FLIX VISION 2.8.2版本 | 静态分析 _南明离火移动安全分析平台

温馨提示：本平台仅供研究软件风险、安全评估，禁止用于非法用途。由于展示的数据过于全面，请耐心等待加载完成。如有疑问或建议，可加入我们的微信群讨论

应用图标

文件信息

文件名称 FLIX_VISION_AF_2.8.2r_MultiPatch_Spydog_arm64-v8a_UserUpload.Net.apk
文件大小 28.85MB
MD5 50f24ff82aa9d91b98b0f9d6ff991642
SHA1 f78ab7dd39dbef8741f7dbc8e6032da75711dafa
SHA256 aa1d020022792c2f2b4edf85e679e03637ec0ab2b95a11a83ce68313a34fa3f5
病毒检测 ⚠️ 4 个厂商报毒⚠️

应用信息

应用名称 FLIX VISION
包名 flix.com.vision
主活动 flix.com.vision.activities.SplashScreenActivity
目标SDK 29 最小SDK 21
版本号 2.8.2 子版本号 48
加固信息未加壳

非法应用检测（该功能即将上线，识别赌博、诈骗、色情和黑产等类型应用）

组件导出信息

查看

扫描选项

重新扫描管理规则动态分析

反编译代码

Manifest文件查看

APK文件成为会员，解锁下载

Java源代码查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: False
v3 签名: False
v4 签名: False
主题: C=US, ST=California, L=Mountain View, O=Android, OU=Android, CN=Android, E=android@android.com
签名算法: rsassa_pkcs1v15
有效期自: 2008-02-29 01:33:46+00:00
有效期至: 2035-07-17 01:33:46+00:00
发行人: C=US, ST=California, L=Mountain View, O=Android, OU=Android, CN=Android, E=android@android.com
序列号: 0x936eacbe07f201df
哈希算法: sha1
证书MD5: e89b158e4bcf988ebd09eb83f5378e87
证书SHA1: 61ed377e85d386a8dfee6b864bd85b0bfaa5af81
证书SHA256: a40da80a59d170caa950cf15c18c454d47a39b26989d8b640ecd745ba71bf5dc
证书SHA512: 5216ccb62004c4534f35c780ad7c582f4ee528371e27d4151f0553325de9ccbe6b34ec4233f5f640703581053abfea303977272d17958704d89b7711292a4569
找到 1 个唯一证书

应用程序权限

权限名称	安全等级	权限内容	权限描述	关联代码
android.permission.INTERNET	危险	完全互联网访问	允许应用程序创建网络套接字。	显示文件 ac/a.java ca/c.java cc/c.java com/comcast/viper/hlsparserj/PlaylistFactory.java com/unity3d/services/core/connectivity/ConnectivityNetworkCallback.java com/unity3d/services/core/request/WebRequest.java com/unity3d/services/core/request/WebRequestRunnable.java com/uwetrottmann/trakt5/TraktV2.java fa/a.java fa/e.java flix/com/vision/App.java flix/com/vision/activities/MainActivity.java flix/com/vision/activities/SearchActivityTV.java flix/com/vision/activities/leanback/MainActivityLeanback.java flix/com/vision/api/realdebrid/RealDebridLoginActivity.java flix/com/vision/tv/TVCategoriesActivity2.java ha/b.java i7/a.java io/netas/task/ProtoAsyncTask.java l0/c.java l2/b.java lc/a.java org/adblockplus/libadblockplus/android/AdblockEngine.java org/adblockplus/libadblockplus/android/AndroidHttpClient.java org/adblockplus/libadblockplus/android/ConnectionInputStream.java org/threeten/bp/zone/TzdbZoneRulesProvider.java q2/b.java q2/g.java se/n.java ve/b.java wb/b.java wb/e.java wb/g.java wb/i.java x4/k.java x8/g.java xb/d.java xb/g.java xb/j.java xb/m.java xb/q.java xb/t.java
android.permission.FOREGROUND_SERVICE	普通	创建前台Service	Android 9.0以上允许常规应用程序使用 Service.startForeground，用于podcast播放（推送悬浮播放，锁屏播放）	显示文件 io/netas/Netas.java io/netas/receiver/BootupReceiver.java y/a.java
android.permission.SYSTEM_ALERT_WINDOW	危险	弹窗	允许应用程序弹窗。恶意程序可以接管手机的整个屏幕。	显示文件 com/afollestad/materialdialogs/MaterialDialog.java com/unity3d/services/ads/adunit/AdUnitActivityController.java com/unity3d/services/ads/operation/show/ShowModule.java d/n.java flix/com/vision/bvp/BetterVideoPlayer.java flix/com/vision/bvp/BetterVideoPlayer2.java flix/com/vision/helpers/CursorLayout.java v5/v.java y/a.java z4/f.java za/a.java
android.permission.ACCESS_WIFI_STATE	普通	查看Wi-Fi状态	允许应用程序查看有关Wi-Fi状态的信息。	显示文件 com/unity3d/services/core/connectivity/ConnectivityNetworkCallback.java
android.permission.ACCESS_NETWORK_STATE	普通	获取网络状态	允许应用程序查看所有网络的状态。	显示文件 b3/c.java com/unity3d/services/core/connectivity/ConnectivityChangeReceiver.java com/unity3d/services/core/connectivity/ConnectivityMonitor.java com/unity3d/services/core/connectivity/ConnectivityNetworkCallback.java com/unity3d/services/core/device/Device.java io/netas/service/NetasService.java io/netas/support/NetworkStateReceiver.java k3/h.java org/adblockplus/libadblockplus/android/ConnectionType.java org/adblockplus/libadblockplus/android/IsAllowedConnectionCallbackImpl.java
android.permission.WRITE_EXTERNAL_STORAGE	危险	读取/修改/删除外部存储内容	允许应用程序写入外部存储。	显示文件 a0/o.java ac/a.java com/unity3d/services/core/api/Cache.java com/unity3d/services/core/cache/CacheDirectory.java com/unity3d/services/core/misc/Utilities.java e7/k0.java f7/g.java flix/com/vision/App.java flix/com/vision/activities/MainActivity.java flix/com/vision/activities/SearchActivityTV.java flix/com/vision/activities/leanback/MainActivityLeanback.java ha/b.java j7/a.java ka/a.java l2/a.java q2/d.java se/n.java u2/a.java
android.permission.READ_EXTERNAL_STORAGE	危险	读取SD卡内容	允许应用程序从SD卡读取信息。	显示文件 a0/h.java a0/o.java ac/a.java com/unity3d/services/core/cache/CacheDirectory.java com/unity3d/services/core/device/Device.java com/unity3d/services/core/misc/Utilities.java e7/g0.java f7/g.java flix/com/vision/App.java flix/com/vision/bvp/subtitle/CaptionsView.java flix/com/vision/tv/TVCategoriesActivity2.java j7/a.java ka/a.java l2/b.java l7/a.java org/threeten/bp/chrono/HijrahDate.java pl/droidsonroids/gif/GifInfoHandle.java q2/d.java sd/b.java se/n.java x0/a.java
android.permission.VIBRATE	普通	控制振动器	允许应用程序控制振动器，用于消息通知振动功能。
android.permission.CHANGE_WIFI_MULTICAST_STATE	危险	允许接收WLAN多播	允许应用程序接收并非直接向您的设备发送的数据包。这样在查找附近提供的服务时很有用。这种操作所耗电量大于非多播模式。
com.android.launcher.permission.INSTALL_SHORTCUT	签名	创建快捷方式	这个权限是允许应用程序创建桌面快捷方式。
disabled_android.permission.REQUEST_INSTALL_PACKAGES	未知	未知权限	来自 android 引用的未知权限。
android.permission.RECEIVE_BOOT_COMPLETED	普通	开机自启	允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间，而且如果应用程序一直运行，会降低手机的整体速度。	显示文件 com/unity3d/services/core/broadcast/BroadcastEventReceiver.java com/unity3d/services/core/connectivity/ConnectivityChangeReceiver.java d/n.java f1/a.java io/netas/Netas.java io/netas/receiver/BatteryLevelReceiver.java io/netas/receiver/BootupReceiver.java io/netas/support/NetworkStateReceiver.java j1/u.java j1/x.java t6/f.java y/a.java
android.permission.WAKE_LOCK	危险	防止手机休眠	允许应用程序防止手机休眠，在手机屏幕关闭后后台进程仍然运行。	显示文件 c1/a.java com/unity3d/services/ads/video/VideoPlayerView.java flix/com/vision/activities/SplashScreenActivity.java flix/com/vision/bvp/BetterVideoPlayer2.java flix/com/vision/exomedia/core/video/mp/NativeSurfaceVideoView.java flix/com/vision/exomedia/core/video/mp/NativeTextureVideoView.java flix/com/vision/exomedia/core/video/mp/NativeVideoDelegate.java gc/a.java io/netas/service/NetasService.java
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE	普通	Google 定义的权限	由 Google 定义的自定义权限。
disabled_com.google.android.gms.permission.AD_ID	未知	未知权限	来自 android 引用的未知权限。
disabled_android.permission.ACCESS_ADSERVICES_ATTRIBUTION	未知	未知权限	来自 android 引用的未知权限。
disabled_android.permission.ACCESS_ADSERVICES_AD_ID	未知	未知权限	来自 android 引用的未知权限。
disabled_android.permission.ACCESS_ADSERVICES_TOPICS	未知	未知权限	来自 android 引用的未知权限。
flix.com.vision.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION	未知	未知权限	来自 android 引用的未知权限。

证书安全分析

高危

1

警告

0

信息

1

标题	严重程度	描述信息
已签名应用	信息	应用程序已使用代码签名证书进行签名
应用程序存在Janus漏洞	高危	应用程序使用了v1签名方案进行签名，如果只使用v1签名方案，那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序，以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。

