静态分析-Talking DenCat 5.0.7版本 _南明离火移动安全分析平台

温馨提示：本平台仅供研究软件风险、安全评估，禁止用于非法用途。由于展示的数据过于全面，请耐心等待加载完成。如有疑问或建议，可加入我们的微信群讨论

APP评分

文件信息

文件名称 918a375ebeb961ebd18e56793ab3c12592215dbe405551ea51718defbdb8d9ed.apk
文件大小 15.96MB
MD5 7cc3a8d56f05a871c48bf75f17b31c47
SHA1 284af84a089a36707241b059c0c13569ea6a8e84
SHA256 918a375ebeb961ebd18e56793ab3c12592215dbe405551ea51718defbdb8d9ed

应用信息

应用名称 Talking DenCat
包名 com.phoneliving.rtotle135.talkingtyler5
主活动 com.phoneliving.talkingdroidfree.MainActivity
目标SDK 15 最小SDK 7
版本号 5.0.7 子版本号 92
加固信息未加壳

组件导出信息

查看

扫描选项

重新扫描管理规则动态分析

反编译代码

Manifest文件查看

APK文件下载

Java源代码查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: False
v3 签名: False
v4 签名: False
主题: CN=editor
签名算法: rsassa_pkcs1v15
有效期自: 2016-01-10 08:03:09+00:00
有效期至: 2115-12-17 08:03:09+00:00
发行人: CN=editor
序列号: 0x231bc320
哈希算法: sha256
证书MD5: cb3363348414b0583c830294c272e10f
证书SHA1: 927ca44949d7788aa86f9d7f04d7fdacecd1dfb9
证书SHA256: 6215f00baa4bf18bab5792fc796bfc5555917240f14f7c7e672d956888d75c96
证书SHA512: c63cbae736201d74ed60e0ba1f252d598282fea1d64db0ee230a1e80fef2c0e25efa7fa6154e5dcfed4f5ec525e4b9591b47654078dbe67f3d1ebc6d283e7e9a
找到 1 个唯一证书

应用程序权限

权限名称	安全等级	权限内容	权限描述	关联代码
com.android.vending.BILLING	普通	应用程序具有应用内购买	允许应用程序从 Google Play 进行应用内购买。
android.permission.VIBRATE	普通	控制振动器	允许应用程序控制振动器，用于消息通知振动功能。
android.permission.SYSTEM_ALERT_WINDOW	危险	弹窗	允许应用程序弹窗。恶意程序可以接管手机的整个屏幕。	显示文件 cmn/h.java com/begal/appclong/classes/Utils.java com/chartboost/sdk/Libraries/d.java com/chartboost/sdk/impl/k.java com/google/tagmanager/ResolutionMacro.java com/heyzap/internal/ClickableToast.java com/heyzap/sdk/AchievementDialogFull.java com/heyzap/sdk/AchievementEarnedDialogTop.java com/heyzap/sdk/HeyzapDialog.java com/heyzap/sdk/LeaderboardDialog.java com/heyzap/sdk/LeaderboardLevelsDialog.java com/heyzap/sdk/LeaderboardScoreDialogFull.java com/heyzap/sdk/LeaderboardScoreDialogTop.java com/heyzap/sdk/SplashDialog.java com/heyzap/sdk/ads/BannerOverlay.java com/heyzap/sdk/ads/InterstitialOverlay.java com/widdit/lockScreen/terms/TermsAndConditionsLayout.java com/widdit/lockScreen/terms/TermsAnswerReporter.java
android.permission.RECEIVE_BOOT_COMPLETED	普通	开机自启	允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间，而且如果应用程序一直运行，会降低手机的整体速度。	显示文件 cmn/p.java com/appbrain/ReferrerReceiver.java com/begal/appclong/classes/BootReceiver.java com/begal/appclong/classes/ClearCacheReceiver.java com/begal/appclong/classes/DefaultProvider.java com/begal/appclong/classes/DisableCameras.java com/begal/appclong/classes/DisableClipboardAccess.java com/begal/appclong/classes/HostsBlocker.java com/begal/appclong/classes/LogcatViewer.java com/begal/appclong/classes/NotificationOptions.java com/begal/appclong/classes/SecretDialerCodeReceiver.java com/google/tagmanager/InstallReferrerReceiver.java com/google/tagmanager/NetworkReceiver.java com/heyzap/internal/ClickableToast.java com/heyzap/sdk/HeyzapDialog.java com/heyzap/sdk/HeyzapLib.java com/heyzap/sdk/PackageAddedReceiver.java com/heyzap/sdk/ads/PackageAddedReceiver.java com/widdit/shell/AlarmReceiver.java com/widdit/shell/WidditBroadcastReceiver.java com/widdit/thirdParty/android/gcm/GCMBroadcastReceiver.java
android.permission.DISABLE_KEYGUARD	危险	禁用键盘锁	允许应用程序停用键锁和任何关联的密码安全设置。例如，在手机上接听电话时停用键锁，在通话结束后重新启用键锁。
com.android.launcher.permission.UNINSTALL_SHORTCUT	签名	删除快捷方式	这个权限是允许应用程序删除桌面快捷方式。
com.android.launcher.permission.INSTALL_SHORTCUT	签名	创建快捷方式	这个权限是允许应用程序创建桌面快捷方式。
android.permission.READ_CONTACTS	危险	读取联系人信息	允允许应用程序读取您手机上存储的所有联系人（地址）数据。恶意应用程序可借此将您的数据发送给其他人。
android.permission.BLUETOOTH	危险	创建蓝牙连接	允许应用程序查看或创建蓝牙连接。	显示文件 com/appbrain/a/ax.java com/appbrain/a/s.java com/begal/appclong/classes/BluetoothControls.java com/google/tagmanager/ResourceLoader.java com/google/tagmanager/SimpleNetworkDispatcher.java com/heyzap/internal/Connectivity.java com/heyzap/internal/Utils.java com/revmob/android/RevMobContext.java com/widdit/lockScreenShell/c.java
android.permission.READ_LOGS	危险	读取系统日志文件	允许应用程序从系统的各日志文件中读取信息。这样应用程序可以发现您的手机使用情况，这些信息还可能包含用户个人信息或保密信息，造成隐私数据泄露。
android.permission.GET_ACCOUNTS	普通	探索已知账号	允许应用程序访问帐户服务中的帐户列表。
android.permission.RECEIVE_SMS	危险	接收短信	允许应用程序接收短信。恶意程序会在用户未知的情况下监视或删除。	显示文件 cmn/p.java com/appbrain/ReferrerReceiver.java com/begal/appclong/classes/BootReceiver.java com/begal/appclong/classes/ClearCacheReceiver.java com/begal/appclong/classes/DefaultProvider.java com/begal/appclong/classes/DisableCameras.java com/begal/appclong/classes/DisableClipboardAccess.java com/begal/appclong/classes/HostsBlocker.java com/begal/appclong/classes/LogcatViewer.java com/begal/appclong/classes/NotificationOptions.java com/begal/appclong/classes/SecretDialerCodeReceiver.java com/google/tagmanager/InstallReferrerReceiver.java com/google/tagmanager/NetworkReceiver.java com/heyzap/internal/ClickableToast.java com/heyzap/sdk/HeyzapDialog.java com/heyzap/sdk/HeyzapLib.java com/heyzap/sdk/PackageAddedReceiver.java com/heyzap/sdk/ads/PackageAddedReceiver.java com/widdit/shell/AlarmReceiver.java com/widdit/shell/WidditBroadcastReceiver.java com/widdit/thirdParty/android/gcm/GCMBroadcastReceiver.java
android.permission.READ_SMS	危险	读取短信	允许应用程序读取您的手机或 SIM 卡中存储的短信。恶意应用程序可借此读取您的机密信息。
com.android.browser.permission.READ_HISTORY_BOOKMARKS	危险	获取自带浏览器上网记录	恶意代码可有利用此权限窃取用户的上网记录和书签。
android.permission.READ_PHONE_STATE	危险	读取手机状态和标识	允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号，是否正在通话，以及对方的号码等。	显示文件 com/revmob/android/RevMobContext.java com/widdit/lockScreen/terms/TermsAnswerReporter.java com/widdit/shell/a/b.java
android.permission.WRITE_EXTERNAL_STORAGE	危险	读取/修改/删除外部存储内容	允许应用程序写入外部存储。	显示文件 com/begal/appclong/classes/BundleFilesDirectories.java com/begal/appclong/classes/BundleObb.java com/begal/appclong/classes/Utils.java com/chartboost/sdk/Libraries/e.java com/google/tagmanager/ResourceStorageImpl.java com/heyzap/http/HeyzapCookies.java com/heyzap/internal/Utils.java com/phoneliving/talkingdroidfree/MainActivity.java com/revmob/android/FileCache.java com/widdit/shell/JarLoader.java com/widdit/shell/VersionChecker.java
android.permission.RECORD_AUDIO	危险	获取录音权限	允许应用程序获取录音权限。	显示文件 com/phoneliving/talkingdroidfree/MainActivity.java
android.permission.WAKE_LOCK	危险	防止手机休眠	允许应用程序防止手机休眠，在手机屏幕关闭后后台进程仍然运行。	显示文件 com/phoneliving/talkingdroidfree/MainActivity.java com/phoneliving/talkingdroidfree/services/SoundPlayer.java com/revmob/android/RevMobContext.java com/widdit/lockScreen/terms/TermsAnswerReporter.java com/widdit/thirdParty/android/gcm/GCMBaseIntentService.java
android.permission.MODIFY_AUDIO_SETTINGS	危险	允许应用修改全局音频设置	允许应用程序修改全局音频设置，如音量。多用于消息语音功能。
android.permission.ACCESS_NETWORK_STATE	普通	获取网络状态	允许应用程序查看所有网络的状态。	显示文件 cmn/h.java com/appbrain/a/ax.java com/appbrain/a/s.java com/begal/appclong/classes/WifiControls.java com/chartboost/sdk/impl/l.java com/google/tagmanager/ResourceLoader.java com/google/tagmanager/SimpleNetworkDispatcher.java com/heyzap/internal/Connectivity.java com/heyzap/internal/Utils.java com/revmob/android/RevMobContext.java com/widdit/lockScreen/terms/TermsAnswerReporter.java com/widdit/lockScreenShell/c.java com/widdit/shell/a/b.java
android.permission.ACCESS_COARSE_LOCATION	危险	获取粗略位置	通过WiFi或移动基站的方式获取用户错略的经纬度信息，定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
android.permission.ACCESS_FINE_LOCATION	危险	获取精确位置	通过GPS芯片接收卫星的定位信息，定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
android.permission.INTERNET	危险	完全互联网访问	允许应用程序创建网络套接字。	显示文件 com/appbrain/a/al.java com/chartboost/sdk/impl/m.java com/google/tagmanager/HttpNetworkClient.java com/google/tagmanager/HttpUrlConnectionNetworkClient.java com/google/tagmanager/ResourceLoader.java com/google/tagmanager/SimpleNetworkDispatcher.java com/heyzap/http/AsyncHttpClient.java com/heyzap/http/SimpleMultipartEntity.java com/heyzap/internal/Utils.java com/heyzap/sdk/AchievementEarnedDialogTop.java com/heyzap/sdk/AchievementFeedlette.java com/heyzap/sdk/LeaderboardUserFeedlette.java com/widdit/lockScreen/terms/TermsAndConditionsConfiguration.java
android.permission.ACCESS_WIFI_STATE	普通	查看Wi-Fi状态	允许应用程序查看有关Wi-Fi状态的信息。	显示文件 com/begal/appclong/classes/WifiControls.java com/chartboost/sdk/Libraries/c.java com/revmob/android/RevMobContext.java com/widdit/lockScreen/terms/TermsAnswerReporter.java
net.dinglisch.android.tasker.PERMISSION_RUN_TASKS	未知	未知权限	来自 android 引用的未知权限。
android.permission.BLUETOOTH_ADMIN	危险	管理蓝牙	允许程序发现和配对新的蓝牙设备。	显示文件 com/begal/appclong/classes/BluetoothControls.java com/heyzap/internal/Utils.java
android.permission.CHANGE_WIFI_STATE	危险	改变Wi-Fi状态	允许应用程序改变Wi-Fi状态。	显示文件 com/begal/appclong/classes/WifiControls.java
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	普通	使用 Settings.ACTION_REQUEST_IGNORE_BATTERY_OPTIMIZATIONS 的权限	应用程序必须拥有权限才能使用 Settings.ACTION_REQUEST_IGNORE_BATTERY_OPTIMIZATIONS。
android.permission.USE_FINGERPRINT	普通	允许使用指纹	此常量在 API 级别 28 中已弃用。应用程序应改为请求USE_BIOMETRIC	显示文件 com/begal/appclong/classes/PasswordActivity.java
android.permission.WRITE_SETTINGS	危险	修改全局系统设置	允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。
android.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。

