文件信息
文件名称 base.apk应用信息
应用名称 齿轮辅助证书信息
二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: True
v4 签名: False
主题: C=US, ST=California, L=Mountain View, O=Android, OU=Android, CN=Android, E=android@android.com
签名算法: rsassa_pkcs1v15
有效期自: 2008-02-29 01:33:46+00:00
有效期至: 2035-07-17 01:33:46+00:00
发行人: C=US, ST=California, L=Mountain View, O=Android, OU=Android, CN=Android, E=android@android.com
序列号: 0x936eacbe07f201df
哈希算法: sha1
证书MD5: e89b158e4bcf988ebd09eb83f5378e87
证书SHA1: 61ed377e85d386a8dfee6b864bd85b0bfaa5af81
证书SHA256: a40da80a59d170caa950cf15c18c454d47a39b26989d8b640ecd745ba71bf5dc
证书SHA512: 5216ccb62004c4534f35c780ad7c582f4ee528371e27d4151f0553325de9ccbe6b34ec4233f5f640703581053abfea303977272d17958704d89b7711292a4569
公钥算法: rsa
密钥长度: 2048
指纹: f9f32662753449dc550fd88f1ed90e94b81adef9389ba16b89a6f3579c112e75
找到 1 个唯一证书应用程序权限
| 权限名称 | 安全等级 | 权限内容 | 权限描述 | 关联代码 |
|---|---|---|---|---|
| android.permission.READ_LOGS | 危险 | 读取系统日志文件 | 允许应用程序从系统的各日志文件中读取信息。这样应用程序可以发现您的手机使用情况，这些信息还可能包含用户个人信息或保密信息，造成隐私数据泄露。 | |
| android.permission.ACCESS_WIFI_STATE | 普通 | 查看Wi-Fi状态 | 允许应用程序查看有关Wi-Fi状态的信息。 | |
| android.permission.ACCESS_NETWORK_STATE | 普通 | 获取网络状态 | 允许应用程序查看所有网络的状态。 |
显示文件
com/cloudinject/core/utils/compat/C0114.java
com/cloudinject/feature/model/p014/C0184.java
com/cloudinject/p025/C0355.java
com/cloudinject/p025/p026/C0339.java
com/sadfxg/fasg/C0359.java
mirrorb/android/hardware/fingerprint/C0366.java
mirrorb/android/net/C0374.java
mirrorb/android/rms/C0377.java
mirrorb/android/util/C0378.java
mirrorb/dalvik/system/C0384.java
p028/p029/p030/p037/C0410.java
|
| android.permission.READ_PHONE_STATE | 危险 | 读取手机状态和标识 | 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号，是否正在通话，以及对方的号码等。 |
显示文件
com/cloudinject/core/p009/p011/C0148.java
com/cloudinject/customview/FeatureButton.java
com/cloudinject/customview/FeatureLinearLayout.java
com/cloudinject/feature/p016/C0204.java
com/cloudinject/feature/p021/AlertDialogC0262.java
mirrorb/android/location/C0369.java
p028/p029/p030/p037/C0410.java
p040/p041/p042/C0448.java
|
| android.permission.WRITE_EXTERNAL_STORAGE | 危险 | 读取/修改/删除外部存储内容 | 允许应用程序写入外部存储。 | 显示文件 |
| android.permission.READ_EXTERNAL_STORAGE | 危险 | 读取SD卡内容 | 允许应用程序从SD卡读取信息。 |
显示文件
adrt/ADRTLogCatReader.java
com/cloudinject/feature/p018/C0215.java
com/cloudinject/feature/p018/C0217.java
com/cloudinject/feature/p019/C0234.java
com/cloudinject/feature/p019/C0248.java
com/cloudinject/feature/p019/C0252.java
com/cloudinject/feature/p023/C0287.java
com/cloudinject/feature/p023/C0316.java
com/cloudinject/feature/p023/C0320.java
p028/p029/p030/p037/C0406.java
p028/p029/p030/p037/C0410.java
p028/p029/p030/p037/C0420.java
|
| android.permission.INTERNET | 危险 | 完全互联网访问 | 允许应用程序创建网络套接字。 |
显示文件
com/cloudinject/customview/C0176.java
com/cloudinject/feature/model/p014/C0184.java
com/cloudinject/feature/p023/C0328.java
com/cloudinject/p025/C0355.java
com/sadfxg/fasg/C0359.java
mirrorb/android/accounts/C0361.java
mirrorb/android/media/session/C0371.java
mirrorb/android/rms/C0377.java
p028/p029/p030/p037/C0410.java
|
| android.permission.RECORD_AUDIO | 危险 | 获取录音权限 | 允许应用程序获取录音权限。 | |
| android.permission.SYSTEM_ALERT_WINDOW | 危险 | 弹窗 | 允许应用程序弹窗。 恶意程序可以接管手机的整个屏幕。 | 显示文件 |
| android.permission.CAMERA | 危险 | 拍照和录制视频 | 允许应用程序拍摄照片和视频，且允许应用程序收集相机在任何时候拍到的图像。 | |
| android.permission.VIBRATE | 普通 | 控制振动器 | 允许应用程序控制振动器，用于消息通知振动功能。 | |