MANIFEST分析

高危

0

警告

7

信息

0

屏蔽

0

序号	问题	严重程度	描述信息	操作
1	应用程序可以安装在有漏洞的已更新 Android 版本上 Android 5.0-5.0.2, [minSdk=21]	信息	该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。	对应用 flix.com.vision 禁止使用 vulnerable_os_version 规则
2	应用程序已启用明文网络流量 [android:usesCleartextTraffic=true]	警告	应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。	对应用 flix.com.vision 禁止使用 clear_text_traffic 规则
3	应用程序数据可以被备份 [android:allowBackup=true]	警告	这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。	对应用 flix.com.vision 禁止使用 app_allowbackup 规则
4	Activity (flix.com.vision.cast.ExpandedControlsActivity) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 flix.com.vision 禁止使用 activity_exported_intent_filter_exists 规则
5	Broadcast Receiver (io.netas.receiver.BootupReceiver) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.RECEIVE_BOOT_COMPLETED [android:exported=true]	警告	发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 flix.com.vision 禁止使用 receiver_exported_protected_permission_not_defined 规则
6	Broadcast Receiver (io.netas.support.NetworkStateReceiver) 未被保护。 [android:exported=true]	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 flix.com.vision 禁止使用 receiver_explicitly_exported 规则
7	Broadcast Receiver (io.netas.receiver.BatteryLevelReceiver) 未被保护。 [android:exported=true]	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 flix.com.vision 禁止使用 receiver_explicitly_exported 规则
8	Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.DUMP [android:exported=true]	警告	发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 flix.com.vision 禁止使用 receiver_exported_protected_permission_not_defined 规则

