温馨提示:本平台仅供研究软件风险、安全评估,禁止用于非法用途。由于展示的数据过于全面,请耐心等待加载完成。如有疑问或建议, 可加入我们的微信群讨论

APP评分

病毒检测 无法判定

安全评分

文件信息

文件名称 yjzzzd.xheiqd.ndubnbjpox.apk
文件大小 93.82MB
MD5 b311d08b6dc28e3abfda98be45dfcc99
SHA1 a9ea2f18dc2c2884ab451cfe48356cac00dab1e7
SHA256 034ac76fb75988f9cfb40f9e7803bfb69fbc4206215fa10f0079f8a755e82874

应用信息

应用名称 GET
包名 yjzzzd.xheiqd.ndubnbjpox
主活动 org.telegram.ui.LaunchActivity
目标SDK 31     最小SDK 22
版本号 9.6.6     子版本号 60249
加固信息 未加壳

组件导出信息

反编译代码

Manifest文件 查看
APK文件 下载
Java源代码 查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: True
v4 签名: False
主题: C=beijing, ST=beijing, L=beijing, O=yr1719463667399, OU=ye1719463667399, CN=avyx
签名算法: rsassa_pkcs1v15
有效期自: 2024-06-27 04:47:49+00:00
有效期至: 2074-06-15 04:47:49+00:00
发行人: C=beijing, ST=beijing, L=beijing, O=yr1719463667399, OU=ye1719463667399, CN=avyx
序列号: 0x5368ecf4
哈希算法: sha512
证书MD5: 1cf0e17659086f8637d37278eda32e60
证书SHA1: 308b47dad0334dd5aa8ca3034698b8311e85b5e5
证书SHA256: 53b72379e44545a7422f585baa6badccd07e272e4af26ff9bc51b313cc9e11b4
证书SHA512: 06822fcfe208adc1b2da2d3bc2371ddfd2d13f8aeeaf8a912ed7ad95b765b14fca7f8b50c4e01498a06e454e41404793d0d67b4e2ec2bc8341beaf185bf93097
公钥算法: rsa
密钥长度: 4096
指纹: 0f597f420ffbb20d1f844f21caf87ddd1d58e8e39d2663fcb85e46d5ad8a7a4b
找到 1 个唯一证书