| android.permission.MANAGE_EXTERNAL_STORAGE | 危险 | 文件列表访问权限 | Android11新增权限，读取本地文件，如简历，聊天图片。 | |
| android.permission.MOUNT_UNMOUNT_FILESYSTEMS | 危险 | 装载和卸载文件系统 | 允许应用程序装载和卸载可移动存储器的文件系统。 | |
| android.permission.FLASHLIGHT | 普通 | 控制闪光灯 | 允许应用程序控制闪光灯。 | |
| android.permission.REQUEST_INSTALL_PACKAGES | 危险 | 允许安装应用程序 | Android8.0 以上系统允许安装未知来源应用程序权限。 | |
| android.permission.QUERY_ALL_PACKAGES | 普通 | 获取已安装应用程序列表 | Android 11引入与包可见性相关的权限，允许查询设备上的任何普通应用程序，而不考虑清单声明。 | |
| android.permission.REORDER_TASKS | 危险 | 对正在运行的应用程序重新排序 | 允许应用程序将任务移至前端和后台。恶意应用程序可借此强行进入前端，而不受您的控制。 | |
| android.permission.FOREGROUND_SERVICE | 普通 | 创建前台Service | Android 9.0以上允许常规应用程序使用 Service.startForeground，用于podcast播放（推送悬浮播放，锁屏播放） | |
| android.permission.BIND_VPN_SERVICE | 签名 | VpnServices 需要进行系统绑定 | 必须是VpnService, 以确保只有系统可以绑定到它。 |
证书分析
| 标题 | 严重程度 | 描述信息 |
|---|---|---|
| 已签名应用 | 信息 | 应用程序已使用代码签名证书进行签名 |
MANIFEST分析
| 序号 | 问题 | 严重程度 | 描述信息 | 操作 |
|---|---|---|---|---|
| 1 |
应用程序可以安装在有漏洞的已更新 Android 版本上 Android 4.0-4.0.2, [minSdk=14] |
警告 | 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。 | |
| 2 |
应用程序已启用明文网络流量 [android:usesCleartextTraffic=true] |
警告 | 应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。 | |
| 3 |
应用程序具有网络安全配置 [android:networkSecurityConfig=@xml/unishuaTJW] |
信息 | 网络安全配置功能让应用程序可以在一个安全的，声明式的配置文件中自定义他们的网络安全设置，而不需要修改应用程序代码。这些设置可以针对特定的域名和特定的应用程序进行配置。 | |
| 4 |
Broadcast Receiver (android.app.admin.DeviceAdminReceiver) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.BIND_DEVICE_ADMIN [android:exported=true] |
警告 | 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。 |
可浏览的ACTIVITIES
| ACTIVITY | INTENT |
|---|
网络安全配置
| 序号 | 范围 | 严重级别 | 描述 |
|---|---|---|---|
| 1 | * | 高 | 基本配置不安全地配置为允许到所有域的明文流量。 |
API调用分析
源代码分析
| 序号 | 问题 | 等级 | 参考标准 | 文件位置 | 操作 |
|---|---|---|---|---|---|
| 1 | 应用程序记录日志信息,不得记录敏感信息 | 信息 | CWE: CWE-532: 通过日志文件的信息暴露 OWASP MASVS: MSTG-STORAGE-3 | 显示文件 | |
| 2 | 默认情况下，调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知，ECB模式很弱，因为它导致相同明文块的密文相同 | 高危 | CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-2 | com/beingyi/encrypt/BYDecoder.java | |
| 3 | 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 | 警告 | CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2 | mirrorb/android/hardware/location/C0368.java p028/p029/p030/p037/C0417.java p028/p029/p030/p037/C0420.java | |
| 4 | 启用了调试配置。生产版本不能是可调试的 | 高危 | CWE: CWE-919: 移动应用程序中的弱点 OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-RESILIENCE-2 | com/qq264922331/BuildConfig.java | |
| 5 | 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 | 信息 | OWASP MASVS: MSTG-STORAGE-10 | com/cloudinject/feature/p021/C0284.java p028/p029/p030/p036/C0403.java | |
| 6 | 应用程序使用不安全的随机数生成器 | 警告 | CWE: CWE-330: 使用不充分的随机数 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-6 | cn/beingyi/sub/apps/SubApp/SubApplication.java |
动态库分析
| 序号 | 动态库 | NX(堆栈禁止执行) | STACK CANARY(栈保护) | RELRO | RPATH（指定SO搜索路径） | RUNPATH（指定SO搜索路径） | FORTIFY(常用函数加强检查) | SYMBOLS STRIPPED(裁剪符号表) |
|---|---|---|---|---|---|---|---|---|
| 1 | arm64-v8a/libygsiyu.so | True
info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。 |
True
info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出 |
Full RELRO
info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。 |
None
info 二进制文件没有设置运行时搜索路径或RPATH |
None
info 二进制文件没有设置 RUNPATH |
False
warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用 |