可浏览的Activity组件

ACTIVITY	INTENT

网络通信安全

序号	范围	严重级别	描述

API调用分析

API功能	源码文件
一般功能-> 文件操作	显示文件 a0/h.java a0/k.java a0/m.java a0/n.java a0/o.java a4/a.java a4/c.java a4/p.java a4/u.java a8/a.java ac/a.java b0/a.java b3/c.java b4/a.java b4/c.java b7/b.java b7/d.java bc/c.java c2/e.java c3/j.java ca/b.java ca/c.java cc/c.java com/comcast/viper/hlsparserj/PlaylistFactory.java com/comcast/viper/hlsparserj/PlaylistParser.java com/jakewharton/threetenabp/AssetsZoneRulesInitializer.java com/unity3d/services/core/api/Cache.java com/unity3d/services/core/api/DeviceInfo.java com/unity3d/services/core/cache/CacheDirectory.java com/unity3d/services/core/cache/CacheEventSender.java com/unity3d/services/core/cache/CacheThreadHandler.java com/unity3d/services/core/configuration/Configuration.java com/unity3d/services/core/configuration/ConfigurationReader.java com/unity3d/services/core/configuration/EnvironmentCheck.java com/unity3d/services/core/configuration/InitializeThread.java com/unity3d/services/core/device/Device.java com/unity3d/services/core/device/Storage.java com/unity3d/services/core/device/StorageManager.java com/unity3d/services/core/device/reader/DeviceInfoReaderCompressor.java com/unity3d/services/core/device/reader/DeviceInfoReaderExtended.java com/unity3d/services/core/domain/task/ConfigFileFromLocalStorage$doWork$2.java com/unity3d/services/core/domain/task/InitializeStateLoadCache.java com/unity3d/services/core/domain/task/InitializeStateLoadWeb$doWork$2.java com/unity3d/services/core/domain/task/InitializeStateReset$doWork$2.java com/unity3d/services/core/log/DeviceLog.java com/unity3d/services/core/misc/Utilities.java com/unity3d/services/core/network/core/OkHttp3Client.java com/unity3d/services/core/preferences/AndroidPreferences.java com/unity3d/services/core/properties/ClientProperties.java com/unity3d/services/core/properties/SdkProperties.java com/unity3d/services/core/request/WebRequest.java com/unity3d/services/core/webview/WebViewUrlBuilder.java com/uwetrottmann/trakt5/TraktV2.java com/uwetrottmann/trakt5/TraktV2Authenticator.java com/uwetrottmann/trakt5/TraktV2Interceptor.java d/a0.java d/z.java d3/a.java d3/t.java e0/d.java e1/a.java e1/b.java e7/a0.java e7/b.java e7/g.java e7/g0.java e7/i.java e7/j.java e7/j0.java e7/k0.java e7/m0.java e7/r.java e7/y.java e8/c.java eb/a.java eb/b.java f/a.java f0/d.java f4/g.java f7/a.java f7/g.java f7/h.java f7/i.java f7/j.java fa/c.java fa/d.java fa/e.java fc/a.java flix/com/vision/App.java flix/com/vision/activities/MainActivity.java flix/com/vision/activities/MovieDetailActivity.java flix/com/vision/activities/SearchActivityTV.java flix/com/vision/activities/SettingsActivity.java flix/com/vision/activities/SplashScreenActivity.java flix/com/vision/activities/a.java flix/com/vision/activities/leanback/MainActivityLeanback.java flix/com/vision/activities/player/SimpleVideoPlayer.java flix/com/vision/api/alldebrid/AllDebridCommon.java flix/com/vision/api/premiumize/PremiumizeCommon.java flix/com/vision/api/realdebrid/RealDebridCommon.java flix/com/vision/api/realdebrid/RealDebridLoginActivity.java flix/com/vision/bvp/BetterVideoPlayer2.java flix/com/vision/bvp/subtitle/CaptionsView.java flix/com/vision/exomedia/core/video/mp/NativeVideoDelegate.java flix/com/vision/filepickerlibrary/FilePicker.java flix/com/vision/filepickerlibrary/FilePickerActivity.java flix/com/vision/filepickerlibrary/b.java flix/com/vision/filepickerlibrary/d.java flix/com/vision/helpers/Constants.java flix/com/vision/models/Anime.java flix/com/vision/models/Movie.java flix/com/vision/models/PreferenceEntry.java flix/com/vision/models/PreferencesModel.java flix/com/vision/models/torrent/AddMagnetDTO.java flix/com/vision/tv/Constant.java flix/com/vision/tv/TVCategoriesActivity2.java g/c.java g2/b.java g7/a.java gb/g.java h4/a.java h4/b.java h4/d.java h4/e.java h4/f.java h4/g.java h4/h.java h4/j.java h4/k.java h7/a.java ha/b.java i/g.java i4/d.java i4/f.java i4/g.java i4/i.java i4/j.java i4/k.java i4/m.java i7/a.java i8/y.java i8/z.java io/netas/task/ProtoAsyncTask.java j1/w.java j4/b.java j4/e.java j4/h.java j7/a.java j7/b.java k4/c.java ka/a.java kh/dxaes/zxpqwptdr/etbbaupkgfxetwgzwc.java l0/c.java l2/a.java l2/b.java l3/d.java l4/a.java l4/c.java l4/e.java l4/f.java l4/g.java l4/h.java l4/i.java l4/j.java l4/l.java l7/a.java l7/c.java la/d.java m2/a.java m2/a0.java m2/b.java m2/b0.java m2/c.java m2/d.java m2/f.java m2/h.java m2/h0.java m2/i.java m2/l.java m2/o.java m2/p.java m2/q.java m2/r.java m2/s.java m2/t.java m2/v.java m2/w.java m6/a.java m8/a.java m8/b.java n2/h.java n4/a.java n4/c.java n4/e.java o1/a.java o1/c.java o7/b.java o7/e.java o7/g.java org/adblockplus/libadblockplus/ServerResponse.java org/adblockplus/libadblockplus/android/AndroidHttpClient.java org/adblockplus/libadblockplus/android/AndroidHttpClientResourceWrapper.java org/adblockplus/libadblockplus/android/ConnectionInputStream.java org/adblockplus/libadblockplus/android/Subscription.java org/adblockplus/libadblockplus/android/Utils.java org/adblockplus/libadblockplus/android/webview/AdblockWebView.java org/adblockplus/libadblockplus/android/webview/HttpHeaderSiteKeyExtractor.java org/jsoup/Connection.java org/jsoup/HttpStatusException.java org/jsoup/UncheckedIOException.java org/jsoup/UnsupportedMimeTypeException.java org/jsoup/nodes/Element.java org/jsoup/nodes/Entities.java org/jsoup/nodes/a.java org/jsoup/nodes/b.java org/jsoup/nodes/c.java org/jsoup/nodes/d.java org/jsoup/nodes/e.java org/jsoup/nodes/f.java org/jsoup/nodes/g.java org/jsoup/nodes/h.java org/jsoup/nodes/i.java org/jsoup/nodes/j.java org/jsoup/parser/a.java org/jsoup/parser/c.java org/jsoup/parser/d.java org/threeten/bp/Clock.java org/threeten/bp/Duration.java org/threeten/bp/Instant.java org/threeten/bp/LocalDate.java org/threeten/bp/LocalDateTime.java org/threeten/bp/LocalTime.java org/threeten/bp/MonthDay.java org/threeten/bp/OffsetDateTime.java org/threeten/bp/OffsetTime.java org/threeten/bp/Period.java org/threeten/bp/Ser.java org/threeten/bp/Year.java org/threeten/bp/YearMonth.java org/threeten/bp/ZoneId.java org/threeten/bp/ZoneOffset.java org/threeten/bp/ZoneRegion.java org/threeten/bp/ZonedDateTime.java org/threeten/bp/chrono/ChronoDateImpl.java org/threeten/bp/chrono/ChronoLocalDateTimeImpl.java org/threeten/bp/chrono/ChronoPeriodImpl.java org/threeten/bp/chrono/ChronoZonedDateTimeImpl.java org/threeten/bp/chrono/Chronology.java org/threeten/bp/chrono/HijrahChronology.java org/threeten/bp/chrono/HijrahDate.java org/threeten/bp/chrono/HijrahEra.java org/threeten/bp/chrono/IsoChronology.java org/threeten/bp/chrono/JapaneseChronology.java org/threeten/bp/chrono/JapaneseDate.java org/threeten/bp/chrono/JapaneseEra.java org/threeten/bp/chrono/MinguoChronology.java org/threeten/bp/chrono/MinguoDate.java org/threeten/bp/chrono/MinguoEra.java org/threeten/bp/chrono/Ser.java org/threeten/bp/chrono/ThaiBuddhistChronology.java org/threeten/bp/chrono/ThaiBuddhistDate.java org/threeten/bp/chrono/ThaiBuddhistEra.java org/threeten/bp/format/DateTimeFormatter.java org/threeten/bp/temporal/ValueRange.java org/threeten/bp/temporal/WeekFields.java org/threeten/bp/zone/Ser.java org/threeten/bp/zone/StandardZoneRules.java org/threeten/bp/zone/TzdbZoneRulesProvider.java org/threeten/bp/zone/ZoneOffsetTransition.java org/threeten/bp/zone/ZoneOffsetTransitionRule.java org/threeten/bp/zone/ZoneRules.java p3/a.java p3/g.java p3/o.java pb/a.java pb/e.java pl/droidsonroids/gif/GifIOException.java pl/droidsonroids/gif/GifImageView.java pl/droidsonroids/gif/GifInfoHandle.java pl/droidsonroids/gif/a.java pl/droidsonroids/gif/c.java q0/a.java q2/a.java q2/b.java q2/d.java q2/f.java q2/g.java q2/i.java q2/j.java q2/k.java q2/l.java q2/m.java q2/n.java q7/c.java q7/d.java r0/e.java r0/i.java r5/a.java r7/a.java r7/c.java r7/d.java rb/j.java rb/l.java rd/gulp/paaavr.java s0/b.java sd/a.java sd/b.java sd/c.java sd/d.java se/a.java se/c.java se/d.java se/e.java se/f.java se/g.java se/h.java se/i.java se/j.java se/k.java se/l.java se/m.java se/n.java se/q.java se/t.java se/w.java se/x.java se/y.java se/z.java t0/a.java t0/b.java t0/c.java t3/b.java t3/d.java t3/e.java t3/f.java t3/m.java t4/a.java t7/b.java t7/h.java u0/d.java u1/e.java u1/g.java u1/j.java u2/a.java u2/c.java u3/a.java u3/b.java v3/a.java v3/d.java v3/e.java v3/f.java v7/b.java v8/g.java v9/a0.java v9/i1.java v9/m1.java v9/n1.java v9/v1.java vb/a.java vb/e.java vb/g.java ve/a.java ve/b.java w3/b.java we/a.java x0/a.java x3/e.java x3/g.java x3/i.java x3/l.java x4/d.java x4/e.java x4/i.java x4/k.java x4/m.java x7/a.java x8/f.java x8/g.java x8/i.java y/a.java y1/e.java y3/a.java y3/b.java y3/c.java y3/d.java y3/e.java y3/f.java y3/g.java y3/h.java y3/j.java y4/u.java ye/a.java ye/d.java z/b.java z/c.java z/d.java z/g.java z3/a.java
网络通信-> HTTPS建立连接	显示文件 com/unity3d/services/core/request/WebRequest.java i7/a.java q2/g.java ve/b.java
调用java反射机制	显示文件 a0/h.java a0/i.java a0/k.java a0/l.java a2/c.java b0/a.java b0/e.java com/rom4ek/arcnavigationview/ArcNavigationView.java com/unity3d/services/ads/adunit/AdUnitOpen.java com/unity3d/services/ads/gmascar/bridges/AdapterStatusBridge.java com/unity3d/services/ads/gmascar/bridges/InitializeListenerBridge.java com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridge.java com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridgeLegacy.java com/unity3d/services/ads/webplayer/WebPlayerView.java com/unity3d/services/core/configuration/EnvironmentCheck.java com/unity3d/services/core/log/DeviceLog.java com/unity3d/services/core/properties/MadeWithUnityDetector.java com/unity3d/services/core/reflection/GenericBridge.java com/unity3d/services/core/reflection/GenericListenerProxy.java com/unity3d/services/core/webview/WebViewApp.java com/unity3d/services/core/webview/bridge/IWebViewBridgeInvoker.java com/unity3d/services/core/webview/bridge/NativeCallback.java com/unity3d/services/core/webview/bridge/WebViewBridge.java com/unity3d/services/core/webview/bridge/WebViewBridgeInvoker.java com/unity3d/services/core/webview/bridge/invocation/WebViewBridgeInvocationRunnable.java com/unity3d/services/store/gpbl/bridges/SkuDetailsParamsBridge.java com/unity3d/services/store/gpbl/bridges/billingclient/common/BillingClientBridgeCommon.java com/unity3d/services/store/gpbl/proxies/BillingClientStateListenerProxy.java com/unity3d/services/store/gpbl/proxies/PurchaseHistoryResponseListenerProxy.java com/unity3d/services/store/gpbl/proxies/PurchaseUpdatedListenerProxy.java com/unity3d/services/store/gpbl/proxies/PurchasesResponseListenerProxy.java com/unity3d/services/store/gpbl/proxies/SkuDetailsResponseListenerProxy.java d/b0.java d/n.java d/w.java e3/i.java e7/r.java g0/b.java he/b.java i/g.java i0/d0.java i0/g.java i0/h0.java i0/r0.java i8/x.java i8/z.java io/netas/service/NetasService.java j/c.java k8/a.java kh/dxaes/zxpqwptdr/etbbaupkgfxetwgzwc.java le/c.java m0/c.java m0/h.java m0/i.java od/e.java od/g.java org/greenrobot/eventbus/SubscriberMethod.java org/greenrobot/eventbus/SubscriberMethodFinder.java org/greenrobot/eventbus/android/AndroidDependenciesDetector.java org/threeten/bp/chrono/Chronology.java pd/a.java pd/b.java pl/droidsonroids/gif/GifInfoHandle.java qd/a.java rd/a.java s1/a.java sa/a.java t3/c.java v1/b.java vd/d.java vd/k.java w0/b.java x/f.java x/p.java x1/e.java x4/i.java x4/k.java y1/n.java y6/e.java z/g.java
加密解密-> Base64 解密	显示文件 b3/b.java com/unity3d/services/core/api/Cache.java com/unity3d/services/core/properties/SdkProperties.java flix/com/vision/api/realdebrid/RealDebridCommon.java g2/b.java h7/a.java k4/c.java kh/dxaes/zxpqwptdr/etbbaupkgfxetwgzwc.java m6/a.java n4/c.java org/adblockplus/libadblockplus/android/AndroidBase64Processor.java rb/x.java rd/gulp/paaavr.java x7/a.java z/d.java
加密解密-> 信息摘要算法	显示文件 bc/c.java com/unity3d/services/core/device/Device.java com/unity3d/services/core/misc/Utilities.java flix/com/vision/models/Json.java x7/a.java
加密解密-> Base64 加密	显示文件 cc/f.java com/unity3d/services/ads/token/NativeTokenGenerator.java com/unity3d/services/core/api/Cache.java d3/o.java e7/r.java e8/j.java f0/f.java flix/com/vision/models/Json.java h7/a.java j3/b.java k3/b.java l3/o.java org/adblockplus/libadblockplus/android/AndroidBase64Processor.java q7/d.java v7/g.java x7/a.java
组件-> 启动 Service	显示文件 c1/a.java com/unity3d/services/core/device/AdvertisingId.java com/unity3d/services/core/device/OpenAdvertisingId.java e8/r.java io/netas/Netas.java io/netas/receiver/BootupReceiver.java j1/v.java y/a.java