证书分析

高危

1

警告

0

信息

1

标题	严重程度	描述信息
已签名应用	信息	应用程序已使用代码签名证书进行签名
应用程序存在Janus漏洞	高危	应用程序使用了v1签名方案进行签名，如果只使用v1签名方案，那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序，以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。

MANIFEST分析

高危

3

警告

23

信息

0

屏蔽

0

序号	问题	严重程度	描述信息	操作
1	应用程序可以安装在有漏洞的已更新 Android 版本上 Android XX, [minSdk=7]	信息	该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 vulnerable_os_version 规则
2	应用程序数据存在被泄露的风险未设置[android:allowBackup]标志	警告	这个标志 [android:allowBackup]应该设置为false。默认情况下它被设置为true，允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 allowbackup_not_set 规则
3	Activity设置了TaskAffinity属性 (com.widdit.lockScreen.activities.MainActivity)	警告	如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 activity_task_affinity_set 规则
4	Activity (com.widdit.lockScreen.activities.MainActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 activity_non_standard_launchmode 规则
5	Activity （com.widdit.lockScreen.activities.MainActivity）容易受到 Android Task Hijacking/StrandHogg 的攻击。	高危	活动不应将启动模式属性设置为“singleTask”。然后，其他应用程序可以将恶意活动放置在活动栈顶部，从而导致任务劫持/StrandHogg 1.0 漏洞。这使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。您还可以将应用的目标 SDK 版本 (15) 更新到 28 或更高版本以在平台级别修复此问题。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 activity_task_hijacking 规则
6	Activity (com.widdit.lockScreen.activities.MainActivity) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 activity_exported_intent_filter_exists 规则
7	Activity设置了TaskAffinity属性 (com.widdit.lockScreen.activities.TermsAndConditionsActivity)	警告	如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 activity_task_affinity_set 规则
8	Activity设置了TaskAffinity属性 (com.widdit.lockScreen.activities.SettingsActivity)	警告	如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 activity_task_affinity_set 规则
9	Broadcast Receiver (com.widdit.lockScreen.service.receivers.ScreenStateAndBootCompletedReceiver) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 receiver_exported_intent_filter_exists 规则
10	Broadcast Receiver (com.widdit.lockScreen.receivers.SMSNotificationsReceiver) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 receiver_exported_intent_filter_exists 规则
11	Broadcast Receiver (com.widdit.lockScreen.receivers.PhoneCallReciever) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 receiver_exported_intent_filter_exists 规则
12	Broadcast Receiver (com.widdit.lockScreen.receivers.OutgoingPhoneCallReciever) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 receiver_exported_intent_filter_exists 规则
13	Broadcast Receiver (com.widdit.lockScreen.receivers.NetworkStateReceiver) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 receiver_exported_intent_filter_exists 规则
14	Broadcast Receiver (com.widdit.lockScreen.receivers.BreakingMessageReceiver) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 receiver_exported_intent_filter_exists 规则
15	Broadcast Receiver (com.widdit.lockScreen.receivers.PackageAddedReceiver) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 receiver_exported_intent_filter_exists 规则
16	Broadcast Receiver (com.widdit.lockScreen.receivers.PackageRemovedReceiver) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 receiver_exported_intent_filter_exists 规则
17	Broadcast Receiver (com.widdit.lockScreen.receivers.WidditGCMBroadcastReceiver) 受权限保护, 但是应该检查权限的保护级别。 Permission: com.google.android.c2dm.permission.SEND [android:exported=true]	警告	发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 receiver_exported_protected_permission_not_defined 规则
18	Broadcast Receiver (com.appbrain.ReferrerReceiver) 未被保护。 [android:exported=true]	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 receiver_explicitly_exported 规则
19	Content Provider (com.begal.appclong.classes.DefaultProvider) 未被保护。 [android:exported=true]	警告	发现 Content Provider与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 provider_explicitly_exported 规则
20	Service (com.begal.appclong.service.RemoteService) 未被保护。 [android:exported=true]	警告	发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 service_explicitly_exported 规则
21	Broadcast Receiver (com.begal.appclong.classes.DefaultProvider$DefaultReceiver) 未被保护。 [android:exported=true]	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 receiver_explicitly_exported 规则
22	Activity (com.begal.appclong.classes.DefaultProvider$MyActivity) is vulnerable to StrandHogg 2.0	高危	已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时，其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部，从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (15) 更新到 29 或更高版本以在平台级别修复此问题。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 activity_task_hijacking2 规则
23	Activity (com.begal.appclong.classes.DefaultProvider$MyActivity) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 activity_explicitly_exported 规则
24	高优先级的Intent (999) [android:priority]	警告	通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 high_intent_priority_found 规则
25	高优先级的Intent (999) [android:priority]	警告	通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 high_intent_priority_found 规则
26	高优先级的Intent (999) [android:priority]	警告	通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 high_intent_priority_found 规则
27	高优先级的Intent (999) [android:priority]	警告	通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。	对应用 com.phoneliving.rtotle135.talkingtyler5 禁止使用 high_intent_priority_found 规则