False
warning 符号可用 |
文件分析
| 序号 | 问题 | 文件 |
|---|
VIRUSTOTAL扫描
该文件并未在病毒库中，文件上传功能被禁用。
滥用权限
恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。
IP地图
域名检测
| 域名 | 状态 | 中国境内 | 位置信息 | 解析 |
|---|---|---|---|---|
| log-report.com |
安全 |
否 |
IP地址: 104.21.75.58 国家: 美利坚合众国 地区: 加利福尼亚 城市: 旧金山 查看: Google 地图 |
|
手机号码
网址
| 网址信息 | 源码文件 |
|---|---|
|
http://gabrielecirulli.github.io/2048/ https://twitter.com/share https://www.bing.com/search?q= http://git.io/2048 |
自研引擎-A |
|
https://log-report.com/report |
com/cloudinject/feature/p017/C0207.java |
|
https://log-report.com/report |
自研引擎-S |
FIREBASE实例
邮箱
追踪器
| 名称 | 类别 | 网址 |
|---|
密钥凭证
活动列表
已显示 10 个activities
1、 com.iapp.app.logoActivity
2、 com.iapp.app.run.load
3、 com.iapp.app.run.mian
4、 com.iapp.app.run.main
5、 com.iapp.app.run.main2
6、 com.iapp.app.run.main3
7、 com.iapp.app.Webview
8、 com.iapp.app.Videoview
9、 com.iapp.app.DownList
10、 cn.hugo.android.scanner.CaptureActivity
服务列表
广播接收者列表
已显示 1 个receivers
1、 android.app.admin.DeviceAdminReceiver
内容提供者列表
已显示 1 个providers
1、 androidx.core.content.FileProvider
文件列表
AndroidManifest.xml
META-INF/ANDROID.RSA
META-INF/ANDROID.SF
META-INF/MANIFEST.MF
assets/extra_conf1g.xml
assets/lib.so
assets/res/0cafe8ffa7804a886461ffb5eb629397
assets/res/0d774b52efea0cd31ede2184053fa6d0
assets/res/1.9.png
assets/res/10e7f284e5857cde80e8d26551596e4b
assets/res/12.png
assets/res/1689130101658_212x100.png
assets/res/1692334412846.png
assets/res/1692334472054.png
assets/res/1692334645308.png
assets/res/1692334750910.png
assets/res/1692334945801.png
assets/res/1692335005226.png
assets/res/1692335055302.png
assets/res/1692631174795.png
assets/res/1694142259722.png
assets/res/1fa960af68cd3d7e5caa64fb0935d508
assets/res/2048.css
assets/res/2048.js
assets/res/34e0debabf0a27bdcb0c38d383d87a62
assets/res/396c118ce.png
assets/res/46dc32483000ad686ecf369c71ea6c38
assets/res/5bc6589dcb7e39c554d305ca369653dd
assets/res/5df4a971f28e94af.png
assets/res/66.ttf
assets/res/7ee98a41a33fc80f198ac1405a0b6df5
assets/res/8b329fccd45ab0a6.png
assets/res/90bl.zip
assets/res/QQ.png
assets/res/Roboto-Regular.ttf
assets/res/SourceSansPro-SemiBold.ttf
assets/res/a357078d6b31.ttf
assets/res/ab_gw.png
assets/res/ab_gx.png
assets/res/ab_off.png
assets/res/ab_ry.png
assets/res/ab_tk.png
assets/res/ab_zz.png
assets/res/ad2.png
assets/res/ad_729.jpg
assets/res/ad_chuangyou.jpg
assets/res/ad_fl.jpg
assets/res/ad_freekey.jpg
assets/res/ad_haoren.jpg
assets/res/ad_huakusqqpd.jpg
assets/res/ad_jiemo.jpg
assets/res/ad_longhang.jpg
assets/res/ad_nxy.jpg
assets/res/ad_qimen.jpg
assets/res/ad_qqxb.jpg
assets/res/addq.jpg
assets/res/anana_background.png
assets/res/as.m4a
assets/res/bo.png
assets/res/browser.html
assets/res/browser.png
assets/res/btxlad.png
assets/res/bwl.png
assets/res/c6r.png
assets/res/ccc9061baf54bda9.png
assets/res/dzvad.jpg
assets/res/e2f743e5218e15cb.png
assets/res/ec3b91e8a.png
assets/res/egaocl.png
assets/res/ewm.png
assets/res/fangfeng.png
assets/res/flmh.jpg
assets/res/gfxm.png
assets/res/gq2048.html
assets/res/gsd.png
assets/res/hj.png
assets/res/huakustg.jpg
assets/res/hzxm.png
assets/res/ic_clear_noob.png
assets/res/ic_clear_pro.png
assets/res/ic_launcher.png
assets/res/ic_warn_noob.png
assets/res/ic_warn_pro.png
assets/res/icon_150x150.png
assets/res/icon_50x50.png
assets/res/icon_iapp.png
assets/res/iconbig.png
assets/res/image_1.png