应用程序权限

权限名称 安全等级 权限内容 权限描述 关联代码
com.google.android.c2dm.permission.RECEIVE 普通 接收推送通知 允许应用程序接收来自云的推送通知。
yjzzzd.xheiqd.ndubnbjpox.permission.MAPS_RECEIVE 未知 未知权限 来自 android 引用的未知权限。
com.google.android.providers.gsf.permission.READ_GSERVICES 未知 未知权限 来自 android 引用的未知权限。
android.permission.ACCESS_COARSE_LOCATION 危险 获取粗略位置 通过WiFi或移动基站的方式获取用户错略的经纬度信息,定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
android.permission.ACCESS_FINE_LOCATION 危险 获取精确位置 通过GPS芯片接收卫星的定位信息,定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
android.permission.CALL_PHONE 危险 直接拨打电话 允许应用程序直接拨打电话。恶意程序会在用户未知的情况下拨打电话造成损失。但不被允许拨打紧急电话。
android.permission.FOREGROUND_SERVICE 普通 创建前台Service Android 9.0以上允许常规应用程序使用 Service.startForeground,用于podcast播放(推送悬浮播放,锁屏播放)
android.permission.READ_CALL_LOG 危险 读取通话记录 允许应用程序读取用户的通话记录
android.permission.READ_CLIPBOARD 未知 未知权限 来自 android 引用的未知权限。
android.permission.BLUETOOTH_CONNECT 危险 新蓝牙运行时权限 Android 12 系统引入了新的运行时权限,需要能够连接到配对的蓝牙设备。
android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
android.permission.RECORD_AUDIO 危险 获取录音权限 允许应用程序获取录音权限。
android.permission.MODIFY_AUDIO_SETTINGS 危险 允许应用修改全局音频设置 允许应用程序修改全局音频设置,如音量。多用于消息语音功能。
android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
android.permission.WAKE_LOCK 危险 防止手机休眠 允许应用程序防止手机休眠,在手机屏幕关闭后后台进程仍然运行。
android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
android.permission.GET_ACCOUNTS 普通 探索已知账号 允许应用程序访问帐户服务中的帐户列表。
android.permission.READ_CONTACTS 危险 读取联系人信息 允允许应用程序读取您手机上存储的所有联系人(地址)数据。恶意应用程序可借此将您的数据发送给其他人。
android.permission.WRITE_CONTACTS 危险 写入联系人信息 允许应用程序修改您手机上存储的联系人(地址)数据。恶意应用程序可借此清除或修改您的联系人数据。
android.permission.MANAGE_ACCOUNTS 危险 管理帐户列表 允许应用程序执行添加、删除帐户及删除其密码之类的操作。
android.permission.READ_PROFILE 危险 读取用户资料 允许应用程序读取用户个人信息。
android.permission.WRITE_SYNC_SETTINGS 危险 修改同步设置 允许应用程序修改同步设置。
android.permission.READ_SYNC_SETTINGS 普通 读取同步设置 允许应用程序读取同步设置,例如是否为 联系人 启用同步。
android.permission.AUTHENTICATE_ACCOUNTS 危险 作为帐户身份验证程序 允许应用程序使用 AccountManager 的帐户身份验证程序功能,包括创建帐户以及获取和设置其密码。
android.permission.VIBRATE 普通 控制振动器 允许应用程序控制振动器,用于消息通知振动功能。
android.permission.SYSTEM_ALERT_WINDOW 危险 弹窗 允许应用程序弹窗。 恶意程序可以接管手机的整个屏幕。
cn/jzvd/Jzvd.java
cn/jzvd/JzvdStd.java
com/hbisoft/hbrecorder/HBRecorderCodecInfo.java
com/hjq/window/EasyWindow.java
com/lxj/xpopup/core/FullScreenDialog.java
com/lxj/xpopup/util/XPopupUtils.java
org/telegram/messenger/AndroidUtilities.java
org/telegram/messenger/camera/CameraSession.java
org/telegram/messenger/voip/VideoCapturerDevice.java
org/telegram/ui/ActionBar/ActionBarPopupWindow.java
org/telegram/ui/ActionBar/AlertDialog.java
org/telegram/ui/ActionBar/BottomSheet.java
org/telegram/ui/ActionBar/FloatingActionMode.java
org/telegram/ui/ArticleViewer.java
org/telegram/ui/AvatarPreviewer.java
org/telegram/ui/Components/BotWebViewSheet.java
org/telegram/ui/Components/Bulletin.java
org/telegram/ui/Components/ChatAttachAlert.java
org/telegram/ui/Components/EmbedBottomSheet.java
org/telegram/ui/Components/GroupCallPip.java
org/telegram/ui/Components/OverlayActionBarLayoutDialog.java