一般功能-> IPC通信	显示文件 a1/a.java aa/f.java aa/g.java aa/k.java bc/e.java bc/g.java c/a.java c/b.java c/c.java c1/a.java com/unity3d/services/ads/adunit/AdUnitActivityController.java com/unity3d/services/ads/adunit/IAdUnitActivity.java com/unity3d/services/ads/api/AdUnit.java com/unity3d/services/core/api/Intent.java com/unity3d/services/core/broadcast/BroadcastEventReceiver.java com/unity3d/services/core/broadcast/BroadcastMonitor.java com/unity3d/services/core/configuration/CoreModuleConfiguration.java com/unity3d/services/core/connectivity/ConnectivityChangeReceiver.java com/unity3d/services/core/device/AdvertisingId.java com/unity3d/services/core/device/Device.java com/unity3d/services/core/device/OpenAdvertisingId.java d/j.java d/n.java d/x.java e0/b.java e0/d.java e7/e.java e8/r.java f1/a.java flix/com/vision/App.java flix/com/vision/activities/AnimeDetailActivity.java flix/com/vision/activities/AnimeHistoryActivity.java flix/com/vision/activities/AnimeSearchResultActivityClassic.java flix/com/vision/activities/AnimeSearchResultActivty.java flix/com/vision/activities/AnimesFavoritesAcvivity.java flix/com/vision/activities/AnimesListActivity.java flix/com/vision/activities/CastMoviesActivity.java flix/com/vision/activities/FavoritesAcvivity.java flix/com/vision/activities/FilterActivity.java flix/com/vision/activities/GIFActivity.java flix/com/vision/activities/LinksActivity.java flix/com/vision/activities/MainActivity.java flix/com/vision/activities/MovieDetailActivity.java flix/com/vision/activities/SearchActivityTV.java flix/com/vision/activities/SearchResultsActivity.java flix/com/vision/activities/SeriesDetailActivity.java flix/com/vision/activities/SettingsActivity.java flix/com/vision/activities/SplashScreenActivity.java flix/com/vision/activities/TraktActivity.java flix/com/vision/activities/UserTorrentsActivity.java flix/com/vision/activities/WatchedAcvivity.java flix/com/vision/activities/YouTubePlayerActivity.java flix/com/vision/activities/adult/AdultCategoriesActivity.java flix/com/vision/activities/adult/AdultHistoryActivity.java flix/com/vision/activities/adult/AdultVideosActivity.java flix/com/vision/activities/adult/AdultVideosFavoritesActivity.java flix/com/vision/activities/adult/AdultVideosSearchActivity.java flix/com/vision/activities/adult/AdultZonePINEntryActivity.java flix/com/vision/activities/leanback/FilterActivityLeanBack.java flix/com/vision/activities/leanback/MainActivityLeanback.java flix/com/vision/activities/leanback/fragment/a.java flix/com/vision/activities/player/AdultVideoPlayerActivity.java flix/com/vision/activities/player/PlayerActivityLiveTV.java flix/com/vision/activities/player/SimpleVideoPlayer.java flix/com/vision/activities/player/WebPlayerActivity.java flix/com/vision/activities/player/YouTubeWebviewActivity.java flix/com/vision/filepickerlibrary/FilePicker.java flix/com/vision/filepickerlibrary/FilePickerActivity.java flix/com/vision/filepickerlibrary/a.java flix/com/vision/filepickerlibrary/b.java flix/com/vision/filepickerlibrary/c.java flix/com/vision/materialsearchview/MaterialSearchView.java flix/com/vision/subtitles/SubtitlesWebViewActivity.java flix/com/vision/tv/ChannelsListActivity2.java flix/com/vision/tv/ChannelsListActivityImport.java flix/com/vision/tv/M3UImportActivity.java flix/com/vision/tv/MyImportActivity.java flix/com/vision/tv/PlayerActivityLiveExtended.java flix/com/vision/tv/PlayerActivityLiveExternal.java flix/com/vision/tv/TVCategoriesActivity2.java flix/com/vision/tv/TVCategorySearchActivity.java flix/com/vision/tv/TVChannelFavoritesActivity.java flix/com/vision/tv/TVChannelSearchActivity.java gb/h.java gc/a.java h1/b.java i1/a.java io/netas/Netas.java io/netas/receiver/BatteryLevelReceiver.java io/netas/receiver/BootupReceiver.java io/netas/service/NetasService.java io/netas/support/NetworkStateReceiver.java j/a.java j/c.java j/e.java j1/g.java j1/m.java j1/n.java j1/u.java j1/v.java j1/x.java j1/z.java la/d.java m0/i.java n6/b.java n6/h.java q3/c.java t6/f.java v9/a0.java v9/b1.java v9/c0.java v9/f.java v9/g0.java v9/i0.java v9/i1.java v9/l0.java v9/m1.java v9/t.java v9/u0.java v9/z.java v9/z0.java w9/k.java x/a.java x/f.java x/h.java x/k.java x/m.java x/n.java x/s.java x/u.java y/a.java y9/e.java
进程操作-> 获取进程pid	显示文件 a0/o.java b7/g.java e7/h.java e8/i.java e8/r.java y/a.java y/b.java
一般功能-> 传感器相关操作	显示文件 com/unity3d/services/core/api/DeviceInfo.java com/unity3d/services/core/device/Device.java com/unity3d/services/core/sensorinfo/SensorInfoListener.java y/a.java
组件-> 启动 Activity	显示文件 aa/f.java aa/g.java aa/k.java bc/e.java bc/g.java com/unity3d/services/ads/api/AdUnit.java com/unity3d/services/core/api/Intent.java flix/com/vision/App.java flix/com/vision/activities/AnimeDetailActivity.java flix/com/vision/activities/AnimeHistoryActivity.java flix/com/vision/activities/AnimeSearchResultActivityClassic.java flix/com/vision/activities/AnimeSearchResultActivty.java flix/com/vision/activities/AnimesFavoritesAcvivity.java flix/com/vision/activities/AnimesListActivity.java flix/com/vision/activities/CastMoviesActivity.java flix/com/vision/activities/FavoritesAcvivity.java flix/com/vision/activities/FilterActivity.java flix/com/vision/activities/GIFActivity.java flix/com/vision/activities/LinksActivity.java flix/com/vision/activities/MainActivity.java flix/com/vision/activities/MovieDetailActivity.java flix/com/vision/activities/SearchActivityTV.java flix/com/vision/activities/SearchResultsActivity.java flix/com/vision/activities/SeriesDetailActivity.java flix/com/vision/activities/SplashScreenActivity.java flix/com/vision/activities/TraktActivity.java flix/com/vision/activities/UserTorrentsActivity.java flix/com/vision/activities/WatchedAcvivity.java flix/com/vision/activities/YouTubePlayerActivity.java flix/com/vision/activities/adult/AdultCategoriesActivity.java flix/com/vision/activities/adult/AdultHistoryActivity.java flix/com/vision/activities/adult/AdultVideosActivity.java flix/com/vision/activities/adult/AdultVideosFavoritesActivity.java flix/com/vision/activities/adult/AdultVideosSearchActivity.java flix/com/vision/activities/adult/AdultZonePINEntryActivity.java flix/com/vision/activities/leanback/FilterActivityLeanBack.java flix/com/vision/activities/leanback/MainActivityLeanback.java flix/com/vision/activities/leanback/fragment/a.java flix/com/vision/activities/player/SimpleVideoPlayer.java flix/com/vision/filepickerlibrary/b.java flix/com/vision/materialsearchview/MaterialSearchView.java flix/com/vision/tv/ChannelsListActivity2.java flix/com/vision/tv/ChannelsListActivityImport.java flix/com/vision/tv/M3UImportActivity.java flix/com/vision/tv/MyImportActivity.java flix/com/vision/tv/PlayerActivityLiveExtended.java flix/com/vision/tv/TVCategoriesActivity2.java flix/com/vision/tv/TVCategorySearchActivity.java flix/com/vision/tv/TVChannelFavoritesActivity.java flix/com/vision/tv/TVChannelSearchActivity.java gb/h.java la/d.java v9/a0.java v9/b1.java v9/c0.java v9/f.java v9/g0.java v9/i0.java v9/i1.java v9/l0.java v9/m1.java v9/t.java v9/u0.java v9/z.java v9/z0.java w9/k.java x/a.java x/u.java y/a.java y9/e.java
一般功能-> 获取系统服务(getSystemService)	显示文件 b2/a.java b3/c.java b7/g.java bb/a.java c1/a.java com/unity3d/services/ads/measurements/MeasurementsService.java com/unity3d/services/ads/operation/show/ShowModule.java com/unity3d/services/ads/topics/TopicsService.java com/unity3d/services/ads/video/VideoPlayerView.java com/unity3d/services/core/connectivity/ConnectivityChangeReceiver.java com/unity3d/services/core/connectivity/ConnectivityMonitor.java com/unity3d/services/core/connectivity/ConnectivityNetworkCallback.java com/unity3d/services/core/device/Device.java com/unity3d/services/core/sensorinfo/SensorInfoListener.java d/m.java d/n.java e0/n.java e7/r.java e8/i.java flix/com/vision/App.java flix/com/vision/activities/leanback/MainActivityLeanback.java flix/com/vision/bvp/BetterVideoPlayer.java flix/com/vision/bvp/BetterVideoPlayer2.java flix/com/vision/exomedia/ui/widget/VideoView.java flix/com/vision/helpers/CursorLayout.java flix/com/vision/materialsearchview/MaterialSearchView.java i/d.java i0/d0.java i0/v0.java i6/k.java i6/p.java io/netas/service/NetasService.java io/netas/support/NetworkStateReceiver.java j1/a.java j1/r.java k3/b.java k3/h.java l5/a.java n0/c.java n1/b.java org/adblockplus/libadblockplus/android/AdblockEngine.java p0/a.java v5/t.java v5/v.java v9/f0.java x/g.java x/p.java x8/e.java y/a.java z4/f.java za/a.java
DEX-> 动态加载	d/n.java od/g.java
网络通信-> WebView JavaScript接口	显示文件 com/unity3d/services/ads/webplayer/WebPlayerView.java com/unity3d/services/core/webview/WebView.java com/unity3d/services/core/webview/WebViewApp.java flix/com/vision/activities/player/WebPlayerActivity.java flix/com/vision/activities/player/YouTubeWebviewActivity.java flix/com/vision/subtitles/SubtitlesWebViewActivity.java org/adblockplus/libadblockplus/android/webview/AdblockWebView.java wb/b.java wb/e.java wb/g.java wb/i.java
网络通信-> WebView使用File协议	显示文件 com/unity3d/services/core/webview/WebView.java flix/com/vision/activities/player/WebPlayerActivity.java flix/com/vision/activities/player/YouTubeWebviewActivity.java flix/com/vision/subtitles/SubtitlesWebViewActivity.java
网络通信-> WebView 相关	显示文件 com/unity3d/services/ads/webplayer/WebPlayerView.java com/unity3d/services/core/webview/WebView.java com/unity3d/services/core/webview/WebViewApp.java flix/com/vision/activities/player/WebPlayerActivity.java flix/com/vision/activities/player/YouTubeWebviewActivity.java flix/com/vision/subtitles/SubtitlesWebViewActivity.java org/adblockplus/libadblockplus/android/webview/AdblockWebView.java wb/b.java wb/e.java wb/g.java wb/i.java
一般功能-> 加载so文件	显示文件 org/adblockplus/libadblockplus/EventCallback.java org/adblockplus/libadblockplus/FileSystem.java org/adblockplus/libadblockplus/FilterChangeCallback.java org/adblockplus/libadblockplus/FilterEngine.java org/adblockplus/libadblockplus/HttpClient.java org/adblockplus/libadblockplus/JsEngine.java org/adblockplus/libadblockplus/JsValue.java org/adblockplus/libadblockplus/Platform.java org/adblockplus/libadblockplus/Subscription.java pl/droidsonroids/gif/GifInfoHandle.java u2/d.java
隐私数据-> 剪贴板数据读写操作	y/a.java
网络通信-> 蓝牙连接	y/a.java
一般功能-> 获取活动网路信息	显示文件 b3/c.java com/unity3d/services/core/connectivity/ConnectivityChangeReceiver.java com/unity3d/services/core/connectivity/ConnectivityMonitor.java com/unity3d/services/core/device/Device.java io/netas/service/NetasService.java io/netas/support/NetworkStateReceiver.java k3/h.java org/adblockplus/libadblockplus/android/ConnectionType.java org/adblockplus/libadblockplus/android/IsAllowedConnectionCallbackImpl.java
隐私数据-> 获取已安装的应用程序	显示文件 b3/b.java com/unity3d/services/core/device/Device.java e7/a.java e7/h0.java flix/com/vision/materialsearchview/MaterialSearchView.java m0/i.java
一般功能-> 设置手机铃声，媒体音量	com/unity3d/services/core/device/Device.java flix/com/vision/bvp/BetterVideoPlayer.java flix/com/vision/bvp/BetterVideoPlayer2.java
网络通信-> OkHttpClient Connection	显示文件 ca/c.java com/unity3d/services/core/network/core/OkHttp3Client.java com/uwetrottmann/trakt5/TraktV2.java fa/a.java fa/e.java flix/com/vision/App.java flix/com/vision/api/realdebrid/RealDebridLoginActivity.java x8/g.java
网络通信-> HTTP建立连接	显示文件 ac/a.java cc/c.java com/unity3d/services/core/request/WebRequest.java flix/com/vision/App.java flix/com/vision/tv/TVCategoriesActivity2.java l0/c.java l2/b.java org/adblockplus/libadblockplus/android/AndroidHttpClient.java org/adblockplus/libadblockplus/android/ConnectionInputStream.java q2/g.java ve/b.java x4/k.java
网络通信-> Volley Connection	显示文件 b3/b.java bc/c.java flix/com/vision/App.java io/netas/service/NetasService.java j1/w.java jc/a.java q2/i.java q2/j.java q2/m.java q2/o.java rb/e.java ub/a.java ub/d.java ub/e.java v9/f2.java v9/n0.java v9/w1.java v9/y1.java xb/a.java
一般功能-> Android通知	io/netas/service/NetasService.java
一般功能-> 获取网络接口信息	io/netas/service/NetasService.java
隐私数据-> 屏幕截图，截取自己应用内部界面	q4/b.java
JavaScript 接口方法	显示文件 com/unity3d/services/ads/webplayer/WebPlayerBridgeInterface.java com/unity3d/services/core/configuration/EnvironmentCheck.java com/unity3d/services/core/webview/bridge/WebViewBridgeInterface.java org/adblockplus/libadblockplus/android/webview/AdblockWebView.java org/adblockplus/libadblockplus/android/webview/JsSiteKeyExtractor.java
加密解密-> Crypto加解密组件	cc/a.java l4/a.java org/adblockplus/libadblockplus/security/JavaSignatureVerifier.java
网络通信-> TCP套接字	显示文件 gb/g.java io/netas/task/ProtoAsyncTask.java lc/a.java n2/h.java q2/b.java se/m.java se/n.java se/x.java we/a.java
进程操作-> 获取运行的进程\服务	显示文件 b7/g.java e8/i.java flix/com/vision/activities/leanback/MainActivityLeanback.java v9/f0.java
设备指纹-> getSimOperator	b3/c.java
辅助功能accessibility相关	i0/a.java j0/d.java l5/a.java
网络通信-> SSL证书处理	显示文件 gb/g.java io/netas/task/ProtoAsyncTask.java q2/g.java ve/b.java
网络通信-> URLConnection	显示文件 flix/com/vision/activities/MainActivity.java flix/com/vision/activities/SearchActivityTV.java flix/com/vision/activities/leanback/MainActivityLeanback.java ha/b.java
网络通信-> WebView GET请求	com/unity3d/services/core/webview/WebViewApp.java org/adblockplus/libadblockplus/android/webview/AdblockWebView.java
隐私数据-> 获取GPS位置信息	d/n.java
组件-> ContentProvider	flix/com/vision/materialsearchview/db/HistoryProvider.java

