinner_mtrl_am_alpha.9.png
res/drawable-xhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png
play-services-measurement.properties
res/drawable-xhdpi-v4/abc_list_longpressed_holo.9.png
firebase-encoders-json.properties
kotlin/annotation/annotation.kotlin_builtins
res/drawable/linea.png
res/drawable-watch-v20/abc_dialog_material_background.xml
res/drawable-anydpi-v21/ic_autorenew_black_24dp.xml
res/drawable/abc_text_cursor_material.xml
res/layout/design_navigation_menu.xml
res/anim/modal_in.xml
res/drawable-ldrtl-xhdpi-v17/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-xhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-xhdpi-v4/ic_mode_edit_white_48dp.png
res/color/design_tint_password_toggle.xml
res/drawable/notification_tile_bg.xml
res/layout/abc_list_menu_item_layout.xml
res/color/abc_secondary_text_material_light.xml
res/anim/error_frame_in.xml
res/color/switch_thumb_material_light.xml
res/anim/abc_slide_out_top.xml
res/layout/abc_list_menu_item_radio.xml
res/drawable/warning_sigh.xml
res/layout/abc_screen_simple.xml
res/xml/advanced_settings_preference.xml
res/drawable/ic_mtrl_chip_checked_circle.xml
res/color-v23/abc_tint_seek_thumb.xml
res/color/mtrl_chip_text_color.xml
res/drawable-anydpi-v21/ic_fb.xml
res/drawable/button_blue1.xml
res/color/abc_hint_foreground_material_dark.xml
res/xml/splits0.xml
res/drawable/minib.png
res/color-v23/abc_tint_edittext.xml
res/drawable/abc_switch_thumb_material.xml
res/drawable-xhdpi-v21/ic_wkk.png
res/layout/activity_speedtest.xml
assets/flags/wo.png
res/layout/abc_action_menu_layout.xml
play-services-ads-base.properties
res/drawable-anydpi-v21/h_spin_shp1.xml
res/drawable-xhdpi-v4/abc_text_select_handle_left_mtrl_light.png
res/layout/abc_list_menu_item_icon.xml
res/drawable-xhdpi-v4/abc_list_divider_mtrl_alpha.9.png
res/layout/preference_widget_switch_compat.xml
res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png
res/layout/activity_tutostu.xml
res/layout-sw600dp-v13/mtrl_layout_snackbar.xml
res/drawable-anydpi-v21/ic_delete_forever_black_24dp.xml
res/drawable-v21/abc_list_divider_material.xml
assets/flags/et.png
res/color/design_error.xml
res/layout/design_layout_tab_text.xml
res/animator/mtrl_fab_show_motion_spec.xml
res/anim-v21/design_bottom_sheet_slide_in.xml
res/drawable/common_google_signin_btn_text_dark_focused.xml
res/drawable-xhdpi-v4/abc_switch_track_mtrl_alpha.9.png
res/anim/abc_slide_in_bottom.xml
res/layout/notification_template_part_chronometer.xml
res/drawable/fondoclay.png
res/drawable-v21/$avd_show_password__0.xml
res/drawable-xhdpi-v4/abc_list_pressed_holo_light.9.png
res/color/mtrl_tabs_icon_color_selector_colored.xml
res/layout/nav_header.xml
res/layout/design_navigation_menu_item.xml
res/layout/abc_action_menu_item_layout.xml
res/drawable-xhdpi-v4/abc_list_pressed_holo_dark.9.png
kotlin/coroutines/coroutines.kotlin_builtins
res/drawable/h_acnt2.xml
AndroidManifest.xml
res/layout/abc_search_dropdown_item_icons_2line.xml
play-services-measurement-sdk-api.properties
res/layout/pref_dialog_edittext_fix.xml
res/drawable-anydpi-v21/ic_arrow_down_24dp.xml
res/layout-v22/abc_alert_dialog_button_bar_material.xml
res/drawable-anydpi-v21/ic_bug_report_black_24dp.xml
res/animator/design_fab_show_motion_spec.xml
assets/flags/vi.png
res/drawable-xhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_dark.9.png
res/drawable/success_toast.xml
res/drawable-anydpi-v24/ic_tg.xml
res/layout/launchvpn.xml