可浏览的ACTIVITIES

ACTIVITY	INTENT

网络安全配置

序号	范围	严重级别	描述

API调用分析

API功能	源码文件
一般功能-> 文件操作	显示文件 andhook/lib/AndHook.java andhook/lib/xposed/XposedHelpers.java andhook/lib/xposed/callbacks/XCallback.java cmn/a.java cmn/b.java cmn/e.java cmn/h.java cmn/m.java cmn/p.java com/appbrain/a/ah.java com/appbrain/a/ak.java com/appbrain/a/am.java com/appbrain/a/ao.java com/appbrain/a/au.java com/appbrain/a/aw.java com/appbrain/a/ax.java com/appbrain/a/bb.java com/appbrain/a/be.java com/appbrain/b/a.java com/appbrain/b/c.java com/appbrain/b/d.java com/appbrain/b/f.java com/appbrain/b/g.java com/appbrain/b/h.java com/appbrain/b/j.java com/appbrain/b/n.java com/appbrain/b/q.java com/appbrain/b/w.java com/appbrain/b/z.java com/appbrain/e/aa.java com/appbrain/e/ae.java com/appbrain/e/ai.java com/appbrain/e/am.java com/appbrain/e/aq.java com/appbrain/e/b.java com/appbrain/e/i.java com/appbrain/e/m.java com/appbrain/e/s.java com/appbrain/e/w.java com/appbrain/g/b.java com/begal/appclong/classes/BundleFilesDirectories.java com/begal/appclong/classes/BundleObb.java com/begal/appclong/classes/ClearCacheOnExitProvider.java com/begal/appclong/classes/CloneSettings.java com/begal/appclong/classes/DefaultProvider.java com/begal/appclong/classes/HostsBlocker.java com/begal/appclong/classes/LogcatViewer.java com/begal/appclong/classes/PreferenceEditor.java com/begal/appclong/classes/Utils.java com/begal/appclong/classes/util/SimpleCrypt.java com/chartboost/sdk/Chartboost.java com/chartboost/sdk/Libraries/d.java com/chartboost/sdk/Libraries/e.java com/chartboost/sdk/impl/ao.java com/chartboost/sdk/impl/ap.java com/chartboost/sdk/impl/aq.java com/chartboost/sdk/impl/as.java com/chartboost/sdk/impl/at.java com/chartboost/sdk/impl/au.java com/chartboost/sdk/impl/aw.java com/chartboost/sdk/impl/ax.java com/chartboost/sdk/impl/ay.java com/chartboost/sdk/impl/az.java com/chartboost/sdk/impl/ba.java com/chartboost/sdk/impl/j.java com/heyzap/http/AsyncHttpClient.java com/heyzap/http/AsyncHttpRequest.java com/heyzap/http/AsyncHttpResponseHandler.java com/heyzap/http/HeyzapCookies.java com/heyzap/http/PersistentCookieStore.java com/heyzap/http/RequestParams.java com/heyzap/http/RetryHandler.java com/heyzap/http/SDKCookieStore.java com/heyzap/http/SerializableCookie.java com/heyzap/http/SimpleMultipartEntity.java com/heyzap/internal/Analytics.java com/heyzap/internal/Base64.java com/heyzap/internal/Drawables.java com/heyzap/internal/Utils.java com/heyzap/sdk/AchievementEarnedDialogTop.java com/heyzap/sdk/AchievementFeedlette.java com/heyzap/sdk/HeyzapLib.java com/heyzap/sdk/LeaderboardScoreLauncher.java com/heyzap/sdk/LeaderboardUserFeedlette.java com/heyzap/sdk/PreMarketDialog.java com/heyzap/sdk/ads/Manager.java com/phoneliving/talkingdroidfree/MainActivity.java com/phoneliving/talkingdroidfree/services/DatabaseManager.java com/phoneliving/talkingdroidfree/services/SoundPlayer.java com/revmob/ads/internal/StaticAssets.java com/revmob/android/FileCache.java com/revmob/android/StoredData.java com/revmob/internal/HTTPHelper.java com/widdit/lockScreen/receivers/ReferralReciever.java com/widdit/lockScreen/service/receivers/ScreenStateAndBootCompletedReceiver.java com/widdit/lockScreen/terms/TermsAndConditionsActivityController.java com/widdit/lockScreen/terms/TermsAndConditionsConfigurationLoader.java com/widdit/lockScreenShell/HomeBaseBootstrap.java com/widdit/lockScreenShell/c.java com/widdit/shell/JarLoader.java com/widdit/shell/VersionChecker.java com/widdit/shell/a/a.java com/widdit/shell/a/b.java com/widdit/shell/a/d.java com/widdit/thirdParty/android/gcm/GCMRegistrar.java
网络通信-> WebView JavaScript接口	显示文件 com/appbrain/a/ah.java com/appbrain/a/ak.java com/chartboost/sdk/impl/v.java com/heyzap/sdk/ads/AdUnit.java com/heyzap/sdk/ads/BannerOverlay.java com/heyzap/sdk/ads/InterstitialOverlay.java com/revmob/internal/RevMobWebView.java
网络通信-> WebView GET请求	显示文件 com/appbrain/a/ai.java com/chartboost/sdk/impl/i.java com/chartboost/sdk/impl/v.java com/heyzap/sdk/ads/BannerOverlay.java com/heyzap/sdk/ads/InterstitialOverlay.java com/revmob/internal/RevMobWebView.java
网络通信-> WebView 相关	显示文件 com/appbrain/a/ah.java com/appbrain/a/ak.java com/chartboost/sdk/impl/i.java com/chartboost/sdk/impl/v.java com/heyzap/sdk/ads/AdUnit.java com/heyzap/sdk/ads/BannerOverlay.java com/heyzap/sdk/ads/InterstitialOverlay.java com/revmob/internal/RevMobWebView.java
一般功能-> IPC通信	显示文件 cmn/p.java com/appbrain/AppBrainService.java com/appbrain/ReferrerReceiver.java com/appbrain/a/a.java com/appbrain/a/ah.java com/appbrain/a/ai.java com/appbrain/a/ak.java com/appbrain/a/aw.java com/appbrain/a/b.java com/appbrain/a/q.java com/appbrain/a/u.java com/begal/appclong/classes/BackKeyHandler.java com/begal/appclong/classes/BootReceiver.java com/begal/appclong/classes/CalculatorActivity.java com/begal/appclong/classes/ClearCacheOnExitProvider.java com/begal/appclong/classes/ClearCacheOnExitService.java com/begal/appclong/classes/ClearCacheReceiver.java com/begal/appclong/classes/DefaultProvider.java com/begal/appclong/classes/DisableCameras.java com/begal/appclong/classes/DisableClipboardAccess.java com/begal/appclong/classes/FakeCalculator.java com/begal/appclong/classes/GmailSupport.java com/begal/appclong/classes/HeadphonesEventReceiver.java com/begal/appclong/classes/HostsBlocker.java com/begal/appclong/classes/InterruptionFilterControls.java com/begal/appclong/classes/LaunchTileService.java com/begal/appclong/classes/LogcatViewer.java com/begal/appclong/classes/NotificationOptions.java com/begal/appclong/classes/OpenLinksWith.java com/begal/appclong/classes/PasswordActivity.java com/begal/appclong/classes/PasswordProvider.java com/begal/appclong/classes/PenEventReceiver.java com/begal/appclong/classes/PersistentApp.java com/begal/appclong/classes/PersistentAppService.java com/begal/appclong/classes/PowerEventReceiver.java com/begal/appclong/classes/SecretDialerCodeReceiver.java com/begal/appclong/classes/Signatures.java com/begal/appclong/classes/StartExitAppEventReceiver.java com/begal/appclong/classes/Utils.java com/begal/appclong/classes/freeform/FreeFormWindowActivity.java com/begal/appclong/classes/service/IRemoteService.java com/begal/appclong/classes/service/RemoteService.java com/begal/appclong/service/IRemoteService.java com/begal/appclong/service/RemoteService.java com/chartboost/sdk/CBImpressionActivity.java com/chartboost/sdk/Chartboost.java com/chartboost/sdk/impl/a.java com/chartboost/sdk/impl/m.java com/heyzap/internal/ClickableToast.java com/heyzap/internal/FeedView.java com/heyzap/internal/Feedlette.java com/heyzap/internal/Utils.java com/heyzap/sdk/AchievementsFullOverlay.java com/heyzap/sdk/HeyzapDialog.java com/heyzap/sdk/HeyzapLib.java com/heyzap/sdk/HeyzapNotification.java com/heyzap/sdk/LeaderboardFullOverlay.java com/heyzap/sdk/LeaderboardInGameOverlay.java com/heyzap/sdk/PackageAddedReceiver.java com/heyzap/sdk/ads/AdUnit.java com/heyzap/sdk/ads/Manager.java com/heyzap/sdk/ads/PackageAddedReceiver.java com/phoneliving/iaputils/IabHelper.java com/phoneliving/talkingdroidfree/MainActivity.java com/revmob/ads/fullscreen/FullscreenActivity.java com/revmob/ads/fullscreen/RevMobFullscreen.java com/revmob/internal/MarketAsyncManager.java com/widdit/lockScreen/receivers/ReferralReciever.java com/widdit/lockScreen/receivers/WidditGCMBroadcastReceiver.java com/widdit/lockScreen/service/GCMIntentService.java com/widdit/lockScreen/service/receivers/ScreenStateAndBootCompletedReceiver.java com/widdit/lockScreen/terms/TermsAndConditionsActivityController.java com/widdit/lockScreen/terms/TermsAndConditionsActivityLauncher.java com/widdit/lockScreenShell/b.java com/widdit/shell/AlarmReceiver.java com/widdit/shell/BaseApp.java com/widdit/shell/IActivityController.java com/widdit/shell/IReceiverController.java com/widdit/shell/IServiceController.java com/widdit/shell/WidditActivity.java com/widdit/shell/WidditBroadcastReceiver.java com/widdit/shell/WidditService.java com/widdit/thirdParty/android/gcm/GCMBaseIntentService.java com/widdit/thirdParty/android/gcm/GCMBroadcastReceiver.java com/widdit/thirdParty/android/gcm/GCMConstants.java com/widdit/thirdParty/android/gcm/GCMRegistrar.java