org/telegram/ui/Components/PipRoundVideoView.java
org/telegram/ui/Components/PipVideoOverlay.java
org/telegram/ui/Components/Reactions/CustomEmojiReactionsWindow.java
org/telegram/ui/Components/Reactions/ReactionsEffectOverlay.java
org/telegram/ui/Components/SenderSelectPopup.java
org/telegram/ui/Components/SharedMediaLayout.java
org/telegram/ui/Components/ThemeEditorView.java
org/telegram/ui/Components/WallpaperParallaxEffect.java
org/telegram/ui/Components/voip/RTMPStreamPipOverlay.java
org/telegram/ui/Components/voip/VoIPPiPView.java
org/telegram/ui/Components/voip/VoIPTextureView.java
org/telegram/ui/Components/voip/VoIPWindowView.java
org/telegram/ui/ContentPreviewViewer.java
org/telegram/ui/Delegates/MemberRequestsDelegate.java
org/telegram/ui/IdenticonActivity.java
org/telegram/ui/JMTDiscoverWebActivity.java
org/telegram/ui/PhotoAlbumPickerActivity.java
org/telegram/ui/PhotoViewer.java
org/telegram/ui/SecretMediaViewer.java
org/telegram/ui/SelectAnimatedEmojiDialog.java
org/telegram/ui/VoIPFragment.java
org/telegram/ui/WallpapersListActivity.java
android.permission.READ_PHONE_STATE 危险 读取手机状态和标识 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。
android.permission.RECEIVE_BOOT_COMPLETED 普通 开机自启 允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间,而且如果应用程序一直运行,会降低手机的整体速度。
cn/jzvd/JzvdStd.java
com/hbisoft/hbrecorder/NotificationReceiver.java
com/tencent/qimei/g/b.java
com/tencent/qmsp/oaid2/v.java
com/tencent/qmsp/oaid2/x.java
com/tencent/qmsp/sdk/g/e/a.java
com/tencent/qmsp/sdk/g/e/c.java
io/nlopez/smartlocation/activity/providers/ActivityGooglePlayServicesProvider.java
io/nlopez/smartlocation/geocoding/providers/AndroidGeocodingProvider.java
io/nlopez/smartlocation/geofencing/providers/GeofencingGooglePlayServicesProvider.java
org/telegram/messenger/AppStartReceiver.java
org/telegram/messenger/ApplicationLoader.java
org/telegram/messenger/AutoMessageHeardReceiver.java
org/telegram/messenger/AutoMessageReplyReceiver.java
org/telegram/messenger/BackupAgent.java
org/telegram/messenger/CallReceiver.java
org/telegram/messenger/CustomTabsCopyReceiver.java
org/telegram/messenger/DownloadController.java
org/telegram/messenger/ImageLoader.java
org/telegram/messenger/LocaleController.java
org/telegram/messenger/MusicPlayerReceiver.java
org/telegram/messenger/MusicPlayerService.java
org/telegram/messenger/NotificationCallbackReceiver.java
org/telegram/messenger/NotificationDismissReceiver.java
org/telegram/messenger/NotificationsDisabledReceiver.java
org/telegram/messenger/PopupReplyReceiver.java
org/telegram/messenger/RefererReceiver.java
org/telegram/messenger/ScreenReceiver.java
org/telegram/messenger/ShareBroadcastReceiver.java
org/telegram/messenger/SmsReceiver.java
org/telegram/messenger/StopLiveLocationReceiver.java
org/telegram/messenger/WearReplyReceiver.java
org/telegram/messenger/voip/VoIPActionsReceiver.java
org/telegram/messenger/voip/VoIPMediaButtonReceiver.java
org/telegram/messenger/voip/VoIPService.java
org/telegram/ui/Components/ChatAttachAlertDocumentLayout.java