assets/res/img/1.jpg
assets/res/img/15945390768500.png
assets/res/img/1676694028585.jpg
assets/res/img/2.jpg
assets/res/img/202a7f656eb.png
assets/res/img/2cddfa4d8ab.png
assets/res/img/3.jpg
assets/res/img/41cbb2a2e2a39557.jpg
assets/res/img/46e07f02102.png
assets/res/img/64393849d6ac77a0.png
assets/res/img/6c73e1a48fb.png
assets/res/img/7c860e810367ca27.jpg
assets/res/img/7d99236a458.png
assets/res/img/8.png
assets/res/img/8628432030e.png
assets/res/img/BCC.png
assets/res/img/IMG_20230218_002732.jpg
assets/res/img/IMG_20230318_173846.jpg
assets/res/img/Screenshot_20200518_184817 (1).png
assets/res/img/Screenshot_20200518_184817.png
assets/res/img/Screenshot_20200519_081140.png
assets/res/img/abdb09c7108.png
assets/res/img/b81760caa665683a.jpg
assets/res/img/baoxue.png
assets/res/img/chevron left613.png
assets/res/img/cs_bg_10.png
assets/res/img/dh/1.png
assets/res/img/dh/11.png
assets/res/img/dh/2.png
assets/res/img/dh/22.png
assets/res/img/dh/3.png
assets/res/img/dh/33.png
assets/res/img/dh/4.png
assets/res/img/dh/44.png
assets/res/img/dh/5.png
assets/res/img/dh/55.png
assets/res/img/diannao.png
assets/res/img/faxian1.png
assets/res/img/gd/1.png
assets/res/img/gd/2.png
assets/res/img/gd/3.png
assets/res/img/gd/4.png
assets/res/img/gd/5.png
assets/res/img/gd/6.png
assets/res/img/gd/a-11Cfenzuzuzhishu.png
assets/res/img/gd/a-bianzu32beifen2.png
assets/res/img/gd/a-kejichanyefuwubeifen2.png
assets/res/img/gd/anbaoxunjianbeifen.png
assets/res/img/gd/casino.png
assets/res/img/gd/collection.png
assets/res/img/gd/cup.png
assets/res/img/gd/diannao.png
assets/res/img/gd/hot.png
assets/res/img/gd/laji.png
assets/res/img/gd/lamp.png
assets/res/img/gd/message.png
assets/res/img/gd/printer.png
assets/res/img/gd/rank.png
assets/res/img/gd/recommend.png
assets/res/img/gd/recordbook.png
assets/res/img/gd/shebeiguanlibeifen.png
assets/res/img/gd/shezhi.png
assets/res/img/gd/tubiaoshu-copy.png
assets/res/img/gd/ufo.png
assets/res/img/gd/weibaojilubeifen.png
assets/res/img/gd/xiaoxi.png
assets/res/img/gfx2.png
assets/res/img/gjhzbt.png
assets/res/img/gjtp2.png
assets/res/img/gn/adaptive.png
assets/res/img/gn/autumn.png
assets/res/img/gn/board.png
assets/res/img/gn/brain.png
assets/res/img/gn/chemistry.png
assets/res/img/gn/game.png
assets/res/img/gn/halloween.png
assets/res/img/gn/helmet.png
assets/res/img/gn/hourglass.png
assets/res/img/gn/ipad.png
assets/res/img/gn/masks.png
assets/res/img/gn/molecula.png
assets/res/img/gn/paint.png
assets/res/img/gn/qqtang.png
assets/res/img/gn/radio.png
assets/res/img/gn/recycling.png
assets/res/img/gn/wrench.png
assets/res/img/gn/zlxx.png
assets/res/img/hpjy.png
assets/res/img/ic_action_close.png
assets/res/img/icon_topic_already_hide.png
assets/res/img/img1.png
assets/res/img/laji.png
assets/res/img/longjuanfeng.png
assets/res/img/mmexport1590849934253.jpg
assets/res/img/mmexport1668166968395.jpg
assets/res/img/mmexport1668171366434.jpg
assets/res/img/nl/1/cxk.jpg
assets/res/img/nl/1/dlrb.jpg
assets/res/img/nl/1/gxt.jpg
assets/res/img/nl/1/lx.jpg
assets/res/img/nl/1/wyb.jpg
assets/res/img/nl/1/yyqx.jpg
assets/res/img/nl/1/zdy.jpg
assets/res/img/nl/1/zjl.jpg
assets/res/img/nl/1/zsy.jpg
assets/res/img/nl/2/cxk.jpg
assets/res/img/nl/2/gf.jpg
assets/res/img/nl/2/gtq.jpg
assets/res/img/nl/2/kb.jpg
assets/res/img/nl/2/lbw.jpg
assets/res/img/nl/2/lx.jpg
assets/res/img/nl/2/mht.jpg