一般功能-> 获取系统服务(getSystemService)	显示文件 cmn/h.java com/appbrain/AppBrainService.java com/appbrain/a/ak.java com/appbrain/a/ax.java com/appbrain/a/bc.java com/appbrain/a/s.java com/begal/appclong/classes/ClearCacheReceiver.java com/begal/appclong/classes/CrashHandler.java com/begal/appclong/classes/DisableCameras.java com/begal/appclong/classes/DisableClipboardAccess.java com/begal/appclong/classes/HostsBlocker.java com/begal/appclong/classes/InterruptionFilterControls.java com/begal/appclong/classes/LogcatViewer.java com/begal/appclong/classes/NotificationOptions.java com/begal/appclong/classes/PasswordActivity.java com/begal/appclong/classes/Utils.java com/begal/appclong/classes/WifiControls.java com/chartboost/sdk/Libraries/c.java com/chartboost/sdk/Libraries/d.java com/chartboost/sdk/impl/k.java com/chartboost/sdk/impl/l.java com/chartboost/sdk/impl/q.java com/heyzap/internal/ClickableToast.java com/heyzap/internal/Connectivity.java com/heyzap/internal/Feedlette.java com/heyzap/internal/Utils.java com/heyzap/sdk/AchievementDialogFull.java com/heyzap/sdk/AchievementEarnedDialogTop.java com/heyzap/sdk/HeyzapNotification.java com/heyzap/sdk/LeaderboardDialog.java com/heyzap/sdk/LeaderboardScoreDialogFull.java com/heyzap/sdk/LeaderboardScoreDialogTop.java com/heyzap/sdk/ads/AdUnit.java com/revmob/android/RevMobContext.java com/widdit/lockScreen/terms/TermsAndConditionsLayout.java com/widdit/lockScreen/terms/TermsAnswerReporter.java com/widdit/lockScreenShell/c.java com/widdit/shell/BaseApp.java com/widdit/shell/a/b.java com/widdit/thirdParty/android/gcm/GCMBaseIntentService.java
组件-> 启动 Activity	显示文件 com/appbrain/a/a.java com/appbrain/a/ai.java com/appbrain/a/ak.java com/begal/appclong/classes/BootReceiver.java com/begal/appclong/classes/CalculatorActivity.java com/begal/appclong/classes/DisableCameras.java com/begal/appclong/classes/FakeCalculator.java com/begal/appclong/classes/HostsBlocker.java com/begal/appclong/classes/InterruptionFilterControls.java com/begal/appclong/classes/LaunchTileService.java com/begal/appclong/classes/PasswordActivity.java com/begal/appclong/classes/PasswordProvider.java com/begal/appclong/classes/SecretDialerCodeReceiver.java com/begal/appclong/classes/StartExitAppEventReceiver.java com/begal/appclong/classes/freeform/FreeFormWindowActivity.java com/chartboost/sdk/Chartboost.java com/chartboost/sdk/impl/m.java com/heyzap/internal/Utils.java com/heyzap/sdk/AchievementsFullOverlay.java com/heyzap/sdk/HeyzapDialog.java com/heyzap/sdk/HeyzapLib.java com/heyzap/sdk/LeaderboardFullOverlay.java com/heyzap/sdk/LeaderboardInGameOverlay.java com/heyzap/sdk/ads/AdUnit.java com/heyzap/sdk/ads/Manager.java com/phoneliving/talkingdroidfree/MainActivity.java com/revmob/ads/fullscreen/RevMobFullscreen.java com/revmob/internal/MarketAsyncManager.java com/widdit/lockScreen/terms/TermsAndConditionsActivityController.java com/widdit/lockScreen/terms/TermsAndConditionsActivityLauncher.java com/widdit/shell/IActivityController.java
DEX-> 动态加载	显示文件 andhook/lib/HookHelper.java andhook/lib/xposed/XposedHelpers.java com/begal/appclong/classes/DefaultProvider.java com/begal/appclong/classes/GmailSupport.java com/begal/appclong/classes/PasswordActivity.java com/begal/appclong/classes/Utils.java com/widdit/lockScreenShell/a.java com/widdit/shell/JarLoader.java
调用java反射机制	显示文件 andhook/lib/HookHelper.java andhook/lib/YunOSHelper.java andhook/lib/xposed/ClassUtils.java andhook/lib/xposed/XposedBridge.java andhook/lib/xposed/XposedHelpers.java cmn/h.java com/appbrain/ReferrerReceiver.java com/appbrain/a/ax.java com/begal/appclong/classes/ApplicationWrapper.java com/begal/appclong/classes/AutoPressButtons.java com/begal/appclong/classes/BackKeyHandler.java com/begal/appclong/classes/CalculatorActivity.java com/begal/appclong/classes/CloneSettings.java com/begal/appclong/classes/DefaultFontProvider.java com/begal/appclong/classes/DefaultProvider.java com/begal/appclong/classes/DisableClipboardAccess.java com/begal/appclong/classes/FacebookLoginBehavior.java com/begal/appclong/classes/FacebookMessengerProvider.java com/begal/appclong/classes/GmailSupport.java com/begal/appclong/classes/HostsBlocker.java com/begal/appclong/classes/NotificationOptions.java com/begal/appclong/classes/OpenLinksWith.java com/begal/appclong/classes/PasswordActivity.java com/begal/appclong/classes/PictureInPicture.java com/begal/appclong/classes/Signatures.java com/begal/appclong/classes/ToastFilter.java com/begal/appclong/classes/Utils.java com/begal/appclong/classes/WhatsAppSupport.java com/begal/appclong/classes/freeform/FreeFormWindowActivity.java com/begal/appclong/classes/util/IActivityManagerHook.java com/begal/appclong/classes/util/IPackageManagerHook.java com/chartboost/sdk/impl/j.java com/chartboost/sdk/impl/u.java com/heyzap/internal/ClickableToast.java com/widdit/lockScreenShell/a.java com/widdit/thirdParty/android/gcm/GCMRegistrar.java
网络通信-> DefaultHttpClient Connection	显示文件 cmn/m.java com/chartboost/sdk/impl/j.java com/heyzap/http/AsyncHttpClient.java com/heyzap/sdk/PreMarketDialog.java com/revmob/internal/HTTPHelper.java com/revmob/internal/MarketRedirector.java com/widdit/lockScreen/terms/TermsAndConditionsConfigurationLoader.java com/widdit/lockScreen/terms/TermsAnswerReporter.java com/widdit/shell/JarLoader.java com/widdit/shell/VersionChecker.java com/widdit/shell/a/b.java
加密解密-> Crypto加解密组件	com/begal/appclong/classes/util/SimpleCrypt.java com/phoneliving/iaputils/Security.java
加密解密-> Base64 加密	com/begal/appclong/classes/DisableClipboardAccess.java com/begal/appclong/classes/Signatures.java com/begal/appclong/classes/util/SimpleCrypt.java
加密解密-> Base64 解密	显示文件 com/begal/appclong/classes/DefaultProvider.java com/begal/appclong/classes/DisableClipboardAccess.java com/begal/appclong/classes/Signatures.java com/begal/appclong/classes/Utils.java com/begal/appclong/classes/util/SimpleCrypt.java com/widdit/lockScreen/terms/TermsAndConditionsActivityLauncher.java
一般功能-> 获取WiFi相关信息	com/chartboost/sdk/Libraries/c.java com/revmob/android/RevMobContext.java com/widdit/lockScreen/terms/TermsAnswerReporter.java
一般功能-> 获取活动网路信息	显示文件 com/appbrain/a/ax.java com/appbrain/a/s.java com/chartboost/sdk/impl/l.java com/heyzap/internal/Connectivity.java com/heyzap/internal/Utils.java com/widdit/lockScreenShell/c.java
组件-> 启动 Service	显示文件 com/appbrain/a/aw.java com/appbrain/a/q.java com/begal/appclong/classes/ClearCacheOnExitProvider.java com/begal/appclong/classes/HeadphonesEventReceiver.java com/begal/appclong/classes/PersistentApp.java com/phoneliving/iaputils/IabHelper.java com/widdit/thirdParty/android/gcm/GCMBaseIntentService.java com/widdit/thirdParty/android/gcm/GCMRegistrar.java
网络通信-> HTTP建立连接	显示文件 cmn/m.java com/appbrain/a/al.java com/chartboost/sdk/impl/j.java com/chartboost/sdk/impl/m.java com/heyzap/http/AsyncHttpClient.java com/heyzap/http/AsyncHttpRequest.java com/heyzap/http/RetryHandler.java com/heyzap/internal/APIResponseHandler.java com/heyzap/internal/Utils.java com/revmob/internal/HTTPHelper.java com/widdit/lockScreen/terms/TermsAndConditionsConfiguration.java
进程操作-> 杀死进程	显示文件 com/begal/appclong/classes/CalculatorActivity.java com/begal/appclong/classes/CrashHandler.java com/begal/appclong/classes/DefaultProvider.java com/begal/appclong/classes/PasswordActivity.java
一般功能-> Android通知	显示文件 com/begal/appclong/classes/ClearCacheReceiver.java com/begal/appclong/classes/CrashHandler.java com/begal/appclong/classes/DisableCameras.java com/begal/appclong/classes/HostsBlocker.java com/begal/appclong/classes/LogcatViewer.java com/begal/appclong/classes/NotificationOptions.java com/heyzap/sdk/HeyzapNotification.java
网络通信-> HTTP请求、连接和会话	显示文件 com/chartboost/sdk/Libraries/e.java com/chartboost/sdk/impl/j.java com/heyzap/http/AsyncHttpClient.java com/heyzap/http/AsyncHttpRequest.java com/revmob/internal/HTTPHelper.java com/revmob/internal/MarketRedirector.java
网络通信-> TCP套接字	com/heyzap/http/RetryHandler.java com/revmob/internal/HTTPHelper.java
网络通信-> SSL证书处理	显示文件 cmn/m.java com/chartboost/sdk/impl/j.java com/heyzap/http/AsyncHttpClient.java com/revmob/internal/HTTPHelper.java
隐私数据-> 获取已安装的应用程序	显示文件 cmn/g.java cmn/h.java com/appbrain/a/ak.java com/appbrain/a/bc.java com/chartboost/sdk/impl/a.java com/heyzap/http/HeyzapCookies.java com/heyzap/internal/Utils.java com/heyzap/sdk/ads/Manager.java
加密解密-> 信息摘要算法	显示文件 andhook/lib/xposed/XposedHelpers.java cmn/h.java com/appbrain/f/a.java com/chartboost/sdk/Libraries/b.java com/heyzap/internal/Utils.java com/heyzap/sdk/LeaderboardScoreLauncher.java
隐私数据-> 剪贴板数据读写操作	com/begal/appclong/classes/DisableClipboardAccess.java
隐私数据-> 用户账户管理	com/begal/appclong/classes/FacebookMessengerProvider.java
网络通信-> HTTPS建立连接	com/begal/appclong/classes/TrustAllCertificatesProvider.java
进程操作-> 获取运行的进程\服务	com/appbrain/a/ak.java com/appbrain/a/bc.java com/heyzap/internal/Utils.java
一般功能-> 获取网络接口信息	com/chartboost/sdk/impl/ay.java
隐私数据-> 录制音频行为	com/phoneliving/talkingdroidfree/MainActivity.java
DEX-> 加载和操作Dex文件	andhook/lib/xposed/XposedHelpers.java
网络通信-> 蓝牙连接	com/begal/appclong/classes/BluetoothControls.java
组件-> 发送广播	com/heyzap/sdk/HeyzapLib.java
组件-> ContentProvider	com/begal/appclong/classes/AbstractContentProvider.java
设备指纹-> getSimOperator	cmn/h.java
JavaScript 接口方法	com/appbrain/a/am.java
命令执行-> getRuntime.exec()	com/begal/appclong/classes/LogcatViewer.java
一般功能-> 加载so文件	andhook/lib/AndHook.java com/begal/appclong/classes/AppClonerNative.java