org/webrtc/NetworkMonitorAutoDetect.java
android.permission.USE_FINGERPRINT 普通 允许使用指纹 此常量在 API 级别 28 中已弃用。应用程序应改为请求USE_BIOMETRIC
android.permission.USE_BIOMETRIC 普通 使用生物识别 允许应用使用设备支持的生物识别方式。
android.permission.INSTALL_SHORTCUT 普通 允许在启动器中安装快捷方式 允许应用程序在Launcher中安装快捷方。
com.android.launcher.permission.INSTALL_SHORTCUT 签名 创建快捷方式 这个权限是允许应用程序创建桌面快捷方式。
com.android.launcher.permission.UNINSTALL_SHORTCUT 签名 删除快捷方式 这个权限是允许应用程序删除桌面快捷方式。
android.permission.CAMERA 危险 拍照和录制视频 允许应用程序拍摄照片和视频,且允许应用程序收集相机在任何时候拍到的图像。
android.permission.BLUETOOTH 危险 创建蓝牙连接 允许应用程序查看或创建蓝牙连接。
android.permission.MANAGE_OWN_CALLS 普通 使呼叫应用程序能够管理自己的呼叫 允许通过自我管理的ConnectionService API管理自己的调用的调用应用程序。
android.permission.USE_FULL_SCREEN_INTENT 普通 全屏通知 Android 10以后的全屏 Intent 的通知。
android.permission.REQUEST_INSTALL_PACKAGES 危险 允许安装应用程序 Android8.0 以上系统允许安装未知来源应用程序权限。
android.permission.READ_PHONE_NUMBERS 危险 允许读取设备的电话号码 允许读取设备的电话号码。这是READ PHONE STATE授予的功能的一个子集,但对即时应用程序公开。
com.sec.android.provider.badge.permission.READ 普通 在应用程序上显示通知计数 在三星手机的应用程序启动图标上显示通知计数或徽章。
com.sec.android.provider.badge.permission.WRITE 普通 在应用程序上显示通知计数 在三星手机的应用程序启动图标上显示通知计数或徽章。
com.htc.launcher.permission.READ_SETTINGS 普通 在应用程序上显示通知计数 在HTC手机的应用程序启动图标上显示通知计数或徽章。
com.htc.launcher.permission.UPDATE_SHORTCUT 普通 在应用程序上显示通知计数 在HTC手机的应用程序启动图标上显示通知计数或徽章。
com.sonyericsson.home.permission.BROADCAST_BADGE 普通 在应用程序上显示通知计数 在索尼手机的应用程序启动图标上显示通知计数或徽章。
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE 普通 在应用程序上显示通知计数 在索尼手机的应用程序启动图标上显示通知计数或徽章。
com.anddoes.launcher.permission.UPDATE_COUNT 普通 在应用程序上显示通知计数 在apex的应用程序启动图标上显示通知计数或徽章。
com.majeur.launcher.permission.UPDATE_BADGE 普通 在应用程序上显示通知计数 在solid的应用程序启动图标上显示通知计数或徽章。
com.huawei.android.launcher.permission.CHANGE_BADGE 普通 在应用程序上显示通知计数 在华为手机的应用程序启动图标上显示通知计数或徽章。
com.huawei.android.launcher.permission.READ_SETTINGS 普通 在应用程序上显示通知计数 在华为手机的应用程序启动图标上显示通知计数或徽章。
com.huawei.android.launcher.permission.WRITE_SETTINGS 普通 在应用程序上显示通知计数 在华为手机的应用程序启动图标上显示通知计数或徽章。
android.permission.READ_APP_BADGE 普通 显示应用程序通知 允许应用程序显示应用程序图标徽章。
com.oppo.launcher.permission.READ_SETTINGS 普通 在应用程序上显示通知计数 在OPPO手机的应用程序启动图标上显示通知计数或徽章。
com.oppo.launcher.permission.WRITE_SETTINGS 普通 在应用程序上显示通知计数 在OPPO手机的应用程序启动图标上显示通知计数或徽章。
me.everything.badger.permission.BADGE_COUNT_READ 未知 未知权限 来自 android 引用的未知权限。
me.everything.badger.permission.BADGE_COUNT_WRITE 未知 未知权限 来自 android 引用的未知权限。
com.android.vending.BILLING 普通 应用程序具有应用内购买 允许应用程序从 Google Play 进行应用内购买。
android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
android.permission.ACCESS_BACKGROUND_LOCATION 危险 获取后台定位权限 允许应用程序访问后台位置。如果您正在请求此权限,则还必须请求ACCESS COARSE LOCATION或ACCESS FINE LOCATION。单独请求此权限不会授予您位置访问权限。
com.google.android.gms.permission.ACTIVITY_RECOGNITION 危险 允许应用程序识别身体活动 允许应用程序识别身体活动。
yjzzzd.xheiqd.ndubnbjpox.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION 未知 未知权限 来自 android 引用的未知权限。
android.permission.WRITE_SETTINGS 危险 修改全局系统设置 允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。
com.asus.msa.SupplementaryDID.ACCESS 普通 获取厂商oaid相关权限 获取设备标识信息oaid,在华硕设备上需要用到的权限。
freemme.permission.msa 未知 未知权限 来自 android 引用的未知权限。