assets/res/img/nl/2/my.jpg
assets/res/img/nl/2/wyb.jpg
assets/res/img/nl/2/wzk.jpg
assets/res/img/nl/2/yh.jpg
assets/res/img/nl/2/yyqx.jpg
assets/res/img/nl/2/zjl.jpg
assets/res/img/nl/3/bxnw.jpg
assets/res/img/nl/3/csns.jpg
assets/res/img/nl/3/ctm.jpg
assets/res/img/nl/3/cyrm.jpg
assets/res/img/nl/3/dlrb.jpg
assets/res/img/nl/3/gxt.jpg
assets/res/img/nl/3/hmm.jpg
assets/res/img/nl/3/jlgz.jpg
assets/res/img/nl/3/kady.jpg
assets/res/img/nl/3/mhnl.jpg
assets/res/img/nl/3/mtdm.jpg
assets/res/img/nl/3/nxnx.jpg
assets/res/img/nl/3/qjka.jpg
assets/res/img/nl/3/smsn.jpg
assets/res/img/nl/3/twlx.jpg
assets/res/img/nl/3/tyrw.jpg
assets/res/img/nl/3/wpka.jpg
assets/res/img/nl/3/zdj.jpg
assets/res/img/nl/3/zdy.jpg
assets/res/img/nl/3/zsy.jpg
assets/res/img/nl/4/afdln.jpg
assets/res/img/nl/4/cbg.jpg
assets/res/img/nl/4/cbg2.jpg
assets/res/img/nl/4/cmhn.jpg
assets/res/img/nl/4/emgt.jpg
assets/res/img/nl/4/eml.jpg
assets/res/img/nl/4/gwxn.jpg
assets/res/img/nl/4/jzem.jpg
assets/res/img/nl/4/lsgw.jpg
assets/res/img/nl/4/lshz.jpg
assets/res/img/nl/4/nmbl.jpg
assets/res/img/nl/4/nyrl.jpg
assets/res/img/nl/4/sbxl.jpg
assets/res/img/nl/4/shdc.jpg
assets/res/img/nl/4/shjl.jpg
assets/res/img/nl/4/xcl.jpg
assets/res/img/nl/4/xcl2.jpg
assets/res/img/nl/4/xcxslj.jpg
assets/res/img/pubg.png
assets/res/img/qingtian.png
assets/res/img/recordbook.png
assets/res/img/redu.png
assets/res/img/rwts.jpg
assets/res/img/shandian1.png
assets/res/img/shipin.png
assets/res/img/telegram.png
assets/res/img/wd/faxian.png
assets/res/img/wd/huore.png
assets/res/img/wd/jiaoyou.png
assets/res/img/wd/luxiang.png
assets/res/img/wd/xiaoxi.png
assets/res/img/xia.png
assets/res/img/you.png
assets/res/img/yun.png
assets/res/img/zdy/ic_action_copy.png
assets/res/img/zdy/ic_action_name.png
assets/res/img/zdy/ic_action_paste.png
assets/res/img/zdy/ic_action_refresh.png
assets/res/img/zdy/ic_action_save.png
assets/res/img/卡密库.png
assets/res/img/投诉.png
assets/res/jc.png
assets/res/jiw.png
assets/res/jsq.html
assets/res/jsq.png
assets/res/kj_2048.png
assets/res/kj_cha.png
assets/res/kj_mh.png
assets/res/kj_zhibo.png
assets/res/kms.gif
assets/res/kuangjia.png
assets/res/m8m.png
assets/res/magisk.png
assets/res/met.png
assets/res/mh4.jpg
assets/res/miui.png
assets/res/miyuanlingzhu.png
assets/res/nbpl.wav
assets/res/nh.png
assets/res/nz.png
assets/res/o.mp3
assets/res/ouo.png
assets/res/pddegao.jpg
assets/res/pink266.png
assets/res/pink_background.png
assets/res/pinktchead.png
assets/res/port.png
assets/res/qav_gaudio_join.mp3
assets/res/qzhad.png
assets/res/r.mp3
assets/res/rom.png
assets/res/ruanzhu.jpg
assets/res/sdt.png
assets/res/setu.png
assets/res/shut.png
assets/res/start.mp3
assets/res/startgame.png
assets/res/stbg.jpg
assets/res/suo.png
assets/res/sy.png
assets/res/test02.png
assets/res/time.png
assets/res/tq.png
assets/res/unload.png
assets/res/usetxt.png
assets/res/video.mp4
assets/res/vip.png
assets/res/ydfm.png
assets/res/yyzz.jpg
assets/res/z.mp3
assets/res/zd.png
assets/res/zg.png
assets/res/zx.png
assets/sLudMuHmcX
assets/setup_sdk_share_author.png
assets/setup_sdk_share_enter.png
assets/setup_sdk_share_group.png
bsh/commands/addClassPath.bsh
bsh/commands/bg.bsh
bsh/commands/bind.bsh
bsh/commands/browseClass.bsh
bsh/commands/cat.bsh
bsh/commands/cd.bsh
bsh/commands/classBrowser.bsh
bsh/commands/clear.bsh
bsh/commands/cp.bsh
bsh/commands/debug.bsh
bsh/commands/desktop.bsh