源代码分析

高危

3

警告

8

信息

3

安全

0

屏蔽

0

序号	问题	等级	参考标准	文件位置	操作
1	应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	显示文件 com/begal/appclong/classes/BundleObb.java com/chartboost/sdk/Libraries/e.java com/heyzap/sdk/ads/AdUnit.java com/revmob/android/FileCache.java	Suppress the rule android_read_write_external in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_read_write_external in com.phoneliving.rtotle135.talkingtyler5 only from these files
2	如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击	高危	CWE: CWE-79: 在Web页面生成时对输入的转义处理不恰当（'跨站脚本'） OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-6	显示文件 com/chartboost/sdk/impl/i.java com/chartboost/sdk/impl/v.java com/heyzap/sdk/ads/BannerOverlay.java com/heyzap/sdk/ads/InterstitialOverlay.java	Suppress the rule android_webview_xss in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_webview_xss in com.phoneliving.rtotle135.talkingtyler5 only from these files
3	应用程序记录日志信息,不得记录敏感信息	信息	CWE: CWE-532: 通过日志文件的信息暴露 OWASP MASVS: MSTG-STORAGE-3	显示文件 andhook/lib/AndHook.java andhook/lib/HookHelper.java andhook/lib/xposed/XposedBridge.java andhook/lib/xposed/XposedHelpers.java cmn/h.java com/appbrain/a/ax.java com/begal/appclong/classes/AbstractActivityContentProvider.java com/begal/appclong/classes/AppClonerNative.java com/begal/appclong/classes/ApplicationWrapper.java com/begal/appclong/classes/AutoPressButtons.java com/begal/appclong/classes/AutoRotateControls.java com/begal/appclong/classes/BackKeyHandler.java com/begal/appclong/classes/BluetoothControls.java com/begal/appclong/classes/BootReceiver.java com/begal/appclong/classes/BundleFilesDirectories.java com/begal/appclong/classes/BundleObb.java com/begal/appclong/classes/CalculatorActivity.java com/begal/appclong/classes/ClearCacheOnExitProvider.java com/begal/appclong/classes/ClearCacheOnExitService.java com/begal/appclong/classes/ClearCacheReceiver.java com/begal/appclong/classes/CloneSettings.java com/begal/appclong/classes/Configuration.java com/begal/appclong/classes/ConfirmExit.java com/begal/appclong/classes/CrashHandler.java com/begal/appclong/classes/DefaultFontProvider.java com/begal/appclong/classes/DefaultProvider.java com/begal/appclong/classes/DisableCameras.java com/begal/appclong/classes/DisableClipboardAccess.java com/begal/appclong/classes/FacebookLoginBehavior.java com/begal/appclong/classes/FacebookMessengerProvider.java com/begal/appclong/classes/FakeCalculator.java com/begal/appclong/classes/GmailSupport.java com/begal/appclong/classes/HeadphonesEventReceiver.java com/begal/appclong/classes/HostsBlocker.java com/begal/appclong/classes/InterruptionFilterControls.java com/begal/appclong/classes/LaunchTileService.java com/begal/appclong/classes/LogcatViewer.java com/begal/appclong/classes/NotificationOptions.java com/begal/appclong/classes/OnAppExitListener.java com/begal/appclong/classes/OpenLinksWith.java com/begal/appclong/classes/PasswordActivity.java com/begal/appclong/classes/PasswordProvider.java com/begal/appclong/classes/PenEventReceiver.java com/begal/appclong/classes/PersistentApp.java com/begal/appclong/classes/PersistentAppService.java com/begal/appclong/classes/PictureInPicture.java com/begal/appclong/classes/PowerEventReceiver.java com/begal/appclong/classes/PreferenceEditor.java com/begal/appclong/classes/PressBackAgainToExit.java com/begal/appclong/classes/SecretDialerCodeReceiver.java com/begal/appclong/classes/SetBrightnessOnStart.java com/begal/appclong/classes/ShowOnLockScreen.java com/begal/appclong/classes/Signatures.java com/begal/appclong/classes/StartExitAppEventReceiver.java com/begal/appclong/classes/ToastFilter.java com/begal/appclong/classes/TrustAllCertificatesProvider.java com/begal/appclong/classes/Utils.java com/begal/appclong/classes/WhatsAppSupport.java com/begal/appclong/classes/WifiControls.java com/begal/appclong/classes/freeform/FreeFormWindow.java com/begal/appclong/classes/freeform/FreeFormWindowActivity.java com/begal/appclong/classes/service/RemoteService.java com/begal/appclong/classes/util/IActivityManagerHook.java com/begal/appclong/classes/util/IPackageManagerHook.java com/chartboost/sdk/Chartboost.java com/chartboost/sdk/Libraries/e.java com/chartboost/sdk/impl/j.java com/chartboost/sdk/impl/k.java com/heyzap/internal/Analytics.java com/heyzap/internal/Connectivity.java com/heyzap/internal/Logger.java com/heyzap/internal/Utils.java com/heyzap/sdk/HeyzapLib.java com/heyzap/sdk/PreMarketDialog.java com/heyzap/sdk/ads/AdUnit.java com/phoneliving/iaputils/IabHelper.java com/phoneliving/iaputils/Security.java com/phoneliving/talkingdroidfree/MainActivity.java com/revmob/RevMob.java com/revmob/ads/banner/RevMobBanner.java com/revmob/ads/banner/client/BannerClientListener.java com/revmob/ads/fullscreen/FullscreenActivity.java com/revmob/ads/fullscreen/RevMobFullscreen.java com/revmob/ads/fullscreen/client/FullscreenClientListener.java com/revmob/ads/fullscreen/internal/FullscreenClickListener.java com/revmob/ads/link/RevMobLink.java com/revmob/ads/link/client/LinkClientListener.java com/revmob/ads/popup/RevMobPopup.java com/revmob/ads/popup/client/PopupClientListener.java com/revmob/android/RevMobContext.java com/revmob/client/InstallClientListener.java com/revmob/client/RevMobClient.java com/revmob/client/SessionClientListener.java com/revmob/internal/HTTPHelper.java com/revmob/internal/MarketAsyncManager.java com/revmob/internal/RMLog.java com/widdit/lockScreen/receivers/ReferralReciever.java com/widdit/lockScreen/service/GCMIntentService.java com/widdit/lockScreen/service/receivers/ScreenStateAndBootCompletedReceiver.java com/widdit/lockScreenShell/a.java com/widdit/lockScreenShell/b.java com/widdit/lockScreenShell/c.java com/widdit/shell/JarLoader.java com/widdit/shell/VersionChecker.java com/widdit/shell/a/a.java com/widdit/shell/a/b.java com/widdit/thirdParty/android/gcm/GCMBaseIntentService.java com/widdit/thirdParty/android/gcm/GCMBroadcastReceiver.java com/widdit/thirdParty/android/gcm/GCMRegistrar.java java/io/ByteArrayOutputStrean.java	Suppress the rule android_logging in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_logging in com.phoneliving.rtotle135.talkingtyler5 only from these files
4	文件可能包含硬编码的敏感信息，如用户名、密码、密钥等	警告	CWE: CWE-312: 明文存储敏感信息 OWASP Top 10: M9: Reverse Engineering OWASP MASVS: MSTG-STORAGE-14	显示文件 com/heyzap/sdk/HeyzapLib.java com/heyzap/sdk/ads/Manager.java com/revmob/ads/fullscreen/client/FullscreenData.java com/revmob/android/StoredData.java com/revmob/client/RevMobClient.java com/widdit/thirdParty/android/gcm/GCMBaseIntentService.java	Suppress the rule android_hardcoded in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_hardcoded in com.phoneliving.rtotle135.talkingtyler5 only from these files
5	默认情况下，调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知，ECB模式很弱，因为它导致相同明文块的密文相同	高危	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-2	com/begal/appclong/classes/util/SimpleCrypt.java	Suppress the rule android_aws_ecb_default in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_aws_ecb_default in com.phoneliving.rtotle135.talkingtyler5 only from these files
6	应用程序使用不安全的随机数生成器	警告	CWE: CWE-330: 使用不充分的随机数 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-6	显示文件 cmn/h.java com/appbrain/AppBrainBanner.java com/chartboost/sdk/impl/ay.java com/heyzap/http/SimpleMultipartEntity.java com/phoneliving/talkingdroidfree/MainActivity.java com/widdit/shell/a/a.java com/widdit/thirdParty/android/gcm/GCMBaseIntentService.java	Suppress the rule android_insecure_random in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_insecure_random in com.phoneliving.rtotle135.talkingtyler5 only from these files
7	SHA-1是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	com/appbrain/f/a.java com/chartboost/sdk/Libraries/b.java com/heyzap/internal/Utils.java	Suppress the rule android_sha1 in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_sha1 in com.phoneliving.rtotle135.talkingtyler5 only from these files
8	MD5是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	显示文件 andhook/lib/xposed/XposedHelpers.java cmn/h.java com/heyzap/internal/Utils.java com/heyzap/sdk/LeaderboardScoreLauncher.java	Suppress the rule android_md5 in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_md5 in com.phoneliving.rtotle135.talkingtyler5 only from these files
9	启用了调试配置。生产版本不能是可调试的	高危	CWE: CWE-919: 移动应用程序中的弱点 OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-RESILIENCE-2	andhook/lib/BuildConfig.java com/begal/appclong/classes/BuildConfig.java com/widdit/shell/BuildConfig.java	Suppress the rule android_aar_jar_debug_enabled in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_aar_jar_debug_enabled in com.phoneliving.rtotle135.talkingtyler5 only from these files
10	此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改	信息	OWASP MASVS: MSTG-PLATFORM-4	com/begal/appclong/classes/DisableClipboardAccess.java	Suppress the rule android_clipboard_listen in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_clipboard_listen in com.phoneliving.rtotle135.talkingtyler5 only from these files
11	此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它	信息	OWASP MASVS: MSTG-STORAGE-10	com/begal/appclong/classes/DisableClipboardAccess.java	Suppress the rule android_clipboard_copy in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_clipboard_copy in com.phoneliving.rtotle135.talkingtyler5 only from these files
12	不安全的Web视图实现。可能存在WebView任意代码执行漏洞	警告	CWE: CWE-749: 暴露危险方法或函数 OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-7	com/appbrain/a/ak.java	Suppress the rule android_webview in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_webview in com.phoneliving.rtotle135.talkingtyler5 only from these files
13	应用程序创建临时文件。敏感信息永远不应该被写进临时文件	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	com/begal/appclong/classes/Utils.java com/phoneliving/talkingdroidfree/MainActivity.java	Suppress the rule android_temp_file in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_temp_file in com.phoneliving.rtotle135.talkingtyler5 only from these files
14	IP地址泄露	警告	CWE: CWE-200: 信息泄露 OWASP MASVS: MSTG-CODE-2	com/begal/appclong/classes/HostsBlocker.java	Suppress the rule android_ip_disclosure in com.phoneliving.rtotle135.talkingtyler5 Suppress the rule android_ip_disclosure in com.phoneliving.rtotle135.talkingtyler5 only from these files

动态库分析

No Shared Objects found.