证书分析

高危
0
警告
1
信息
1
标题 严重程度 描述信息
已签名应用 信息 应用程序已使用代码签名证书进行签名

MANIFEST分析

高危
2
警告
35
信息
0
屏蔽
0
序号 问题 严重程度 描述信息 操作
1 应用程序可以安装在有漏洞的已更新 Android 版本上
Android 5.1-5.1.1, [minSdk=22]
信息 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
2 应用程序已启用明文网络流量
[android:usesCleartextTraffic=true]
警告 应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。
3 应用程序数据可以被备份
[android:allowBackup=true]
警告 这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。
4 Service (org.telegram.messenger.GcmPushListenerService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
5 Service (org.telegram.messenger.GoogleVoiceClientService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
6 Activity (org.telegram.messenger.GoogleVoiceClientActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
7 App 链接 assetlinks.json 文件未找到
[android:name=org.telegram.ui.LaunchActivity]
[android:host=http://telegram.me]
高危 App Link 资产验证 URL (http://telegram.me/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:301)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
8 App 链接 assetlinks.json 文件未找到
[android:name=org.telegram.ui.LaunchActivity]
[android:host=http://t.me]
高危 App Link 资产验证 URL (http://t.me/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:301)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
9 Activity-Alias (org.telegram.messenger.DefaultIcon) 未被保护。
[android:exported=true]
警告 发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
10 Activity-Alias (org.telegram.messenger.VintageIcon) 未被保护。
[android:exported=true]
警告 发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
11 Activity-Alias (org.telegram.messenger.AquaIcon) 未被保护。
[android:exported=true]
警告 发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
12 Activity-Alias (org.telegram.messenger.PremiumIcon) 未被保护。
[android:exported=true]
警告 发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
13 Activity-Alias (org.telegram.messenger.TurboIcon) 未被保护。
[android:exported=true]
警告 发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
14 Activity-Alias (org.telegram.messenger.NoxIcon) 未被保护。
[android:exported=true]
警告 发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
15 Activity-Alias (org.telegram.ui.CallsActivity) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.CALL_PHONE
[android:exported=true]
警告 发现一个 Activity-Alias被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
16 Activity (org.telegram.ui.ShareActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
17 Activity (org.telegram.ui.ExternalActionActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
18 Activity (org.telegram.ui.ChatsWidgetConfigActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
19 Activity (org.telegram.ui.ContactsWidgetConfigActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
20 Activity (org.telegram.messenger.OpenChatReceiver) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
21 Activity设置了TaskAffinity属性
(org.telegram.ui.VoIPPermissionActivity)
警告 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
22 Activity设置了TaskAffinity属性
(org.telegram.ui.VoIPFeedbackActivity)
警告 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
23 Broadcast Receiver (org.telegram.messenger.SmsReceiver) 未被保护。
[android:exported=true]
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
24 Service (org.telegram.messenger.AuthenticatorService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
25 Service (org.telegram.messenger.ContactsSyncAdapterService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
26 Service (org.telegram.messenger.BringAppForegroundService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
27 Service (org.telegram.messenger.NotificationsService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
28 Service (org.telegram.messenger.VideoEncodingService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
29 Service (org.telegram.messenger.ImportingService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
30 Service (org.telegram.messenger.LocationSharingService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
31 Service (org.telegram.messenger.MusicPlayerService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
32 Service (org.telegram.messenger.MusicBrowserService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
33 Service (org.telegram.messenger.voip.TelegramConnectionService) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.BIND_TELECOM_CONNECTION_SERVICE
[android:exported=true]
警告 发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
34 Broadcast Receiver (org.telegram.messenger.RefererReceiver) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.INSTALL_PACKAGES
[android:exported=true]
警告 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
35 Content Provider (org.telegram.messenger.voip.CallNotificationSoundProvider) 未被保护。
[android:exported=true]
警告 发现 Content Provider与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
36 Service (androidx.sharetarget.ChooserTargetServiceCompat) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.BIND_CHOOSER_TARGET_SERVICE
[android:exported=true]
警告 发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
37 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。
Permission: com.google.android.c2dm.permission.SEND
[android:exported=true]
警告 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
38 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。
Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION
[android:exported=true]
警告 发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