安全漏洞检测

高危

4

警告

8

信息

2

安全

1

屏蔽

0

序号	问题	等级	参考标准	文件位置	操作
1	应用程序记录日志信息,不得记录敏感信息	信息	CWE: CWE-532: 通过日志文件的信息暴露 OWASP MASVS: MSTG-STORAGE-3	升级会员：解锁高级权限	Suppress the rule android_logging in flix.com.vision Suppress the rule android_logging in flix.com.vision only from these files
2	应用程序使用不安全的随机数生成器	警告	CWE: CWE-330: 使用不充分的随机数 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-6	升级会员：解锁高级权限	Suppress the rule android_insecure_random in flix.com.vision Suppress the rule android_insecure_random in flix.com.vision only from these files
3	应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库	警告	CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当（'SQL 注入'） OWASP Top 10: M7: Client Code Quality	升级会员：解锁高级权限	Suppress the rule android_sql_raw_query in flix.com.vision Suppress the rule android_sql_raw_query in flix.com.vision only from these files
4	WebView域控制不严格漏洞	高危	CWE: CWE-73: 外部控制文件名或路径	升级会员：解锁高级权限	Suppress the rule android_webview_domain_control_week in flix.com.vision Suppress the rule android_webview_domain_control_week in flix.com.vision only from these files
5	文件可能包含硬编码的敏感信息，如用户名、密码、密钥等	警告	CWE: CWE-312: 明文存储敏感信息 OWASP Top 10: M9: Reverse Engineering OWASP MASVS: MSTG-STORAGE-14	升级会员：解锁高级权限	Suppress the rule android_hardcoded in flix.com.vision Suppress the rule android_hardcoded in flix.com.vision only from these files
6	SHA-1是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	升级会员：解锁高级权限	Suppress the rule android_sha1 in flix.com.vision Suppress the rule android_sha1 in flix.com.vision only from these files
7	应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	升级会员：解锁高级权限	Suppress the rule android_read_write_external in flix.com.vision Suppress the rule android_read_write_external in flix.com.vision only from these files
8	应用程序可以写入应用程序目录。敏感信息应加密	信息	CWE: CWE-276: 默认权限不正确 OWASP MASVS: MSTG-STORAGE-14	升级会员：解锁高级权限	Suppress the rule android_write_app_dir in flix.com.vision Suppress the rule android_write_app_dir in flix.com.vision only from these files
9	此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击	安全	OWASP MASVS: MSTG-NETWORK-4	升级会员：解锁高级权限	Suppress the rule android_ssl_pinning in flix.com.vision Suppress the rule android_ssl_pinning in flix.com.vision only from these files
10	应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。	高危	CWE: CWE-649: 依赖于混淆或加密安全相关输入而不进行完整性检查 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-3	升级会员：解锁高级权限	Suppress the rule cbc_padding_oracle in flix.com.vision Suppress the rule cbc_padding_oracle in flix.com.vision only from these files
11	不安全的Web视图实现。可能存在WebView任意代码执行漏洞	警告	CWE: CWE-749: 暴露危险方法或函数 OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-7	升级会员：解锁高级权限	Suppress the rule android_webview in flix.com.vision Suppress the rule android_webview in flix.com.vision only from these files
12	SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击	高危	CWE: CWE-295: 证书验证不恰当 OWASP Top 10: M3: Insecure Communication OWASP MASVS: MSTG-NETWORK-3	升级会员：解锁高级权限	Suppress the rule android_insecure_ssl in flix.com.vision Suppress the rule android_insecure_ssl in flix.com.vision only from these files
13	IP地址泄露	警告	CWE: CWE-200: 信息泄露 OWASP MASVS: MSTG-CODE-2	升级会员：解锁高级权限	Suppress the rule android_ip_disclosure in flix.com.vision Suppress the rule android_ip_disclosure in flix.com.vision only from these files
14	如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击	高危	CWE: CWE-79: 在Web页面生成时对输入的转义处理不恰当（'跨站脚本'） OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-6	升级会员：解锁高级权限	Suppress the rule android_webview_xss in flix.com.vision Suppress the rule android_webview_xss in flix.com.vision only from these files
15	MD5是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	升级会员：解锁高级权限	Suppress the rule android_md5 in flix.com.vision Suppress the rule android_md5 in flix.com.vision only from these files

Native库安全分析

序号	动态库	NX(堆栈禁止执行)	PIE	STACK CANARY(栈保护)	RELRO	RPATH（指定SO搜索路径）	RUNPATH（指定SO搜索路径）	FORTIFY(常用函数加强检查)	SYMBOLS STRIPPED(裁剪符号表)
1	arm64-v8a/libadblockplus-jni.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。		True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	True info 二进制文件有以下加固函数: ['__memmove_chk', '__strlen_chk', '__fgets_chk', '__strchr_chk', '__memcpy_chk', '__vsnprintf_chk']	False warning 符号可用