res/drawable-xhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-xhdpi-v4/notification_bg_low_normal.9.png
res/drawable-xhdpi-v4/common_google_signin_btn_icon_dark_normal_background.9.png
transport-backend-cct.properties
res/drawable/warning_toast.xml
res/drawable/abc_seekbar_thumb_material.xml
res/anim/abc_fade_out.xml
res/color/abc_background_cache_hint_selector_material_light.xml
res/drawable/folder_icon.png
res/layout/simple_spinner_dropdown.xml
res/drawable-anydpi-v21/ic_stat_cloud_lightning.xml
assets/flags/te.png
res/layout/custom_dialog.xml
res/drawable-xhdpi-v4/abc_text_select_handle_middle_mtrl_light.png
res/drawable-xhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable/mtrl_tabs_default_indicator.xml
res/drawable/divider_white.xml
res/drawable-v21/abc_edit_text_material.xml
res/layout/mtrl_layout_snackbar_include.xml
res/layout-sw600dp-v13/design_layout_snackbar.xml
res/drawable/notification_bg.xml
res/drawable/ic_timer.xml
res/layout/fragment_proxy_remote.xml
res/animator/design_fab_hide_motion_spec.xml
res/drawable-v21/preference_list_divider_material.xml
res/drawable-anydpi-v21/xgame.xml
res/menu/main_menu.xml
res/drawable/abc_ic_arrow_drop_right_black_24dp.xml
res/layout-watch-v20/abc_alert_dialog_button_bar_material.xml
res/drawable/abc_list_selector_holo_light.xml
res/layout/toolbar_main.xml
res/drawable/ic_code.xml
res/drawable-xhdpi-v4/abc_ic_star_black_36dp.png
lib/armeabi-v7a/libpdnsd.so
res/layout-v21/preference_dropdown_material.xml
res/anim/design_snackbar_out.xml
res/drawable-v21/$avd_hide_password__2.xml
res/drawable/gris1.xml
res/layout/warning_toast_layout.xml
res/drawable-v21/$avd_show_password__1.xml
DebugProbesKt.bin
res/drawable-xhdpi-v4/abc_list_focused_holo.9.png
res/drawable-v21/abc_action_bar_item_background_material.xml
res/drawable-anydpi-v21/ic_cloud_black_24dp.xml
res/drawable/telegram.png
transport-api.properties
res/drawable-anydpi-v21/ic_rate_review_black_24dp.xml
res/color/mtrl_btn_ripple_color.xml
res/drawable-xhdpi-v4/ic_wifi_tethering_white_24dp.png
res/anim/abc_shrink_fade_out_from_bottom.xml
core.properties
res/drawable-xhdpi-v4/googleg_disabled_color_18.png
META-INF/com/android/build/gradle/app-metadata.properties
res/layout/select_dialog_multichoice_material.xml
res/drawable-xhdpi-v4/abc_popup_background_mtrl_mult.9.png
res/drawable-anydpi-v21/netflix.xml
res/layout/abc_action_mode_bar.xml
res/drawable/vince9.xml
res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png
assets/flags/xd.png
res/drawable-anydpi-v21/design_ic_visibility_off.xml
res/drawable/abc_item_background_holo_dark.xml
res/drawable-xhdpi-v4/ic_share_white_24dp.png
res/drawable-xhdpi-v4/abc_ic_star_half_black_16dp.png
res/animator/mtrl_fab_transformation_sheet_collapse_spec.xml
res/color/abc_tint_seek_thumb.xml
res/layout-v21/notification_template_custom_big.xml
res/drawable/ic_file.xml
res/layout/abc_list_menu_item_checkbox.xml
res/layout/abc_popup_menu_header_item_layout.xml
res/color/abc_secondary_text_material_dark.xml
res/drawable/whatsapp.png
res/menu/logs_menu.xml
firebase-common.properties
res/color/common_google_signin_btn_text_light.xml
res/drawable-v21/$avd_hide_password__1.xml
play-services-measurement-sdk.properties
res/drawable-anydpi-v21/keyss.png
res/layout/abc_tooltip.xml
firebase-installations-interop.properties
res/drawable/common_google_signin_btn_text_light_focused.xml
res/drawable/wakko_logo.png