可浏览的ACTIVITIES

ACTIVITY INTENT
org.telegram.ui.LaunchActivity Schemes: http://, https://, jmt://, zqj0yl://, tg://,
Hosts: telegram.me, telegram.dog, t.me,
Mime Types: image/*, video/*, text/plain, */*, vnd.android.cursor.item/vnd.org.telegram.messenger.android.profile,
org.telegram.ui.ShareActivity Schemes: tgb://,

网络安全配置

序号 范围 严重级别 描述

API调用分析

API功能 源码文件
一般功能-> 加载so文件
一般功能-> 文件操作
bolts/CancellationTokenRegistration.java
bolts/CancellationTokenSource.java
cn/jzvd/JZUtils.java
com/coremedia/iso/BoxParser.java
com/coremedia/iso/IsoFile.java
com/coremedia/iso/IsoTypeReader.java
com/coremedia/iso/Utf8.java
com/coremedia/iso/boxes/Box.java
com/coremedia/iso/boxes/DataReferenceBox.java
com/coremedia/iso/boxes/SampleDescriptionBox.java
com/coremedia/iso/boxes/sampleentry/AudioSampleEntry.java
com/coremedia/iso/boxes/sampleentry/VisualSampleEntry.java
com/davemorrissey/labs/subscaleview/ImageSource.java
com/davemorrissey/labs/subscaleview/ImageViewState.java
com/davemorrissey/labs/subscaleview/decoder/SkiaImageDecoder.java
com/davemorrissey/labs/subscaleview/decoder/SkiaImageRegionDecoder.java
com/davemorrissey/labs/subscaleview/decoder/SkiaPooledImageRegionDecoder.java
com/fm/openinstall/model/AppData.java
com/github/gzuliyujiang/oaid/DeviceID.java
com/github/gzuliyujiang/oaid/impl/HuaweiImpl.java
com/hbisoft/hbrecorder/FileObserver.java
com/hbisoft/hbrecorder/HBRecorder.java
com/lxj/xpopup/interfaces/XPopupImageLoader.java
com/lxj/xpopup/util/FuckRomUtils.java
com/lxj/xpopup/util/XPopupUtils.java
com/scwang/smart/refresh/header/ClassicsHeader.java
com/stripe/android/net/StripeApiHandler.java
com/stripe/android/net/StripeSSLSocketFactory.java
com/tencent/qimei/a/a.java
com/tencent/qimei/c/c.java
com/tencent/qimei/d/b.java
com/tencent/qimei/i/b.java
com/tencent/qimei/i/d.java
com/tencent/qimei/i/e.java
com/tencent/qimei/j/a.java
com/tencent/qimei/j/c.java
com/tencent/qimei/o/e.java
com/tencent/qimei/o/u.java
com/tencent/qimei/s/c.java
com/tencent/qmsp/sdk/a/b.java
com/tencent/qmsp/sdk/a/c.java
com/tencent/qmsp/sdk/b/a.java
com/tencent/qmsp/sdk/b/d.java
com/tencent/qmsp/sdk/base/e.java
com/tencent/qmsp/sdk/c/a.java
com/tencent/qmsp/sdk/c/f.java
com/tencent/qmsp/sdk/c/g.java
com/tencent/qmsp/sdk/c/h.java
com/tencent/qmsp/sdk/c/j.java
com/tencent/qmsp/sdk/c/k.java
com/tencent/qmsp/sdk/c/m.java
com/tencent/qmsp/sdk/d/a.java
com/tencent/qmsp/sdk/d/b.java
com/tencent/qmsp/sdk/d/c.java
com/tencent/qmsp/sdk/d/e.java
com/tencent/qmsp/sdk/f/c.java
com/tencent/qmsp/sdk/f/d.java
com/tencent/qmsp/sdk/f/j.java
com/tencent/qmsp/sdk/f/k.java
cos/MyCOSService.java
io/nlopez/smartlocation/geocoding/providers/AndroidGeocodingProvider.java
io/nlopez/smartlocation/location/LocationStore.java
j$/time/YearMonth.java
j$/time/b.java
j$/time/chrono/c.java
j$/time/temporal/n.java
j$/util/C0111c.java
j$/util/C0112d.java
j$/util/DesugarCollections.java
j$/util/concurrent/ConcurrentHashMap.java
j$/util/concurrent/ThreadLocalRandom.java