文件分析

序号	问题	文件
1	找到硬编码的Keystore	assets/client.jks assets/client2.jks res/sQ.jks

敏感权限分析

恶意软件常用权限 4/30

android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK

其它常用权限 8/46

android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地理位置

恶意域名检测

域名	状态	中国境内	位置信息
thepiratebay.party	安全	否	IP地址: 104.31.16.6 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
myfilestorage.xyz	安全	否	IP地址: 172.67.173.207 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
zoechip.org	安全	否	IP地址: 104.31.16.7 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
hindilinks4u.guru	安全	否	IP地址: 172.67.138.29 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
ling-online.net	安全	否	IP地址: 172.67.173.207 国家: 荷兰（王国）地区: 北荷兰省城市: 阿姆斯特丹查看: Google 地图
pagead2.googlesyndication.col	安全	否	没有可用的地理位置信息。
xvideos.com	安全	否	IP地址: 185.88.181.8 国家: 荷兰（王国）地区: 北荷兰省城市: 阿姆斯特丹查看: Google 地图
t.ly	安全	否	IP地址: 104.26.12.201 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
www.xvideos.com	安全	否	IP地址: 185.88.181.5 国家: 荷兰（王国）地区: 北荷兰省城市: 阿姆斯特丹查看: Google 地图
www1.123moviesto.to	安全	否	IP地址: 104.31.16.123 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
www.opensubtitles.org	安全	否	IP地址: 104.31.16.7 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
goo.gl	安全	否	IP地址: 142.250.76.142 国家: 美利坚合众国地区: 加利福尼亚城市: 山景城查看: Google 地图
ajax.gogocdn.net	安全	否	IP地址: 172.67.69.52 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
api-staging.trakt.tv	安全	否	IP地址: 104.20.14.80 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
lb.sklstech.com	安全	否	IP地址: 172.67.173.207 国家: 芬兰地区: 新地省城市: 赫尔辛基查看: Google 地图
autoembed.co	安全	否	IP地址: 104.21.14.38 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
easylist-downloads.adblockplus.org	安全	否	IP地址: 23.220.70.13 国家: 日本地区: 东京城市: 东京查看: Google 地图
www.scnsrc.me	安全	否	IP地址: 104.31.16.6 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
www.swiftstreamz.cc	安全	否	IP地址: 199.59.243.225 国家: 美利坚合众国地区: 佛罗里达州城市: 坦帕查看: Google 地图
publisher.monetizeapp.net	安全	否	IP地址: 198.24.188.50 国家: 美利坚合众国地区: 亚利桑那州城市: Tempe 查看: Google 地图
trakt.tv	安全	否	IP地址: 104.20.14.80 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
movies123.pk	安全	否	IP地址: 93.123.73.160 国家: 保加利亚地区: 索菲亚（斯托利萨）城市: 索菲亚查看: Google 地图
materialdesignicons.com	安全	否	IP地址: 34.234.179.93 国家: 美利坚合众国地区: 弗吉尼亚州城市: 阿什本查看: Google 地图
oauth.net	安全	否	没有可用的地理位置信息。
solidtorrents.to	安全	否	IP地址: 172.67.168.137 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
google.com	安全	否	IP地址: 142.251.42.174 国家: 日本地区: 东京城市: 东京查看: Google 地图
www.googleadservices.col	安全	否	没有可用的地理位置信息。
vidsrc.me	安全	否	没有可用的地理位置信息。
allmovieland.fun	安全	否	IP地址: 172.67.165.230 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
api.trakt.tv	安全	否	IP地址: 104.20.14.80 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
flixvision.tv	安全	否	IP地址: 185.112.144.240 国家: 冰岛地区: Hofudburgarsvaedi 城市: 雷克雅未克查看: Google 地图
bflix.gs	安全	否	IP地址: 172.67.129.210 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
www.hindimoviestv.com	安全	否	IP地址: 93.127.196.33 国家: 新加坡地区: 新加坡城市: 新加坡查看: Google 地图
publisher.api.cyberprotector.online	安全	否	IP地址: 54.39.15.131 国家: 加拿大地区: 魁北克城市: 蒙特利尔查看: Google 地图
123chill.site	安全	否	没有可用的地理位置信息。
www1.123moviesgo.ac	安全	否	IP地址: 104.31.16.125 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
twitter.com	安全	否	IP地址: 104.244.42.129 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
123moviesgoto.com	安全	否	IP地址: 75.2.81.221 国家: 美利坚合众国地区: 华盛顿城市: 西雅图查看: Google 地图
vidsrc.to	安全	否	IP地址: 104.21.64.103 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
embed.smashystream.com	安全	否	IP地址: 172.67.222.214 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
iptv-org.github.io	安全	否	IP地址: 185.199.110.153 国家: 美利坚合众国地区: 宾夕法尼亚城市: 加利福尼亚查看: Google 地图
dood.wf	安全	否	IP地址: 104.26.9.113 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
moflix-stream.xyz	安全	否	IP地址: 104.21.2.141 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
emovies.si	安全	否	IP地址: 172.67.193.201 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
api.alldebrid.com	安全	否	IP地址: 104.23.128.79 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
image.tmdb.org	安全	否	IP地址: 169.150.249.164 国家: 美利坚合众国地区: 奥克拉荷马城市: 布拉格查看: Google 地图
www.premiumize.me	安全	否	IP地址: 172.67.183.48 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
www5.gogoanimes.fi	安全	否	IP地址: 104.21.23.61 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
api.themoviedb.org	安全	是	IP地址: 13.224.163.26 国家: 中国地区: 香港城市: 香港查看: 高德地图
app-measurement.com	安全	是	IP地址: 180.163.150.161 国家: 中国地区: 上海城市: 上海查看: 高德地图
www.themoviedb.org	安全	否	IP地址: 18.67.51.10 国家: 大韩民国地区: 京畿道城市: Icheon 查看: Google 地图
solarmoviehd.ru	安全	否	IP地址: 176.31.176.75 国家: 法国地区: 上法兰西岛城市: 鲁拜克斯查看: Google 地图
api.real-debrid.com	安全	否	IP地址: 94.140.4.11 国家: 法国地区: 奥辛塔尼城市: 加龙河畔波特查看: Google 地图
upmovies.net	安全	否	IP地址: 172.67.136.8 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
www.gogoanimes.so	安全	否	IP地址: 104.21.25.212 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
www9.gogoanime.io	安全	否	IP地址: 54.157.24.8 国家: 美利坚合众国地区: 弗吉尼亚州城市: 阿什本查看: Google 地图
mikepenz.com	安全	否	IP地址: 172.67.141.197 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
friness-cherlormur-i-275.site	安全	否	IP地址: 77.72.20.146 国家: 保加利亚地区: 索菲亚（斯托利萨）城市: 索菲亚查看: Google 地图
ww9.watchmovierulz.ws	安全	否	IP地址: 104.21.96.129 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
scar.unityads.unity3d.col	安全	否	没有可用的地理位置信息。
example.com	安全	否	IP地址: 93.184.215.14 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图
www9.123moviesto.to	安全	否	IP地址: 104.31.16.6 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
raw.githubusercontent.com	安全	否	IP地址: 185.199.108.133 国家: 美利坚合众国地区: 宾夕法尼亚城市: 加利福尼亚查看: Google 地图
azm.to	安全	否	IP地址: 185.178.208.165 国家: 俄罗斯联邦地区: 莫斯科城市: 莫斯科查看: Google 地图
torrentz2.nz	安全	否	IP地址: 172.67.172.4 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
firebase-settings.crashlytics.col	安全	否	没有可用的地理位置信息。
dl.opensubtitles.org	安全	否	IP地址: 172.67.158.44 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
discord.gg	安全	否	IP地址: 162.159.135.234 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
uflix.cc	安全	否	IP地址: 172.67.141.88 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
www5.gowatchseries.tv	安全	否	IP地址: 104.31.16.4 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
rmz.cr	安全	否	IP地址: 162.223.88.69 国家: 美利坚合众国地区: 特拉华州城市: 威尔明顿查看: Google 地图
123chill.online	安全	否	IP地址: 104.21.5.55 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图