bsh/commands/dirname.bsh
bsh/commands/editor.bsh
bsh/commands/error.bsh
bsh/commands/eval.bsh
bsh/commands/exec.bsh
bsh/commands/exit.bsh
bsh/commands/extend.bsh
bsh/commands/fontMenu.bsh
bsh/commands/frame.bsh
bsh/commands/getBshPrompt.bsh
bsh/commands/getClass.bsh
bsh/commands/getClassPath.bsh
bsh/commands/getResource.bsh
bsh/commands/getSourceFileInfo.bsh
bsh/commands/importCommands.bsh
bsh/commands/importObject.bsh
bsh/commands/javap.bsh
bsh/commands/load.bsh
bsh/commands/makeWorkspace.bsh
bsh/commands/mv.bsh
bsh/commands/object.bsh
bsh/commands/pathToFile.bsh
bsh/commands/print.bsh
bsh/commands/printBanner.bsh
bsh/commands/pwd.bsh
bsh/commands/reloadClasses.bsh
bsh/commands/rm.bsh
bsh/commands/run.bsh
bsh/commands/save.bsh
bsh/commands/server.bsh
bsh/commands/setAccessibility.bsh
bsh/commands/setClassPath.bsh
bsh/commands/setFont.bsh
bsh/commands/setNameCompletion.bsh
bsh/commands/setNameSpace.bsh
bsh/commands/setStrictJava.bsh
bsh/commands/show.bsh
bsh/commands/source.bsh
bsh/commands/sourceRelative.bsh
bsh/commands/thinBorder.bsh
bsh/commands/unset.bsh
bsh/commands/which.bsh
bsh/commands/workspaceEditor.bsh
bsh/servlet/error.template
bsh/servlet/getVersion.bsh
bsh/servlet/page.template
bsh/servlet/result.template
bsh/util/lib/awtconsole.html
bsh/util/lib/eye.jpg
bsh/util/lib/icon.gif
bsh/util/lib/jconsole.html
bsh/util/lib/remote.html
bsh/util/lib/script.gif
bsh/util/lib/small_bean_shell.gif
bsh/util/lib/splash.gif
bsh/util/lib/workspace.gif
classes.dex
classes2.dex
lib/arm64-v8a/libluajava.so
lib/arm64-v8a/libpl_droidsonroids_gif.so
lib/arm64-v8a/libygsiyu.so
lib/armeabi-v7a/libluajava.so
lib/armeabi-v7a/libpl_droidsonroids_gif.so
lib/armeabi-v7a/libygsiyu.so
lib/armeabi/libluajava.so
lib/armeabi/libpl_droidsonroids_gif.so
lib/armeabi/libygsiyu.so
lib/classes
lib/oat/arm/classes.odex
lib/oat/arm/classes.vdex
lib/x86/libluajava.so
lib/x86/libpl_droidsonroids_gif.so
lib/x86/libygsiyu.so
lib/x86_64/libluajava.so
lib/x86_64/libpl_droidsonroids_gif.so
lib/x86_64/libygsiyu.so
r/0
r/0.xml
r/00
r/00.xml
r/01
r/01.xml
r/02
r/02.xml
r/03
r/03.xml
r/04
r/04.xml
r/05
r/05.xml
r/06
r/06.xml
r/07
r/07.xml
r/08
r/08.xml
r/09
r/09.xml
r/0A
r/0A.xml
r/0B
r/0B.xml
r/0C
r/0C.xml
r/0D
r/0D.xml
r/0E
r/0E.xml
r/0F
r/0F.xml
r/0G
r/0G.xml
r/0H
r/0H.xml
r/0I
r/0I.xml
r/0J
r/0J.xml
r/0K
r/0K.xml
r/0L
r/0L.xml
r/0M
r/0M.xml
r/0N
r/0N.xml
r/0O
r/0O.xml
r/0P
r/0P.xml
r/0Q
r/0Q.xml
r/0R
r/0R.xml
r/0S
r/0S.xml
r/0T
r/0T.xml
r/0U
r/0U.xml
r/0V
r/0V.xml
r/0W
r/0W.xml
r/0X
r/0X.xml
r/0Y
r/0Y.xml
r/0Z
r/0Z.xml
r/0a
r/0a.xml
r/0b
r/0b.xml
r/0c
r/0c.xml
r/0d
r/0d.xml
r/0e
r/0e.xml
r/0f
r/0f.xml
r/0g
r/0g.xml
r/0h
r/0h.xml
r/0i
r/0i.xml
r/0j
r/0j.xml
r/0k
r/0k.xml
r/0l
r/0l.xml
r/0m
r/0m.xml
r/0n
r/0n.xml
r/0o
r/0o.xml
r/0p
r/0p.xml
r/0q
r/0q.xml
r/0r
r/0r.xml
r/0s
r/0s.xml
r/0t
r/0t.xml
r/0u
r/0u.xml
r/0v
r/0v.xml
r/0w
r/0w.xml
r/0x
r/0x.xml
r/0y
r/0y.xml
r/0z
r/0z.xml
r/1
r/1.xml
r/10
r/10.xml
r/11
r/11.xml
r/12
r/12.xml
r/13
r/13.xml
r/14
r/14.xml
r/15
r/15.xml
r/16
r/16.xml
r/17
r/17.xml
r/18
r/18.xml
r/19
r/19.xml
r/1A
r/1A.xml
r/1B
r/1B.xml
r/1C
r/1C.xml
r/1D
r/1D.xml
r/1E
r/1E.xml
r/1F
r/1F.xml
r/1G
r/1G.xml
r/1H
r/1H.xml
r/1I
r/1I.xml
r/1J
r/1J.xml
r/1K
r/1K.xml
r/1L
r/1L.xml
r/1M
r/1M.xml
r/1N
r/1N.xml
r/1O
r/1O.xml
r/1P
r/1P.xml
r/1Q
r/1Q.xml
r/1R
r/1R.xml
r/1S
r/1S.xml
r/1T
r/1T.xml
r/1U
r/1U.xml
r/1V
r/1V.xml
r/1W