序号	动态库	NX(堆栈禁止执行)	STACK CANARY(栈保护)	RELRO	RPATH（指定SO搜索路径）	RUNPATH（指定SO搜索路径）	FORTIFY(常用函数加强检查)	SYMBOLS STRIPPED(裁剪符号表)

文件分析

序号	问题	文件

VIRUSTOTAL扫描

检出率： 16 / 68 完整报告

反病毒引擎	检出结果
Avast-Mobile	Android:Evo-gen [Trj]
Avira	ADWARE/ANDR.RevMob.A.Gen
BitDefenderFalx	Android.Riskware.WipeLocker.aAJ
Cynet	Malicious (score: 99)
ESET-NOD32	a variant of Android/AdDisplay.RevMob.A potentially unwanted
F-Secure	Adware.ADWARE/ANDR.RevMob.A.Gen
Fortinet	Adware/RevMob!Android
Ikarus	PUA.AndroidOS.RevMob
K7GW	Adware ( 0053284d1 )
Microsoft	PUA:Win32/Presenoker
NANO-Antivirus	Trojan.Android.Revmob.djhtmi
Symantec	PUA.Gen.2
SymantecMobileInsight	AdLibrary:RevMob
Trustlook	Android.PUA.Adware
VirIT	Android.Adw.RevMob.Gen
Xcitium	ApplicUnwnt@#2qeav17xxjo7x

滥用权限

恶意软件常用权限 14/30

android.permission.VIBRATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CONTACTS
android.permission.GET_ACCOUNTS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.READ_PHONE_STATE
android.permission.RECORD_AUDIO
android.permission.WAKE_LOCK
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_SETTINGS

其它常用权限 9/46

com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.BLUETOOTH
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH_ADMIN
android.permission.CHANGE_WIFI_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地图

域名检测

域名	状态	中国境内	位置信息
applift-a.apptornado.comhttp	安全	否	没有可用的地理位置信息。
www.heyzap.com	安全	否	IP地址: 172.66.40.249 国家: 美利坚合众国地区: lippinesPKPakistanPLPolandPMSaint Pierre and MiquelonPNPitcairnPRPuerto RicoPSPalestine, Stat 城市: 西雅图查看: Google 地图
androidhomebase.com	安全	否	没有可用的地理位置信息。
loopj.com	安全	否	IP地址: 185.199.108.153 国家: 美利坚合众国地区: 宾夕法尼亚城市: 加利福尼亚查看: Google 地图
sdk.appbrain.comhttp	安全	否	没有可用的地理位置信息。
market.android.com	安全	否	IP地址: 172.217.175.110 国家: 日本地区: 东京城市: 东京查看: Google 地图
hzmedia-cdn.heyzap.com	安全	否	IP地址: 13.248.169.48 国家: 美利坚合众国地区: 华盛顿城市: 西雅图查看: Google 地图
android.revmob.com	安全	否	没有可用的地理位置信息。
www.chartboost.com	安全	否	IP地址: 13.224.14.2 国家: 美利坚合众国地区: 华盛顿城市: 西雅图查看: Google 地图
www.googletagmanager.com	安全	是	IP地址: 180.163.150.41 国家: 中国地区: 上海城市: 上海查看: 高德地图
whois.domaintools.com	安全	否	IP地址: 199.30.228.13 国家: 美利坚合众国地区: 华盛顿城市: 西雅图查看: Google 地图
cdn1.certified-toolbar.com	安全	否	IP地址: 172.232.25.148 国家: 美利坚合众国地区: 伊利诺伊州城市: 芝加哥查看: Google 地图
applift-a.apptornado.com	安全	否	IP地址: 172.67.73.242 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
revmob.com	安全	否	没有可用的地理位置信息。
bucket.homebase-apps.com	安全	否	没有可用的地理位置信息。
www.appbrain.com	安全	否	IP地址: 172.66.40.249 国家: 马来西亚地区: 柔佛城市: 柔佛新山查看: Google 地图
exception.homebase-apps.com	安全	否	没有可用的地理位置信息。
android.heyzap.com	安全	否	IP地址: 76.223.54.146 国家: 美利坚合众国地区: 华盛顿城市: 西雅图查看: Google 地图
cdn3.widdit.com	安全	否	没有可用的地理位置信息。
cdn1.androidhomebase.com	安全	否	没有可用的地理位置信息。
ads.heyzap.com	安全	否	IP地址: 76.223.54.146 国家: 美利坚合众国地区: 华盛顿城市: 西雅图查看: Google 地图

手机号码

手机号	源码文件
18328001594	com/begal/appclong/classes/Utils.java
18328001594	自研引擎-S

网址

网址信息	源码文件
http://play.google.com https://play.google.com	com/appbrain/a/ak.java
http://sdk.appbrain.com,http://sdk-b.apptornado.com http://www.appbrain.com/info/sdk http://applift-a.apptornado.com,http://applift-b.apptornado.com http://applift-a.apptornado.com	com/appbrain/a/ax.java
http://whois.domaintools.com/ 127.0.0.1	com/begal/appclong/classes/HostsBlocker.java
https://www.chartboost.com	com/chartboost/sdk/impl/j.java
file:///android_res/	com/chartboost/sdk/impl/i.java
http://market.android.com/	com/chartboost/sdk/impl/m.java
http://loopj.com/android-async-http	com/heyzap/http/AsyncHttpClient.java
http://android.heyzap.com/mobile/track_sdk_event	com/heyzap/internal/Analytics.java
http://android.heyzap.com http://android.heyzap.com/in_game_api/sdk/	com/heyzap/internal/APIClient.java
http://hzmedia-cdn.heyzap.com/mobile_game_banner_	com/heyzap/sdk/PreMarketCheckinDialog.java
http://ads.heyzap.com/in_game_api/ads/register_click http://ads.heyzap.com/in_game_api/ads/register_impression http://ads.heyzap.com/in_game_api/ads/fetch_ad	com/heyzap/sdk/ads/AdUnit.java
http://www.heyzap.com/images/common/spinners/64.gif'/	com/heyzap/sdk/ads/InterstitialAdUnit.java
http://ads.heyzap.com/in_game_api/ads http://ads.heyzap.com/in_game_api/ads/add_initial_packages http://ads.heyzap.com/in_game_api/ads/register_new_game_install	com/heyzap/sdk/ads/Manager.java
http://revmob.com	com/revmob/client/InstallClientListener.java
http://revmob.com https://android.revmob.com	com/revmob/client/RevMobClient.java
http://cdn3.widdit.com/screenalyze/pub/%s/%s/settings/xlarge.json	com/widdit/lockScreen/terms/Config.java
http://androidhomebase.com/privacy.html'	com/widdit/lockScreen/terms/TermsAndConditionsActivityController.java
http://cdn1.certified-toolbar.com/android/ http://cdn1.certified-toolbar.com/android/drawable-	com/widdit/lockScreen/terms/JSONThermsAndConditionsParser.java
http://bucket.homebase-apps.com/homebaseappsservices.asmx/registereventbucket	com/widdit/lockScreen/terms/TermsAnswerReporter.java
http://cdn1.androidhomebase.com/update/	com/widdit/lockScreenShell/c.java
http://exception.homebase-apps.com/exception/	com/widdit/shell/a/e.java
http://ads.heyzap.com/in_game_api/ads file:///android_res/ http://cdn1.androidhomebase.com/update/ https://android.revmob.com http://hzmedia-cdn.heyzap.com/mobile_game_banner_ 127.0.0.1 http://exception.homebase-apps.com/exception/ http://ads.heyzap.com/in_game_api/ads/fetch_ad http://android.heyzap.com/mobile/track_sdk_event http://hostname/? http://ads.heyzap.com/in_game_api/ads/register_new_game_install http://cdn3.widdit.com/screenalyze/pub/%s/%s/settings/xlarge.json https://www.chartboost.com http://whois.domaintools.com/ http://sdk.appbrain.com,http://sdk-b.apptornado.com https://play.google.com http://cdn1.certified-toolbar.com/android/drawable- http://ads.heyzap.com/in_game_api/ads/add_initial_packages http://android.heyzap.com/in_game_api/sdk/ http://bucket.homebase-apps.com/homebaseappsservices.asmx/registereventbucket http://android.heyzap.com http://www.heyzap.com/images/common/spinners/64.gif'/ http://revmob.com http://play.google.com http://www.appbrain.com/info/sdk http://market.android.com/ https://www.googletagmanager.com http://applift-a.apptornado.com http://ads.heyzap.com/in_game_api/ads/register_click http://androidhomebase.com/privacy.html' http://applift-a.apptornado.com,http://applift-b.apptornado.com http://cdn1.certified-toolbar.com/android/ http://loopj.com/android-async-http http://ads.heyzap.com/in_game_api/ads/register_impression	自研引擎-S

FIREBASE实例

邮箱

追踪器

名称	类别	网址
AppBrain		https://reports.exodus-privacy.eu.org/trackers/136
ChartBoost		https://reports.exodus-privacy.eu.org/trackers/53
Google Analytics	Analytics	https://reports.exodus-privacy.eu.org/trackers/48
Google Tag Manager	Analytics	https://reports.exodus-privacy.eu.org/trackers/105
Heyzap (bought by Fyber)		https://reports.exodus-privacy.eu.org/trackers/147
Revmob	Advertisement	https://reports.exodus-privacy.eu.org/trackers/263