手机号提取

手机号	源码文件
15222222222	v3/d.java

URL链接分析

URL信息	源码文件
https://www.xvideos.com/c/bbw-51/ https://www.xvideos.com/c/Cumshot-18/ https://www.xvideos.com/c/Mature-38/ https://ei.phncdn.com/is-static/images/categories/ https://www.xvideos.com/c/ASMR-229/ https://www.xvideos.com/?k=Arab&p=0 https://www.xvideos.com/c/Cuckold-237/ https://www.xvideos.com/?k=pov&p=0 https://gitlab.com/eyeo/adblockplus/adblockpluscore/blob/master/test/browser/elemHideEmulation.js https://www.xvideos.com/?k=deutsch&p=0 https://www.xvideos.com/c/Stockings-28/ https://www.xvideos.com/?k=chubby&p=0 https://www.xvideos.com/?k=teen https://www.xvideos.com/c/Gangbang-69/ https://adblockplus.org/ https://www.xvideos.com/c/Interracial-27/ https://www.xvideos.com/?k=skinny&p=0 https://www.xvideos.com/?k=dp&p=0 https://www.xvideos.com/?k=thai&p=0 https://www.xvideos.com/?k=handjob&p=0 https://www.xvideos.com/c/Redhead-31/ https://www.xvideos.com/c/Creampie-40/ https://xvideos.com/c/Femdom-235/ https://www.xvideos.com/c/Lingerie-83/ https://www.xvideos.com/?k=Celebrity&p=0 https://www.xvideos.com/?k=orgasm&p=0 https://searchfox.org/mozilla-central/rev/f65d7528e34ef1a7665b4a1a7b7cdb1388fcd3aa/layout/style/StyleSheet.cpp https://www.xvideos.com/?k=deepthroat&p=0 https://xvideos.com/c/Latina-16/ https://www.xvideos.com/c/Ass-14/ https://www.xvideos.com/c/Cam_Porn-58/ https://www.cxvideos.com/c/Bi_Sexual-62/ https://www.xvideos.com/c/Fisting-165/ https://www.xvideos.com/?k=Asian&p=0 https://www.xvideos.com/?k=hentai&p=0 https://www.xvideos.com/?k=vintage&p=0 https://www.xvideos.com/c/Big_Tits-23/ https://www.xvideos.com/c/Solo_and_Masturbation-33/ https://www.xvideos.com/?k=movie&p=0 https://www.xvideos.com/?k=3d&p=0 https://www.xvideos.com/?k=compilation&p=0 https://www.xvideos.com/?k=gay&p=0 https://www.xvideos.com/c/Fucked_Up_Family-81/ https://www.xvideos.com/c/Brunette-25/ https://www.xvideos.com/c/Milf-19/ https://www.xvideos.com/c/Teen-13/ https://www.xvideos.com/?k=piss&p=0 https://www.xvideos.com/?k=shemale&p=0 https://di.phncdn.com/is-static/images/categories/ https://www.xvideos.com/?k=Amateur&p=0 https://www.xvideos.com/?k=Anal&p=0 https://www.xvideos.com/c/Blowjob-15/ https://www.xvideos.com/?k=rough&p=0 https://www.xvideos.com/c/Black_Woman-30/ https://www.xvideos.com/?k=casting&p=0 https://www.xvideos.com/c/Squirting-56/ https://www.xvideos.com/c/Gapes-167/ https://www.xvideos.com/c/Indian-89/ https://www.xvideos.com/?k=beach&p=0 https://www.xvideos.com/c/Big_Ass-24/ https://www.xvideos.com/?k=czech&p=0 https://www.xvideos.com/c/Oiled-22/ https://www.xvideos.com/c/Big_Cock-34/ https://www.xvideos.com/c/Lesbian-26/ https://www.xvideos.com/c/Blonde-20/	自研引擎-A
https://www.themoviedb.org/t/p/w300	ba/x.java
http://suggestqueries.google.com	ca/a.java
https://api.alldebrid.com https://api.real-debrid.com https://www.premiumize.me https://api.themoviedb.org	ca/c.java
https://dood.wf	cb/b.java
https://raw.githubusercontent.com/templarian/materialdesign/master/license.txt http://materialdesignicons.com/ 1.8.36.1	com/mikepenz/community_material_typeface_library/CommunityMaterial.java
https://scar.unityads.unity3d.col/v1/capture-scar-signals	com/unity3d/services/ads/gmascar/utils/ScarConstants.java
javascript:window.nativebridge.receiveevent	com/unity3d/services/ads/webplayer/WebPlayerView.java
https://trakt.tv/comments/ https://trakt.tv/episodes/ https://trakt.tv/search/imdb/ https://trakt.tv/movies/ https://trakt.tv/people/ https://trakt.tv/seasons/ https://trakt.tv/shows/ https://trakt.tv/search/tmdb/ https://trakt.tv/search/tvdb/ https://trakt.tv/search/tvrage/	com/uwetrottmann/trakt5/TraktLink.java
https://api-staging.trakt.tv/ https://api.trakt.tv/ https://trakt.tv/oauth/authorize https://trakt.tv https://trakt.tv/oauth/authorize?response_type=code&redirect_uri=	com/uwetrottmann/trakt5/TraktV2.java
https://firebase.google.com/docs/crashlytics/get-started?platform=android#add-plugin	e7/w.java
http://oauth.net/grant_type/device/1.0	fa/a.java
http://oauth.net/grant_type/device/1.0	fa/e.java
https://flixvision.tv https://www.premiumize.me/api/services/list?apikey= https://api.real-debrid.com/rest/1.0/hosts	flix/com/vision/App.java
www.gogoanimes.so/ www5.gogoanimes.fi www9.gogoanime.io https://ajax.gogocdn.net	flix/com/vision/activities/AnimeDetailActivity.java
http://suggestqueries.google.com/complete/search?client=youtube&ds=yt&q=	flix/com/vision/activities/AnimesListActivity.java
https://autoembed.co www9.gogoanime.io https://vidsrc.to/embed/tv/	flix/com/vision/activities/LinksActivity.java
https://discord.gg/tkjc4ptvxu	flix/com/vision/activities/MainActivity.java
https://www.premiumize.me/api/transfer/directdl?apikey=	flix/com/vision/activities/UserTorrentsActivity.java
https://www.xvideos.com/?k=	flix/com/vision/activities/adult/AdultVideosSearchActivity.java
https://www.themoviedb.org/t/p/w780	flix/com/vision/activities/leanback/fragment/a.java
https://www.opensubtitles.org/en/search/sublanguageid-	flix/com/vision/activities/player/SimpleVideoPlayer.java
https://api.alldebrid.com/v4/hosts?agent=flixvision	flix/com/vision/api/alldebrid/AllDebridCommon.java
https://t.ly/nlelz	flix/com/vision/helpers/Constants.java
https://www.premiumize.me/api/transfer/directdl?apikey=	flix/com/vision/processors/english/BaseProcessor.java
https://www.swiftstreamz.cc/swiftstreamzv2.4/	flix/com/vision/tv/Constant.java
https://iptv-org.github.io/iptv/index.country.m3u	flix/com/vision/tv/TVCategoriesActivity2.java
https://solarmoviehd.ru/ajax/movie_get_info/	flix/com/vision/utils/JsonUtils.java
https://lb.sklstech.com:443/devicereg	io/netas/Netas.java
https://api.real-debrid.com/rest/1.0/torrents/info/	l0/c.java
https://discord.gg/tkjc4ptvxu https://twitter.com/flixvisionapp	la/d.java
http://play.google.com/store/apps/details	n6/h.java
http://image.tmdb.org/t/p/ https://api.themoviedb.org/3/configuration?api_key=2f3cb5763db1117fcba3948632f8aad9	nb/a.java
https://www.themoviedb.org/t/p/w780	ob/a.java
https://easylist-downloads.adblockplus.org/exceptionrules.txt https://easylist-downloads.adblockplus.org/easylist.txt https://easylist-downloads.adblockplus.org/liste_ar+liste_fr+easylist.txt https://easylist-downloads.adblockplus.org/bulgarian_list+easylist.txt https://easylist-downloads.adblockplus.org/easylistchina+easylist.txt https://easylist-downloads.adblockplus.org/easylistczechslovak+easylist.txt https://easylist-downloads.adblockplus.org/easylistdutch+easylist.txt https://easylist-downloads.adblockplus.org/liste_fr+easylist.txt https://easylist-downloads.adblockplus.org/easylistgermany+easylist.txt https://easylist-downloads.adblockplus.org/abpindo+easylist.txt https://easylist-downloads.adblockplus.org/israellist+easylist.txt https://easylist-downloads.adblockplus.org/easylistitaly+easylist.txt https://easylist-downloads.adblockplus.org/latvianlist+easylist.txt https://easylist-downloads.adblockplus.org/easylistlithuania+easylist.txt https://easylist-downloads.adblockplus.org/easylistpolish+easylist.txt https://easylist-downloads.adblockplus.org/rolist+easylist.txt https://easylist-downloads.adblockplus.org/ruadlist+easylist.txt	org/adblockplus/libadblockplus/android/AndroidHttpClientResourceWrapper.java
https://xvideos.com	pb/c.java
https://xvideos.com	pb/e.java
https://www5.gowatchseries.tv	rb/a0.java
https://azm.to	rb/b.java
https://www5.gowatchseries.tv	rb/c0.java
www9.gogoanime.io	rb/d.java
https://123chill.online/	rb/g.java
https://123chill.site/	rb/i.java
https://www1.123moviesgo.ac	rb/k.java
https://www1.123moviesgo.ac	rb/m.java
https://123moviesgoto.com/	rb/o.java
https://123moviesgoto.com/	rb/q.java
https://www9.123moviesto.to	rb/s.java
https://www1.123moviesto.to	rb/u.java
https://upmovies.net	rb/w.java
https://upmovies.net	rb/y.java
https://emovies.si	sb/b.java
https://ling-online.net	sb/d.java
https://moflix-stream.xyz	sb/f.java
https://bflix.gs/ https://myfilestorage.xyz	sb/h.java
https://zoechip.org	sb/j.java
https://emovies.si	tb/b.java
https://ling-online.net	tb/d.java
https://moflix-stream.xyz	tb/f.java
https://bflix.gs/ https://myfilestorage.xyz	tb/h.java
https://zoechip.org	tb/j.java
https://allmovieland.fun/	ub/c.java
https://allmovieland.fun/	ub/g.java
https://twitter.com/flixvisionapp https://discord.gg/tkjc4ptvxu	v9/i0.java
https://uflix.cc/mplayer?movieid= https://embed.smashystream.com/playere.php?tmdb= https://vidsrc.me/embed/ https://uflix.cc/splayer?serieid=	v9/r.java
https://api.trakt.tv/oauth/device/code	v9/x1.java
https://api.trakt.tv/oauth/device/token	v9/z1.java
https://hindilinks4u.guru/	vb/b.java
https://www.hindimoviestv.com/	vb/d.java
https://ww9.watchmovierulz.ws/	vb/f.java
https://movies123.pk/	vb/h.java
https://www.scnsrc.me	wb/b.java
https://www.scnsrc.me	wb/e.java
https://rmz.cr	wb/g.java
https://rmz.cr	wb/i.java
https://api.real-debrid.com/rest/1.0/torrents/info/	xb/a.java
https://solidtorrents.to	xb/c.java
https://api.real-debrid.com/rest/1.0/torrents/selectfiles/ https://api.real-debrid.com/rest/1.0/torrents	xb/d.java
https://solidtorrents.to	xb/f.java
https://api.real-debrid.com/rest/1.0/torrents/selectfiles/ https://api.real-debrid.com/rest/1.0/torrents	xb/g.java
https://thepiratebay.party/search	xb/i.java
https://api.real-debrid.com/rest/1.0/torrents/selectfiles/ https://api.real-debrid.com/rest/1.0/torrents	xb/j.java
https://thepiratebay.party/search	xb/l.java
https://api.real-debrid.com/rest/1.0/torrents/selectfiles/ https://api.real-debrid.com/rest/1.0/torrents	xb/m.java
https://api.real-debrid.com/rest/1.0/torrents/info/	xb/n.java
https://torrentz2.nz	xb/p.java
https://api.real-debrid.com/rest/1.0/torrents/selectfiles/ https://api.real-debrid.com/rest/1.0/torrents	xb/q.java
https://torrentz2.nz	xb/s.java
https://api.real-debrid.com/rest/1.0/torrents/selectfiles/ https://api.real-debrid.com/rest/1.0/torrents	xb/t.java
https://www.opensubtitles.org https://dl.opensubtitles.org https://www.opensubtitles.org/libs/suggest.php?format=json3&moviename= https://www.opensubtitles.org/en/ssearch/sublanguageid-	yb/a.java
https://www.xvideos.com/?k= https://easylist-downloads.adblockplus.org/israellist+easylist.txt https://torrentz2.nz https://zoechip.org https://www5.gowatchseries.tv https://www.googleadservices.col/pagead/conversion/app/deeplink?id_type=adid&sdk_version=%s&rdid=%s&bundleid=%s&retry=%s https://allmovieland.fun/ https://easylist-downloads.adblockplus.org/liste_fr+easylist.txt www9.gogoanime.io https://trakt.tv https://twitter.com/flixvisionapp https://azm.to https://easylist-downloads.adblockplus.org/easylistdutch+easylist.txt https://%s/%s/%s www5.gogoanimes.fi https://firebase.google.com/support/guides/disable-analytics https://api-staging.trakt.tv/ https://github.com/fvision8/publish/releases/download/12/conf.json http://suggestqueries.google.com https://firebase.google.com/support/privacy/init-options https://api.real-debrid.com/rest/1.0/hosts https://ajax.gogocdn.net https://123chill.online/ https://discord.gg/tkjc4ptvxu https://trakt.tv/search/tmdb/ https://lb.sklstech.com:443/devicereg https://embed.smashystream.com/playere.php?tmdb= https://www.hindimoviestv.com/ http://oauth.net/grant_type/device/1.0 www.gogoanimes.so/ https://emovies.si www.google.com https://123moviesgoto.com/ 1.8.36.1 https://api.trakt.tv/oauth/device/token https://api.real-debrid.com/rest/1.0/torrents/info/ https://uflix.cc/mplayer?movieid= https://trakt.tv/search/tvdb/ https://trakt.tv/people/ http://image.tmdb.org/t/p/ https://easylist-downloads.adblockplus.org/liste_ar+liste_fr+easylist.txt https://moflix-stream.xyz https://www.opensubtitles.org https://api.alldebrid.com https://trakt.tv/episodes/ https://api.themoviedb.org/3/configuration?api_key=2f3cb5763db1117fcba3948632f8aad9 https://plus.google.com/ https://vidsrc.me/embed/ http://play.google.com/store/apps/details https://goo.gl/naoooi https://flixvision.tv https://trakt.tv/oauth/authorize?response_type=code&redirect_uri= https://easylist-downloads.adblockplus.org/rolist+easylist.txt https://api.trakt.tv/ https://t.ly/nlelz https://trakt.tv/seasons/ https://uflix.cc/splayer?serieid= https://app-measurement.com/a https://movies123.pk/ javascript:window.nativebridge.receiveevent https://ling-online.net https://upmovies.net https://www.opensubtitles.org/libs/suggest.php?format=json3&moviename= https://trakt.tv/oauth/authorize https://api.alldebrid.com/v4/hosts?agent=flixvision https://myfilestorage.xyz https://api.real-debrid.com/rest/1.0/torrents https://www.scnsrc.me https://api.themoviedb.org https://www.premiumize.me/api/transfer/directdl?apikey= https://firebase-settings.crashlytics.col/spi/v2/platforms/android/gmp/%s/settings https://dl.opensubtitles.org https://iptv-org.github.io/iptv/index.country.m3u https://www.opensubtitles.org/en/search/sublanguageid- https://easylist-downloads.adblockplus.org/easylist.txt http://mikepenz.com/ http://materialdesignicons.com/ https://materialdesignicons.com/ https://t.ly/gccvh https://api.trakt.tv/oauth/device/code https://www.themoviedb.org/t/p/w300 https://www.themoviedb.org/t/p/w780 127.0.0.255 https://easylist-downloads.adblockplus.org/easylistpolish+easylist.txt https://github.com/mikepenz/android-iconics http://{publisher}.monetizeapp.net https://easylist-downloads.adblockplus.org/easylistchina+easylist.txt https://bflix.gs/ https://trakt.tv/comments/ https://scar.unityads.unity3d.col/v1/capture-scar-signals https://solidtorrents.to https://www1.123moviesto.to https://easylist-downloads.adblockplus.org/easylistitaly+easylist.txt https://autoembed.co https://trakt.tv/movies/ https://www9.123moviesto.to https://firebase.google.com/docs/crashlytics/get-started?platform=android#add-plugin https://easylist-downloads.adblockplus.org/exceptionrules.txt https://easylist-downloads.adblockplus.org/easylistgermany+easylist.txt https://www.swiftstreamz.cc/swiftstreamzv2.4/ http://suggestqueries.google.com/complete/search?client=youtube&ds=yt&q= https://xvideos.com https://easylist-downloads.adblockplus.org/latvianlist+easylist.txt https://easylist-downloads.adblockplus.org/abpindo+easylist.txt https://hindilinks4u.guru/ http://{publisher}.api.cyberprotector.online https://vidsrc.to/embed/tv/ https://firebase.google.com/docs/analytics https://trakt.tv/search/tvrage/ https://trakt.tv/shows/ https://www.google.com https://api.real-debrid.com https://trakt.tv/search/imdb/ https://www.premiumize.me/api/services/list?apikey= https://pagead2.googlesyndication.col/pagead/gen_204?id=gmob-apps https://123chill.site/ https://ww9.watchmovierulz.ws/ https://rmz.cr https://easylist-downloads.adblockplus.org/easylistczechslovak+easylist.txt https://www1.123moviesgo.ac https://google.com/search? https://dood.wf https://raw.githubusercontent.com/templarian/materialdesign/master/license.txt https://easylist-downloads.adblockplus.org/easylistlithuania+easylist.txt https://www.premiumize.me http://javax.xml.xmlconstants/feature/secure-processing https://github.com/templarian/materialdesign/ https://api.real-debrid.com/rest/1.0/torrents/selectfiles/ https://www.opensubtitles.org/en/ssearch/sublanguageid- https://easylist-downloads.adblockplus.org/ruadlist+easylist.txt https://thepiratebay.party/search https://easylist-downloads.adblockplus.org/bulgarian_list+easylist.txt https://friness-cherlormur-i-275.site https://solarmoviehd.ru/ajax/movie_get_info/	自研引擎-S
data::serializecontents data::serializeobjectcreatemap data::serializerecursive data::serializeprototype data::serializeasregexpboilerplate data::klastdeoptimizekind data::serializeconstructor data::serializeelementskindgeneralizations data::serializeowndescriptors data::kskippablefunctiondatasize data::serializeboilerplate data::serializeslots data::serializeelements	lib/arm64-v8a/libadblockplus-jni.so