r/1W.xml
r/1X
r/1X.xml
r/1Y
r/1Y.xml
r/1Z
r/1Z.xml
r/1a
r/1a.xml
r/1b
r/1b.xml
r/1c
r/1c.xml
r/1d
r/1d.xml
r/1e
r/1e.xml
r/1f
r/1f.xml
r/1g
r/1g.xml
r/1h
r/1h.xml
r/1i
r/1i.xml
r/1j
r/1j.xml
r/1k
r/1k.xml
r/1l
r/1l.xml
r/1m
r/1m.xml
r/1n
r/1n.xml
r/1o
r/1o.xml
r/1p
r/1p.xml
r/1q
r/1q.xml
r/1r
r/1r.xml
r/1s
r/1s.xml
r/1t
r/1t.xml
r/1u
r/1u.xml
r/1v
r/1v.xml
r/1w
r/1w.xml
r/1x
r/1x.xml
r/1y
r/1y.xml
r/1z
r/1z.xml
r/2
r/2.xml
r/20
r/20.xml
r/21
r/21.xml
r/22
r/22.xml
r/23
r/23.xml
r/24
r/24.xml
r/25
r/25.xml
r/26
r/26.xml
r/27
r/27.xml
r/28
r/28.xml
r/29
r/29.xml
r/2A
r/2A.xml
r/2B
r/2B.xml
r/2C
r/2C.xml
r/2D
r/2D.xml
r/2E
r/2E.xml
r/2F
r/2F.xml
r/2G
r/2G.xml
r/2H
r/2H.xml
r/2I
r/2I.xml
r/2J
r/2J.xml
r/2K
r/2K.xml
r/2L
r/2L.xml
r/2M
r/2M.xml
r/2N
r/2N.xml
r/2O
r/2O.xml
r/2P
r/2P.xml
r/2Q
r/2Q.xml
r/2R
r/2R.xml
r/2S
r/2S.xml
r/2T
r/2T.xml
r/2U
r/2U.xml
r/2V
r/2V.xml
r/2W
r/2W.xml
r/2X
r/2X.xml
r/2Y
r/2Y.xml
r/2Z
r/2Z.xml
r/2a
r/2a.xml
r/2b
r/2b.xml
r/2c
r/2c.xml
r/2d
r/2d.xml
r/2e
r/2e.xml
r/2f
r/2f.xml
r/2g
r/2g.xml
r/2h
r/2h.xml
r/2i
r/2i.xml
r/2j
r/2j.xml
r/2k
r/2k.xml
r/2l
r/2l.xml
r/2m
r/2m.xml
r/2n
r/2n.xml
r/2o
r/2o.xml
r/2p
r/2p.xml
r/2q
r/2q.xml
r/2r
r/2r.xml
r/2s
r/2s.xml
r/2t
r/2t.xml
r/2u
r/2u.xml
r/2v
r/2v.xml
r/2w
r/2w.xml
r/2x
r/2x.xml
r/2y
r/2y.xml
r/2z
r/2z.xml
r/3
r/3.xml
r/30
r/30.xml
r/31
r/31.xml
r/32
r/32.xml
r/33
r/33.xml
r/34
r/34.xml
r/35
r/35.xml
r/36
r/36.xml
r/37
r/37.xml
r/38
r/38.xml
r/39
r/39.xml
r/3A
r/3A.xml
r/3B
r/3B.xml
r/3C
r/3C.xml
r/3D
r/3D.xml
r/3E
r/3E.xml
r/3F
r/3F.xml
r/3G
r/3G.xml
r/3H
r/3H.xml
r/3I
r/3I.xml
r/3J
r/3J.xml
r/3K
r/3K.xml
r/3L
r/3L.xml
r/3M
r/3M.xml
r/3N
r/3N.xml
r/3O
r/3O.xml
r/3P
r/3P.xml
r/3Q
r/3Q.xml
r/3R
r/3R.xml
r/3S
r/3S.xml
r/3T
r/3T.xml
r/3U
r/3U.xml
r/3V
r/3V.xml
r/3W
r/3W.xml
r/3X
r/3X.xml
r/3Y
r/3Y.xml
r/3Z
r/3Z.xml
r/3a
r/3a.xml
r/3b
r/3b.xml
r/3c
r/3c.xml
r/3d
r/3d.xml
r/3e
r/3e.xml
r/3f
r/3f.xml
r/3g
r/3g.xml
r/3h
r/3h.xml
r/3i
r/3i.xml
r/3j
r/3j.xml
r/3k
r/3k.xml
r/3l
r/3l.xml
r/3m
r/3m.xml
r/3n
r/3n.xml
r/3o
r/3o.xml
r/3p
r/3p.xml
r/3q
r/3q.xml
r/3r
r/3r.xml
r/3s
r/3s.xml
r/3t
r/3t.xml
r/3u
r/3u.xml
r/3v
r/3v.xml
r/3w
r/3w.xml
r/3x
r/3x.xml
r/3y
r/3y.xml
r/3z
r/3z.xml
r/4
r/4.xml
r/40
r/40.xml
r/41
r/41.xml
r/42
r/42.xml
r/43
r/43.xml
r/44
r/44.xml
r/45
r/45.xml
r/46
r/46.xml
r/47
r/47.xml
r/48
r/48.xml
r/49
r/49.xml
r/4A
r/4A.xml
r/4B
r/4B.xml
r/4C
r/4C.xml
r/4D
r/4D.xml
r/4E
r/4E.xml
r/4F
r/4F.xml
r/4G
r/4G.xml
r/4H
r/4H.xml
r/4I
r/4I.xml
r/4J
r/4J.xml
r/4K
r/4K.xml
r/4L
r/4L.xml
r/4M
r/4M.xml
r/4N
r/4N.xml
r/4O
r/4O.xml
r/4P
r/4P.xml
r/4Q
r/4R
r/4S
r/4T
r/4U
r/4V
r/4W
r/4X
r/4Y
r/4Z
r/4a
r/4b
r/4c
r/4d
r/4e
r/4f
r/4g
r/4h
r/4i
r/4j
r/4k
r/4l
r/4m
r/4n
r/4o
r/4p
r/4q
r/4r
r/4s
r/4t
r/4u
r/4v
r/4w
r/4x
r/4y
r/4z
r/5
r/5.xml
r/50
r/51
r/52
r/53
r/54
r/55
r/56
r/57
r/58
r/59
r/5A
r/5B
r/5C
r/5D
r/5E
r/5F
r/5G
r/5H
r/5I
r/5J
r/5K
r/5L
r/5M
r/5N
r/5O
r/5P
r/5Q
r/5R
r/5S
r/5T
r/5U
r/5V
r/5W
r/5X
r/6
r/6.xml
r/7
r/7.xml
r/8
r/8.xml
r/9
r/9.xml
r/A
r/A.xml
r/B
r/B.xml
r/C
r/C.xml
r/D
r/D.xml
r/E
r/E.xml
r/F
r/F.xml
r/G
r/G.xml
r/H
r/H.xml
r/I
r/I.xml
r/J
r/J.xml
r/K
r/K.xml
r/L
r/L.xml
r/M
r/M.xml
r/N
r/N.xml
r/O
r/O.xml
r/P
r/P.xml
r/Q
r/Q.xml
r/R
r/R.xml
r/S
r/S.xml
r/T
r/T.xml
r/U
r/U.xml
r/V
r/V.xml
r/W
r/W.xml
r/X
r/X.xml
r/Y
r/Y.xml
r/Z
r/Z.xml
r/a
r/a.xml
r/b
r/b.xml
r/c
r/c.xml
r/d
r/d.xml
r/e
r/e.xml
r/f
r/f.xml
r/g
r/g.xml
r/h
r/h.xml