密钥凭证

已显示 27 个secrets

1、 nJBUhcameExFCkEhow4NEJCIST32oW4TEg3ogbg+NklAaSl1KFG2lNGlJimqU0/P3sGZ0nLNn9qx9
2、 nbz2PpFXK5obQPvYskh5WPqaG9rXnkDRR0q6cAjxZdP59oQNQA84ADshpO6vozBsB4DAP2/2KzrwR
3、 nCXBIWXMAAC4jAAAuIwF4pT92AAAHk0lEQVR42u2dW6wdUxjHf98pirqURElc6tIihKZOL0rqLiEl
4、 n2olwU2SXZdN1AtzmEfwtI+49oSQRspqj1yT9EUqAMoahx3rYvpW8MLONwFzglxT7WyQ97eOMmX0M
5、 nYfAXeebVnyGCJC3JuHeGh1/vFx2nMjvh++m8iTvax9jMPgHOBv5OMXlE0tICyhR86SYXchted46h
6、 nAP7xsB0qOvNGAL+5kIrOvBGghKD60AgQmEYAONDD9oSiM98ndOlrwNdAPL4fjn7G/UKyedoX+C60
7、 n+AxcP7sT90e4wsx2lRLoVkh6KOeOs1Z8IekeSce3yWOWpL9T0tglaWGb+w/x8OmdyoJXQPCPkDTc
8、 nd7qkHRn2vssMU5VdE3xYVka86jITBsDMNuBGM2mjDa9lhqhj7ifnqmsbvLfG5CH0PGDUkNXMvqV4
9、 n+ZGkpzrId6ak3RlpLm1xz5kePn0QOrZ5A3H9GIMf80wHeZ+l7OZo6Qh7HwFWh45t3iCsKEiATkXo
10、 nEWYD347Bz/VmtmYM96cSWoCWRCLMJVsE38naNXQ+k30gdExyI+kVj3Z1fpu0Jssdnp1GWxEkHSTp
11、 nzHYAd4WORoWsA241sxkhgw8jJi6SHgPuC+lQifwMvAu8ZGavhnYmptVM+CLc4RUzgEm42eiehP2E
12、 noCasBeYxdhEKpQwBfJ50pb7yY2abgNmki7C4F0QoQ4DC2slIhFm4VchWLJb0nGeaa3F9QicidEUf
13、 nlwr5ETjezBRsKULS6ZJWAU8xvoIPcBxwGQRaC5I0iNvycX7oSARkPgQQQNKjwHJgQugIBGYiVLwY
14、 n78C8qoIPewXwOcK9V1kHzIi2qlRGLEB3LDSVx3KgP3rEWSlxHzAZt8OgljPjEvkcWGJmr4dyoA/A
15、 nJ2k5MBi65DXhQ6iwE5b0BHBP6FLXhB3AUWa2u5ImSNKdNMFPcp2Z7YYKaoCkmcDa0CWuCVuBu8zs
16、 njY7OJr0mLOpwiHpt4BgUi6Q3PCZi8h1SSjpR0vaM9LxEkHSMh69dMRHz7agGfUSIhqhzKG50dHiJ
17、 b879b3b4ab2be2cda98667b2f4529a7536223d38
18、 nsw0NDQ0NDQ0FUesnYpIOBE4BTsKt2ewLTEyYDCfK0MfeUYzYO8ROjmQsca3o2lrYFJm2AXuAL81s
19、 n5cgy1k4ASf3A5cAFuJXKKaF9KpBPgDvM7KP4g1oIIGkCMADcBJwb2p8KOMvMPoUaCCBpALgfmBba
20、 nxtAB6Dkkzc+55W9DaF97Fkkv5BBgPHxbUjgkvZgS+F2SbgztX10o9cGJpAXA1cB03BOr94DlZvZT
21、 nnEP6ewBXAAflTa7oYJUhwJEetmtGlXCvCL+m3LNYblk7NznmCXnpivcDfARoGWQz+wH3PlZaTRjs
22、 Y29tLmFwcGxpc3RvLmFwcGNsb25lci5jbGFzc2VzLnNlY29uZGFyeQ==
23、 nbmhoaGhoaMig8M5S0hTgENxxYMk8kg9v+nAPg34ys79CB6GnkDt8Q5KGon97Er8nPxu1LWU8UsbB
24、 nZWtL6D4gxleEjTgRsiZreZ8nNC9qRwx6BC0WIWuyNpCzY/YJalfUgLEw4LPgFs0T+snumNuJ4BOD
25、 n4EPbNtXMNgNzgO0pJjfLc54Q9QnnUoOaUIYAPh3VtjxGkQhzM+wXdSDCxzgR/iipbLkIXQNuy2sY
26、 n6ILXhSq+P2Ae7qsIh4HV0REDDQ314F/QQmVQhaYmuwAAAABJRU5ErkJggg==
27、 5044f0f316ba471a72000030

字符串列表

建议导出为TXT，方便查看。

活动列表

已显示 7 个activities

1、 com.phoneliving.talkingdroidfree.MainActivity
2、 com.phoneliving.talkingdroidfree.Preferences
3、 com.widdit.lockScreen.activities.MainActivity
4、 com.widdit.lockScreen.activities.TermsAndConditionsActivity
5、 com.widdit.lockScreen.activities.SettingsActivity
6、 com.appbrain.AppBrainActivity
7、 com.begal.appclong.classes.DefaultProvider$MyActivity

服务列表

已显示 5 个services

1、 com.widdit.lockScreen.service.HomeBaseService
2、 com.widdit.lockScreen.service.DataService
3、 com.widdit.lockScreen.service.BackgroundSoundService
4、 com.appbrain.AppBrainService
5、 com.begal.appclong.service.RemoteService

广播接收者列表

已显示 13 个receivers

1、 com.widdit.lockScreen.service.receivers.ScreenStateAndBootCompletedReceiver
2、 com.widdit.lockScreen.receivers.SMSNotificationsReceiver
3、 com.widdit.lockScreen.receivers.PhoneCallReciever
4、 com.widdit.lockScreen.receivers.OutgoingPhoneCallReciever
5、 com.widdit.lockScreen.receivers.NetworkStateReceiver
6、 com.widdit.lockScreen.receivers.BreakingMessageReceiver
7、 com.widdit.lockScreen.receivers.PackageAddedReceiver
8、 com.widdit.lockScreen.receivers.PackageRemovedReceiver
9、 com.widdit.lockScreen.receivers.WidditGCMBroadcastReceiver
10、 com.widdit.shell.AlarmReceiver
11、 com.appbrain.ReferrerReceiver
12、 com.begal.appclong.classes.DefaultProvider$DefaultReceiver
13、 com.begal.appclong.classes.DisableClipboardAccess$ClearClipboardReceiver