Firebase配置检测

邮箱地址提取

EMAIL	源码文件
info@flixvision.tv	flix/com/vision/activities/MainActivity.java
info@flixvision.tv	v9/a0.java
info@flixvision.tv	y9/e.java
donation@flixvision.tv info@flixvision.tv	自研引擎-S

第三方追踪器

名称	类别	网址
Google CrashLytics	Crash reporting	https://reports.exodus-privacy.eu.org/trackers/27
Google Firebase Analytics	Analytics	https://reports.exodus-privacy.eu.org/trackers/49
Unity3d Ads	Advertisement	https://reports.exodus-privacy.eu.org/trackers/121

敏感凭证泄露

已显示 26 个secrets

1、 "library_MaterialDesignIcons_authorWebsite" : "https://materialdesignicons.com/"
2、 "api_path_tv" : "/api/v3/img/tv/"
3、 "netas_preference_file_key" : "netas"
4、 "netas_country_key" : "netas.countryid"
5、 "netas_extra_info_key" : "netas.extra"
6、 "netas_state_key" : "netas.stateid"
7、 "netas_asn_key" : "netas.asn"
8、 "netas_city_key" : "netas.cityid"
9、 "netas_publisher_key" : "netas.publisher"
10、 "netas_ver_key" : "netas.ver"
11、 "netas_uid_key" : "netas.uuid"
12、 "library_AndroidIconics_authorWebsite" : "http://mikepenz.com/"
13、 "api_path_movie" : "/api/v3/img/movie/"
14、 "com.google.firebase.crashlytics.mapping_file_id" : "6a40e354277a4c539b0faaeefae10e4d"
15、 "netas_interval_key" : "netas.interval"
16、 "google_api_key" : "AIzaSyDRx3OklvFInfJ2VYhOga0FV-Sbr_ZapnI"
17、 "google_crash_reporting_api_key" : "AIzaSyDRx3OklvFInfJ2VYhOga0FV-Sbr_ZapnI"
18、 aHR0cHM6Ly9hcGkucmVhbC1kZWJyaWQuY29tL29hdXRoL3YyL2RldmljZS9jcmVkZW50aWFscz9jbGllbnRfaWQ9WDI0NUE0WEFJQkdWTSZjb2RlPQ
19、 e31Vga4MXIYss1I0jhtdKlkxxwv5N0CYSnCpQcRijIdSJYg
20、 86227e303a08cf769cd77dc1691477f3e24a65f890431115c71369becdfe85b6
21、 aHR0cHM6Ly9hcGkucmVhbC1kZWJyaWQuY29tL29hdXRoL3YyL3Rva2Vu
22、 470fa2b4ae81cd56ecbcda9735803434cec591fa
23、 2f3cb5763db1117fcba3948632f8aad9
24、 aHR0cHM6Ly9hcGkucmVhbC1kZWJyaWQuY29tL29hdXRoL3YyL2RldmljZS9jb2RlP2NsaWVudF9pZD1YMjQ1QTRYQUlCR1ZNJm5ld19jcmVkZW50aWFscz15ZXM
25、 9a04f079-9840-4286-ab92-e65be0885f95
26、 39c944040d5f19862b77e7a66b6c419af653c1e3bf226cc691eb2abbb551730c

字符串信息

建议导出为TXT，方便查看。

活动列表

显示所有 62 个 activities

服务列表

显示 8 个 services

广播接收者列表

显示 7 个 receivers

内容提供者列表

显示 5 个 providers

第三方SDK

SDK名称	开发者	描述信息
android-gif-drawable	koral--	android-gif-drawable 是在 Android 上显示动画 GIF 的绘制库。
Google Play Service	Google	借助 Google Play 服务，您的应用可以利用由 Google 提供的最新功能，例如地图，Google+ 等，并通过 Google Play 商店以 APK 的形式分发自动平台更新。这样一来，您的用户可以更快地接收更新，并且可以更轻松地集成 Google 必须提供的最新信息。
Unity Ads	Unity Technologies	Unity Ads SDK 由领先的移动游戏引擎创建，无论您是在 Unity、xCode 还是 Android Studio 中进行开发，都能为您的游戏提供全面的变现服务框架。
File Provider	Android	FileProvider 是 ContentProvider 的特殊子类，它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
Jetpack App Startup	Google	App Startup 库提供了一种直接，高效的方法来在应用程序启动时初始化组件。库开发人员和应用程序开发人员都可以使用 App Startup 来简化启动顺序并显式设置初始化顺序。App Startup 允许您定义共享单个内容提供程序的组件初始化程序，而不必为需要初始化的每个组件定义单独的内容提供程序。这可以大大缩短应用启动时间。
Firebase	Google	Firebase 提供了分析、数据库、消息传递和崩溃报告等功能，可助您快速采取行动并专注于您的用户。
Picasso	Square	一个强大的 Android 图片下载缓存库。
Jetpack ProfileInstaller	Google	让库能够提前预填充要由 ART 读取的编译轨迹。
Google Cast	Google	使用 Google Cast SDK，您可以扩展 Android，iOS 或 Chrome 应用，以将其流式视频和音频定向到电视或声音系统。您的应用程序成为播放，暂停，搜索，倒带，停止和控制媒体的遥控器。
Firebase Analytics	Google	Google Analytics（分析）是一款免费的应用衡量解决方案，可提供关于应用使用情况和用户互动度的分析数据。

文件列表

污点分析

当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……

规则名称	描述信息	操作
病毒分析	使用安卓恶意软件常用的API进行污点分析	开始分析
漏洞挖掘	漏洞挖掘场景下的污点分析	开始分析
隐私合规	隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播	开始分析
密码分析	分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等	开始分析
Callback	因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员	开始分析