r/i
r/i.xml
r/j
r/j.xml
r/k
r/k.xml
r/l
r/l.xml
r/m
r/m.xml
r/n
r/n.xml
r/o
r/o.xml
r/p
r/p.xml
r/q
r/q.xml
r/r
r/r.xml
r/s
r/s.xml
r/t
r/t.xml
r/u
r/u.xml
r/v
r/v.xml
r/w
r/w.xml
r/x
r/x.xml
r/y
r/y.xml
r/z
r/z.xml
res/classes
res/img/aarrow.png
res/img/airdrop.png
res/img/akm.png
res/img/ammo12uage.png
res/img/ammo300magnum.png
res/img/ammo556.png
res/img/ammo762.png
res/img/ammo9mm.png
res/img/ammocp.png
res/img/ams.png
res/img/aquarail.png
res/img/aug.png
res/img/awm.png
res/img/bag1.png
res/img/bag2.png
res/img/bag3.png
res/img/bandage.png
res/img/big_boat.png
res/img/bizon.png
res/img/brdm.png
res/img/buggy.png
res/img/canted.png
res/img/color.png
res/img/color_p.png
res/img/crate.png
res/img/crossbow.png
res/img/crow.png
res/img/dacia.png
res/img/dbs.png
res/img/dp.png
res/img/energy_drink.png
res/img/famas.png
res/img/fflaremmo.png
res/img/first_aid.png
res/img/flare_gun.png
res/img/frag_nad.png
res/img/g36c.png
res/img/gas_can.png
res/img/global.png
res/img/groza.png
res/img/helmet1.png
res/img/helmet2.png
res/img/helmet3.png
res/img/hollow.png
res/img/ic_boot.png
res/img/ic_clear_noob.png
res/img/ic_clear_pro.png
res/img/ic_warn_noob.png
res/img/ic_warn_pro.png
res/img/ic_warning.png
res/img/iconbig.png
res/img/injection.png
res/img/kar98k.png
res/img/korea.png
res/img/lada_niva.png
res/img/m1014.png
res/img/m164a.png
res/img/m24.png
res/img/m249.png
res/img/m416.png
res/img/m762.png
res/img/machete.png
res/img/medkit.png
res/img/mg3.png
res/img/mini14.png
res/img/mini_bus.png
res/img/mirado.png
res/img/mirado_open.png
res/img/mk12.png
res/img/mk14.png
res/img/mk47.png
res/img/molotov.png
res/img/mosin.png
res/img/motocycle.png
res/img/motocycle_cart.png
res/img/motorglider.png
res/img/mp5k.png
res/img/p90.png
res/img/pain_killer.png
res/img/pan.png
res/img/pickup.png
res/img/pistol.png
res/img/plane.png
res/img/qbu.png
res/img/qbz.png
res/img/reddot.png
res/img/rony.png
res/img/s12k.png
res/img/s1897.png
res/img/s2x.png
res/img/s3x.png
res/img/s4x.png
res/img/s686.png
res/img/s6x.png
res/img/s8x.png
res/img/sawed.png
res/img/scar_l.png
res/img/scooter.png
res/img/sickle.png
res/img/sks.png
res/img/slr.png
res/img/smoke.png
res/img/snow_mobile.png
res/img/snowbike.png
res/img/stun.png
res/img/tommy.png
res/img/tuktuk.png
res/img/uaz.png
res/img/ump.png
res/img/utv.png
res/img/uzi.png
res/img/vector.png
res/img/vest1.png
res/img/vest2.png
res/img/vest3.png
res/img/vietnam.png
res/img/vss.png
res/img/win94.png
res/layout/xamarin_activity.xml
res/layout/xamarin_auth.xml
res/layout/xamarin_auth_ios.xml
res/layout/xamarin_blur_group.xml
res/layout/xamarin_group.xml
res/layout/xamarin_group_style_right.xml
res/layout/xamarin_login.xml
res/layout/xamarin_login_activity.xml
res/layout/xamarin_login_login.xml
res/layout/xamarin_login_pay.xml
res/layout/xamarin_login_reg.xml
res/layout/xamarin_login_unbind.xml
res/mipmap-hdpi-v4/i.png
resources.arsc
src/2e15f58d32a5ff652706ef41ec85a763
src/3676d55f84497cbeadfc614c1b1b62fc
污点分析
当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……| 规则名称 | 描述信息 | 操作 |
|---|---|---|
| 病毒分析 | 使用安卓恶意软件常用的API进行污点分析 | 开始分析 |
| 漏洞挖掘 | 漏洞挖掘场景下的污点分析 | 开始分析 |
| 隐私合规 | 隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 | 开始分析 |
| 密码分析 | 分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等 | 开始分析 |
| Callback | 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员 | 开始分析 |