内容提供者列表

已显示 1 个providers

1、 com.begal.appclong.classes.DefaultProvider

第三方SDK

SDK名称	开发者	描述信息

文件列表

AndroidManifest.xml
README.txt
__launcher_icon.png
assets/MontserratSans.otf
assets/natives_sec_blob.dat
classes.dex
classes2.dex
cloneSettings.json
com/heyzap/internal/Analytics.java.bak
com/widdit/lockScreenShell/RemoteHomeBaseJarLoader.java.orig
manifest
res/anim/hz_slide_down_from_bottom.xml
res/anim/hz_slide_from_top.xml
res/anim/hz_slide_up.xml
res/anim/hz_slide_up_from_bottom.xml
res/drawable-hdpi/banner_l_corner_bottom.png
res/drawable-hdpi/banner_p_corner_bottom.png
res/drawable-hdpi/bannertop_l_corner.png
res/drawable-hdpi/bannertop_p_corner.png
res/drawable-hdpi/hz_achievements_bubble.png
res/drawable-hdpi/hz_achievements_dialog.9.png
res/drawable-hdpi/hz_achievements_dialog_gradient.png
res/drawable-hdpi/hz_badge_new.png
res/drawable-hdpi/hz_bg_stream_feedlette.png
res/drawable-hdpi/hz_bg_stream_feedlette_hover.png
res/drawable-hdpi/hz_bubble.png
res/drawable-hdpi/hz_button_action_gray.9.png
res/drawable-hdpi/hz_button_action_gray_sel.9.png
res/drawable-hdpi/hz_button_action_green.9.png
res/drawable-hdpi/hz_button_action_green_sel.9.png
res/drawable-hdpi/hz_button_round_green.9.png
res/drawable-hdpi/hz_button_round_green_sel.9.png
res/drawable-hdpi/hz_button_transparent.9.png
res/drawable-hdpi/hz_button_transparent_sel.9.png
res/drawable-hdpi/hz_down_arrow.png
res/drawable-hdpi/hz_green_action_button.9.png
res/drawable-hdpi/hz_green_action_button_sel.9.png
res/drawable-hdpi/hz_green_button_new.9.png
res/drawable-hdpi/hz_green_button_new_down.9.png
res/drawable-hdpi/hz_ic_divider.png
res/drawable-hdpi/hz_icon_check.png
res/drawable-hdpi/hz_icon_default_badge.png
res/drawable-hdpi/hz_icon_default_people.png
res/drawable-hdpi/hz_install_heyzap_button.png
res/drawable-hdpi/hz_install_heyzap_button_sel.png
res/drawable-hdpi/hz_invite_grn_btn.png
res/drawable-hdpi/hz_leaderboard_bottom_btn_sel.9.png
res/drawable-hdpi/hz_leaderboard_bubble_friends.png
res/drawable-hdpi/hz_leaderboard_bubble_pedestal.png
res/drawable-hdpi/hz_leaderboard_bubble_pedestal_arrow.png
res/drawable-hdpi/hz_leaderboard_dialog_x.png
res/drawable-hdpi/hz_leaderboard_glow_bottom.png
res/drawable-hdpi/hz_leaderboard_glow_top.png
res/drawable-hdpi/hz_leaderboard_heyzap_logo.png
res/drawable-hdpi/hz_leaderboard_highlight.9.png
res/drawable-hdpi/hz_leaderboard_in_game_dialog.9.png
res/drawable-hdpi/hz_leaderboard_people.png
res/drawable-hdpi/hz_leaderboard_popover.9.png
res/drawable-hdpi/hz_leaderboard_savebg.png
res/drawable-hdpi/hz_leaderboard_top_logo.png
res/drawable-hdpi/hz_leaderboard_top_overlay.9.png
res/drawable-hdpi/hz_play_friends_button.9.png
res/drawable-hdpi/hz_play_friends_button_sel.9.png
res/drawable-hdpi/hz_sdk_checkin.png
res/drawable-hdpi/hz_sdk_leaderboard.png
res/drawable-hdpi/hz_sdk_z.png
res/drawable-hdpi/hz_top_left_pressed_state.9.png
res/drawable-ldpi/hz_heyzap_button.png
res/drawable-ldpi/hz_heyzap_circle.png
res/drawable-mdpi/hz_heyzap_button.png
res/drawable-mdpi/hz_heyzap_circle.png
res/drawable-xhdpi/hz_achievements_bubble.png
res/drawable-xhdpi/hz_achievements_dialog.9.png
res/drawable-xhdpi/hz_achievements_dialog_gradient.png
res/drawable-xhdpi/hz_badge_new.png
res/drawable-xhdpi/hz_bubble.png
res/drawable-xhdpi/hz_button_action_gray.9.png
res/drawable-xhdpi/hz_button_action_gray_sel.9.png
res/drawable-xhdpi/hz_button_action_green.9.png
res/drawable-xhdpi/hz_button_action_green_sel.9.png
res/drawable-xhdpi/hz_button_round_green.9.png
res/drawable-xhdpi/hz_button_round_green_sel.9.png
res/drawable-xhdpi/hz_button_transparent.9.png
res/drawable-xhdpi/hz_button_transparent_sel.9.png
res/drawable-xhdpi/hz_down_arrow.png
res/drawable-xhdpi/hz_green_action_button.9.png
res/drawable-xhdpi/hz_green_action_button_sel.9.png
res/drawable-xhdpi/hz_ic_divider.png
res/drawable-xhdpi/hz_icon_check.png
res/drawable-xhdpi/hz_install_heyzap_button.png
res/drawable-xhdpi/hz_install_heyzap_button_sel.png
res/drawable-xhdpi/hz_leaderboard_bottom_btn_sel.9.png
res/drawable-xhdpi/hz_leaderboard_bubble_friends.png
res/drawable-xhdpi/hz_leaderboard_bubble_pedestal.png
res/drawable-xhdpi/hz_leaderboard_bubble_pedestal_arrow.png
res/drawable-xhdpi/hz_leaderboard_dialog_x.png
res/drawable-xhdpi/hz_leaderboard_glow_bottom.png
res/drawable-xhdpi/hz_leaderboard_glow_top.png
res/drawable-xhdpi/hz_leaderboard_heyzap_logo.png
res/drawable-xhdpi/hz_leaderboard_highlight.9.png
res/drawable-xhdpi/hz_leaderboard_in_game_dialog.9.png
res/drawable-xhdpi/hz_leaderboard_people.png
res/drawable-xhdpi/hz_leaderboard_popover.9.png
res/drawable-xhdpi/hz_leaderboard_savebg.png
res/drawable-xhdpi/hz_leaderboard_top_logo.png
res/drawable-xhdpi/hz_leaderboard_top_overlay.9.png
res/drawable-xhdpi/hz_play_friends_button.9.png
res/drawable-xhdpi/hz_play_friends_button_sel.9.png
res/drawable-xhdpi/hz_sdk_checkin.png
res/drawable-xhdpi/hz_sdk_leaderboard.png
res/drawable-xhdpi/hz_sdk_z.png
res/drawable-xhdpi/hz_top_left_pressed_state.9.png
res/drawable/button01_ic01.png
res/drawable/button01_ic02.png
res/drawable/button01_ic_script.xml
res/drawable/button02_ic01.png
res/drawable/button02_ic02.png
res/drawable/button02_ic_script.xml
res/drawable/button03_ic01.png
res/drawable/button03_ic02.png
res/drawable/button03_ic_script.xml
res/drawable/button04_ic01.png
res/drawable/button04_ic02.png
res/drawable/button04_ic_script.xml
res/drawable/buyapp_ic01.png
res/drawable/buyapp_ic02.png
res/drawable/buyapp_ic_purchased01.png
res/drawable/buyapp_ic_purchased02.png
res/drawable/buyapp_ic_purchased_script.xml
res/drawable/buyapp_ic_script.xml
res/drawable/calibratebg.png
res/drawable/calibratebt01.png
res/drawable/calibratebt02.png
res/drawable/calibratescript.xml
res/drawable/close_ic_script.xml
res/drawable/felinearts.png
res/drawable/free_ic_script.xml
res/drawable/heartangry.png
res/drawable/hearthappy.png
res/drawable/heartmedium.png
res/drawable/heyzap.png
res/drawable/hz_bg_tile_stream.xml
res/drawable/hz_bg_tile_stream_hover.xml
res/drawable/hz_button_action_gray_drawable.xml
res/drawable/hz_button_action_green_drawable.xml
res/drawable/hz_button_fb_down.9.png
res/drawable/hz_button_fb_up.9.png
res/drawable/hz_button_round_green_drawable.xml
res/drawable/hz_button_transparent_drawable.xml
res/drawable/hz_checkin_dialog_bg.png
res/drawable/hz_close.png
res/drawable/hz_cog_down.png
res/drawable/hz_cog_up.png
res/drawable/hz_dialog_action_bar.png
res/drawable/hz_dialog_background.xml
res/drawable/hz_dialog_banner_default.jpg
res/drawable/hz_dialog_border.png
res/drawable/hz_dialog_users_ratings.png
res/drawable/hz_fb_login_down.png
res/drawable/hz_fb_login_up.png
res/drawable/hz_getheyzap_down.9.png
res/drawable/hz_getheyzap_up.9.png
res/drawable/hz_green_action_button_drawable.xml
res/drawable/hz_green_button.xml
res/drawable/hz_grouped_stream_bg.xml
res/drawable/hz_heyzap_button.png
res/drawable/hz_heyzap_circle.png
res/drawable/hz_heyzap_circle01.png
res/drawable/hz_heyzap_circle02.png
res/drawable/hz_heyzap_circle_script.xml
res/drawable/hz_install_button.png
res/drawable/hz_install_heyzap_button_drawable.xml
res/drawable/hz_leaderboard_bottom_btn_drawable.xml
res/drawable/hz_play_friends_action_button_drawable.xml
res/drawable/hz_toggle_bg.9.png
res/drawable/hz_toggle_slider_down.png
res/drawable/hz_toggle_slider_up.png
res/drawable/hz_top_left_button_drawable.xml
res/drawable/iapbg.png
res/drawable/iapclose.png
res/drawable/iapclose_01.png
res/drawable/iapclose_02.png
res/drawable/iapfree_01.png
res/drawable/iapfree_02.png
res/drawable/iappaid_01.png
res/drawable/iappaid_02.png
res/drawable/ic_menu_info_details.png
res/drawable/ic_menu_manage.png
res/drawable/ic_menu_preferences.png
res/drawable/ic_menu_rate.png
res/drawable/icon.png
res/drawable/magicspangle.png
res/drawable/meter1.png
res/drawable/meter2.png
res/drawable/meter3.png
res/drawable/paid_ic_script.xml
res/drawable/phoneliving.png
res/drawable/share.png
res/layout/airpush_notify.xml
res/layout/helpwindow.xml
res/layout/hz_achievement_dialog_full.xml
res/layout/hz_achievement_earned_dialog_top.xml
res/layout/hz_achievement_feedlette.xml
res/layout/hz_heyzap_dialog.xml
res/layout/hz_leaderboard_full_overlay.xml
res/layout/hz_leaderboard_in_game_overlay.xml
res/layout/hz_leaderboard_level_feedlette.xml
res/layout/hz_leaderboard_levels_dialog.xml
res/layout/hz_leaderboard_score_dialog_full.xml
res/layout/hz_leaderboard_score_dialog_top.xml
res/layout/hz_leaderboard_user_feedlette.xml
res/layout/iapwindow.xml
res/layout/main.xml
res/menu/menu.xml
res/raw/angry.ogg
res/raw/dancing.ogg
res/raw/eating.ogg
res/raw/happy.ogg
res/raw/help.ogg
res/raw/hungry.ogg
res/raw/ic_menu_info_details.png
res/raw/ic_menu_manage.png
res/raw/sad.ogg
res/raw/selfdestruct.ogg
res/raw/shake.ogg
res/raw/talkingdroid.3gp
res/xml/preferences.xml
resources.arsc
META-INF/MANIFEST.MF
META-INF/CERT.SF
META-INF/CERT.RSA

污点分析

当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……

规则名称	描述信息	操作
病毒分析	使用安卓恶意软件常用的API进行污点分析	开始分析
漏洞挖掘	漏洞挖掘场景下的污点分析	开始分析
隐私合规	隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播	开始分析
密码分析	分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等	开始分析
Callback	因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员	开始分析

时间	执行功能	执行结果
2024-08-20 22:20:29	生成哈希值	成功
2024-08-20 22:20:29	提取APK	成功
2024-08-20 22:20:30	探测加固信息为：未加壳	成功
2024-08-20 22:20:30	开始解压文件	成功
2024-08-20 22:20:31	获取硬编码证书/密钥库	成功
2024-08-20 22:20:33	解析 AndroidManifest.xml	成功
2024-08-20 22:20:33	使用 androguard 解析 APK	成功
2024-08-20 22:20:33	提取Manifest数据	成功
2024-08-20 22:20:33	提取应用程序基础数据，例如：app名称，版本，包名称等信息	成功
2024-08-20 22:20:33	正在从Play Store获取详细信息: com.phoneliving.rtotle135.talkingtyler5	成功
2024-08-20 22:20:36	从 AppMonsta 获取详细信息: com.phoneliving.rtotle135.talkingtyler5	成功
2024-08-20 22:20:39	在AppMonsta未找到该应用	成功
2024-08-20 22:20:39	Manifest分析开始	成功
2024-08-20 22:20:39	检查恶意软件权限	成功
2024-08-20 22:20:40	提取APK中所有的类和方法	成功
2024-08-20 22:20:41	解析出1621个class，16722个method	成功
2024-08-20 22:20:41	SO文件分析开始	成功
2024-08-20 22:20:44	读取代码签名证书	成功
2024-08-20 22:20:46	检测追踪器	成功
2024-08-20 22:20:47	将 APK 反编译为 Java	成功
2024-08-20 22:20:51	代码分析开始于 - java_source	成功
2024-08-20 22:20:51	Android SAST 开始	成功
2024-08-20 22:20:53	Android API分析开始	成功
2024-08-20 22:20:55	开始进行Android 权限映射	成功
2024-08-20 22:20:57	Android权限映射已完成	成功
2024-08-20 22:20:58	从 APK 中提取字符串数据	成功
2024-08-20 22:20:58	从代码中提取字符串数据	成功
2024-08-20 22:20:58	从代码中提取字符串值和凭证数据	成功
2024-08-20 22:21:00	对提取的域名执行恶意软件检查	成功
2024-08-20 22:21:05	VirusTotal: 检查现有报告	成功
2024-08-20 22:21:07	VirusTotal: Scan finished, information embedded	成功
2024-08-20 22:21:07	保存到数据库	成功