org/telegram/PhoneFormat/PhoneFormat.java
org/telegram/messenger/AndroidUtilities.java
org/telegram/messenger/ApplicationLoader.java
org/telegram/messenger/AuthTokensHelper.java
org/telegram/messenger/AutoDeleteMediaTask.java
org/telegram/messenger/BillingController.java
org/telegram/messenger/CacheByChatsController.java
org/telegram/messenger/ChatThemeController.java
org/telegram/messenger/ChatsRemoteViewsFactory.java
org/telegram/messenger/ChatsWidgetProvider.java
org/telegram/messenger/ContactsController.java
org/telegram/messenger/ContactsRemoteViewsFactory.java
org/telegram/messenger/ContactsWidgetProvider.java
org/telegram/messenger/DatabaseMigrationHelper.java
org/telegram/messenger/DownloadController.java
org/telegram/messenger/Emoji.java
org/telegram/messenger/EmuDetector.java
org/telegram/messenger/EmuInputDevicesDetector.java
org/telegram/messenger/FeedRemoteViewsFactory.java
org/telegram/messenger/FeedWidgetProvider.java
org/telegram/messenger/FileLoadOperation.java
org/telegram/messenger/FileLoader.java
org/telegram/messenger/FileLog.java
org/telegram/messenger/FilePathDatabase.java
org/telegram/messenger/FileStreamLoadOperation.java
org/telegram/messenger/FileUploadOperation.java
org/telegram/messenger/FilesMigrationService.java
org/telegram/messenger/ImageLoader.java
org/telegram/messenger/LocaleController.java
org/telegram/messenger/MediaController.java
org/telegram/messenger/MediaDataController.java
org/telegram/messenger/MessageObject.java
org/telegram/messenger/MessagesController.java
org/telegram/messenger/MessagesStorage.java
org/telegram/messenger/MusicBrowserService.java
org/telegram/messenger/MusicPlayerService.java
org/telegram/messenger/NativeLoader.java
org/telegram/messenger/NotificationBadge.java
org/telegram/messenger/NotificationImageProvider.java
org/telegram/messenger/NotificationsController.java
org/telegram/messenger/NotificationsDisabledReceiver.java
org/telegram/messenger/NotificationsSettingsFacade.java
org/telegram/messenger/ProxyRotationController.java
org/telegram/messenger/RuntimeClassNameTypeAdapterFactory.java
org/telegram/messenger/SaveToGallerySettingsHelper.java
org/telegram/messenger/SecretChatHelper.java
org/telegram/messenger/SendMessagesHelper.java
org/telegram/messenger/SharedConfig.java
org/telegram/messenger/SharedPrefsHelper.java
org/telegram/messenger/SmsReceiver.java
org/telegram/messenger/StatsController.java
org/telegram/messenger/SvgHelper.java
org/telegram/messenger/TopicsController.java
org/telegram/messenger/TranslateController.java
org/telegram/messenger/UserConfig.java
org/telegram/messenger/Utilities.java
org/telegram/messenger/audioinfo/AudioInfo.java
org/telegram/messenger/audioinfo/m4a/M4AInfo.java
org/telegram/messenger/audioinfo/m4a/MP4Atom.java
org/telegram/messenger/audioinfo/m4a/MP4Box.java
org/telegram/messenger/audioinfo/m4a/MP4Input.java
org/telegram/messenger/audioinfo/mp3/ID3v1Info.java
org/telegram/messenger/audioinfo/mp3/ID3v2DataInput.java