res/drawable-xhdpi-v4/ic_group_white_48dp.png
res/drawable-anydpi-v21/ic_exit_to_app_black_24dp.xml
res/drawable/ic_cloud_download.xml
res/drawable-anydpi-v21/ic_rocket.xml
res/layout/support_simple_spinner_dropdown_item.xml
res/drawable/ic_developer_mode.xml
res/anim/success_mask_layout.xml
res/drawable/common_google_signin_btn_icon_light_normal.xml
res/drawable-xhdpi-v4/ic_lock_white_24dp.png
res/layout-watch-v20/abc_alert_dialog_title_material.xml
res/drawable-anydpi-v21/ic_person_black_24dp.xml
res/drawable-anydpi-v21/ic_mode_edit_black_24dp.xml
res/layout/abc_select_dialog_material.xml
res/anim/abc_slide_in_top.xml
org/conscrypt/conscrypt.properties
res/color/abc_tint_btn_checkable.xml
kotlin/internal/internal.kotlin_builtins
res/interpolator/mtrl_linear.xml
res/drawable/ic_down.xml
res/color/abc_btn_colored_text_material.xml
res/color/abc_primary_text_material_dark.xml
res/color/mtrl_btn_text_btn_ripple_color.xml
firebase-components.properties
res/layout/fragment_dialog_licenses.xml
res/layout-v22/activity_main.xml
res/drawable/stroke.xml
res/layout/activity_home.xml
res/drawable/abc_ratingbar_indicator_material.xml
res/drawable/abc_textfield_search_material.xml
res/font/ubuntur.ttf
res/drawable-xhdpi-v21/ic_wkk2.png
play-services-measurement-impl.properties
kotlin/kotlin.kotlin_builtins
res/drawable/common_google_signin_btn_text_light.xml
firebase-encoders-proto.properties
res/drawable-v23/abc_control_background_material.xml
assets/flags/tu.png
res/drawable/info_toast.xml
res/drawable-v21/abc_btn_colored_material.xml
res/drawable/abc_list_selector_holo_dark.xml
res/layout/error_toast_layout.xml
res/anim/modal_out.xml
res/drawable-mdpi-v4/redondo2.xml
res/drawable-xhdpi-v4/abc_ic_star_half_black_36dp.png
res/animator/mtrl_btn_unelevated_state_list_anim.xml
res/xml/app_preferences.xml
res/layout-v26/abc_screen_toolbar.xml
res/drawable-anydpi-v21/ic_wifi_tethering_black_24dp.xml
res/drawable-ldrtl-xhdpi-v17/abc_ic_menu_cut_mtrl_alpha.png
res/anim/abc_tooltip_exit.xml
res/color-v23/abc_tint_default.xml
res/drawable/darksource.xml
firebase-encoders.properties
assets/flags/en.png
res/drawable/abc_ratingbar_small_material.xml
lib/armeabi-v7a/libtun2socks.so
res/animator/mtrl_btn_state_list_anim.xml
res/layout/activity_about.xml
res/layout/abc_action_bar_up_container.xml
res/color-v21/abc_btn_colored_borderless_text_material.xml
res/drawable/abc_spinner_textfield_background_material.xml
res/color/mtrl_btn_text_color_selector.xml
res/layout/abc_cascading_menu_item_layout.xml
res/color/mtrl_chip_close_icon_tint.xml
res/drawable-anydpi-v24/ic_wkk2.xml
res/drawable-anydpi-v21/ic_shield.xml
res/layout/alert_dialog.xml
res/drawable/common_google_signin_btn_text_disabled.xml
res/drawable/ic_error.xml
res/drawable/mtrl_snackbar_background.xml
res/color/mtrl_fab_ripple_color.xml
res/drawable/abc_ic_search_api_material.xml
res/color/common_google_signin_btn_tint.xml
res/drawable-v21/avd_hide_password.xml
res/layout/payload_generator.xml
res/drawable/abc_ic_menu_overflow_material.xml
res/drawable-xhdpi-v4/ic_visibility_off_white_24dp.png
res/layout/preference_information.xml
kotlin/ranges/ranges.kotlin_builtins
res/drawable/clay_splash.gif
res/raw/keep.xml
res/anim/error_x_in.xml
res/drawable/tooltip_frame_dark.xml
lib/armeabi-v7a/libtool-checker.so
assets/PRIVACY
res/layout/preference_list_fragment.xml
res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-anydpi-v21/ic_gaming.xml
res/layout/activity_config_export.xml
res/drawable-anydpi-v21/ic_wkk_bw2.png
res/drawable-xhdpi-v4/abc_btn_check_to_on_mtrl_015.png
res/anim/translate.xml
res/drawable-xhdpi-v4/abc_ic_star_black_16dp.png
res/layout/custom_setup.xml
res/anim/abc_grow_fade_in_from_bottom.xml
lib/armeabi-v7a/libpl_droidsonroids_gif.so
res/drawable/design_fab_background.xml
assets/flags/vo.png
res/layout/design_layout_tab_icon.xml
res/anim-v21/design_bottom_sheet_slide_out.xml
assets/flags/bi.png
res/color/switch_thumb_material_dark.xml
res/layout/abc_screen_content_include.xml
res/drawable/ic_mtrl_chip_checked_black.xml
res/menu/navigation_menu.xml
res/layout-v21/preference_widget_seekbar_material.xml
res/layout-v21/notification_action.xml
res/drawable-anydpi-v21/ic_stat_cloud_pouring.xml
assets/flags/av.png
res/anim/abc_tooltip_enter.xml
res/layout/abc_alert_dialog_title_material.xml
res/drawable-anydpi-v21/ic_connecting.xml
res/color-v23/abc_tint_switch_track.xml
res/drawable/common_google_signin_btn_text_dark.xml
res/layout/list_item_manager.xml
res/animator/mtrl_chip_state_list_anim.xml
res/layout/select_dialog_singlechoice_material.xml
res/drawable/pro.png
res/layout/design_navigation_item_separator.xml
res/drawable/error_circle.xml
play-services-ads-lite.properties
firebase-iid-interop.properties
res/drawable-xhdpi-v4/common_google_signin_btn_text_light_normal_background.9.png
res/layout/abc_action_mode_close_item_material.xml
play-services-cloud-messaging.properties
res/drawable/design_snackbar_background.xml
res/drawable/contacto.png
res/layout/confusing_toast_layout.xml
res/layout/custom_spinner_items.xml
res/drawable-anydpi-v21/ic_event_note_black_24dp.xml
res/color/mtrl_chip_ripple_color.xml
res/drawable-xxhdpi-v4/button_green1.xml
res/layout/preference_recyclerview.xml
res/drawable-anydpi-v21/ic_visibility_off_black_24dp.xml
res/drawable-xhdpi-v4/common_google_signin_btn_text_dark_normal_background.9.png
res/drawable/letras.png
res/drawable-xhdpi-v4/notification_bg_normal_pressed.9.png
res/drawable/box_gradient.xml
res/anim/move_up.xml
res/drawable-mdpi-v4/redondo1.xml
play-services-basement.properties
res/layout/abc_activity_chooser_view.xml
res/drawable-xhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png
play-services-stats.properties
res/drawable/abc_btn_default_mtrl_shape.xml
res/xml/sshtunnel_preferences.xml
res/animator/mtrl_fab_transformation_sheet_expand_spec.xml
res/color-v23/abc_tint_btn_checkable.xml
res/drawable/logo5.png
res/drawable-xhdpi-v4/ic_tg.png
firebase-messaging.properties
res/color/mtrl_chip_background_color.xml
res/drawable-xhdpi-v4/abc_btn_check_to_on_mtrl_000.png
res/drawable/background_rounded1.xml
res/drawable/ic_settings.xml
res/drawable-xhdpi-v4/common_full_open_on_phone.png
res/layout/design_navigation_item.xml
res/drawable/abc_seekbar_tick_mark_material.xml
res/drawable/ic_folder.xml
res/drawable-xhdpi-v4/ic_visibility_white_24dp.png
res/layout/list_item_log_drawer.xml
META-INF/CERT.SF
META-INF/CERT.RSA
META-INF/MANIFEST.MF

污点分析

当apk较大时,代码量会很大,造成数据流图(ICFG)呈现爆炸式增长,所以该功能比较耗时,请先喝杯咖啡,耐心等待……
规则名称 描述信息 操作
病毒分析 使用安卓恶意软件常用的API进行污点分析 开始分析  
漏洞挖掘 漏洞挖掘场景下的污点分析 开始分析  
隐私合规 隐私合规场景下的污点分析:组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 开始分析  
密码分析 分析加密算法是否使用常量密钥、静态初始化的向量(IV)、加密模式是否使用ECB等 开始分析  
Callback 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用,所以如果需要分析Callback方法需要在声明文件中将其声明,这里提供一份AndroidCallbacks.txt文件,里面是一些常见的原生回调接口或类,如果有特殊接口需求,可以联系管理员 开始分析