org/telegram/messenger/audioinfo/mp3/ID3v2FrameBody.java
org/telegram/messenger/audioinfo/mp3/ID3v2FrameHeader.java
org/telegram/messenger/audioinfo/mp3/ID3v2Info.java
org/telegram/messenger/audioinfo/mp3/ID3v2TagBody.java
org/telegram/messenger/audioinfo/mp3/ID3v2TagHeader.java
org/telegram/messenger/audioinfo/mp3/MP3Info.java
org/telegram/messenger/audioinfo/mp3/MP3Input.java
org/telegram/messenger/audioinfo/util/PositionInputStream.java
org/telegram/messenger/audioinfo/util/RangeInputStream.java
org/telegram/messenger/camera/CameraController.java
org/telegram/messenger/camera/CameraSession.java
org/telegram/messenger/camera/CameraView.java
org/telegram/messenger/ringtone/RingtoneDataStore.java
org/telegram/messenger/ringtone/RingtoneUploader.java
org/telegram/messenger/secretmedia/EncryptedFileDataSource.java
org/telegram/messenger/secretmedia/EncryptedFileInputStream.java
org/telegram/messenger/secretmedia/ExtendedDefaultDataSource.java
org/telegram/messenger/time/FastDateParser.java
org/telegram/messenger/time/FastDatePrinter.java
org/telegram/messenger/utils/BitmapsCache.java
org/telegram/messenger/utils/ImmutableByteArrayOutputStream.java
org/telegram/messenger/utils/PhotoUtilities.java
org/telegram/messenger/video/AudioRecoder.java
org/telegram/messenger/video/MP4Builder.java
org/telegram/messenger/video/MediaCodecVideoConvertor.java
org/telegram/messenger/video/Mp4Movie.java
org/telegram/messenger/video/TextureRenderer.java
org/telegram/messenger/voip/CallNotificationSoundProvider.java
org/telegram/messenger/voip/VLog.java
org/telegram/messenger/voip/VoIPController.java
org/telegram/messenger/voip/VoIPService.java
org/telegram/tgnet/ConnectionsManager.java
org/telegram/tgnet/SerializedData.java
org/telegram/ui/ActionBar/EmojiThemes.java
org/telegram/ui/ActionBar/Theme.java
org/telegram/ui/ArticleViewer.java
org/telegram/ui/CacheControlActivity.java
org/telegram/ui/CachedMediaLayout.java
org/telegram/ui/Cells/AudioPlayerCell.java
org/telegram/ui/Cells/ContextLinkCell.java
org/telegram/ui/Cells/DrawerProfileCell.java
org/telegram/ui/Cells/PatternCell.java
org/telegram/ui/Cells/PhotoAttachCameraCell.java
org/telegram/ui/Cells/SharedDocumentCell.java
org/telegram/ui/Cells/ThemesHorizontalListCell.java
org/telegram/ui/Cells/WallpaperCell.java
org/telegram/ui/ChannelAdminLogActivity.java
org/telegram/ui/ChatActivity.java
org/telegram/ui/Components/AlertsCreator.java
org/telegram/ui/Components/AnimatedEmojiDrawable.java
org/telegram/ui/Components/AnimatedFileDrawable.java
org/telegram/ui/Components/AudioPlayerAlert.java
org/telegram/ui/Components/BlockingUpdateView.java
org/telegram/ui/Components/BotWebViewContainer.java
org/telegram/ui/Components/ChatActivityEnterView.java
org/telegram/ui/Components/ChatAttachAlertAudioLayout.java
org/telegram/ui/Components/ChatAttachAlertContactsLayout.java
org/telegram/ui/Components/ChatAttachAlertDocumentLayout.java
org/telegram/ui/Components/ChatAttachAlertPhotoLayout.java
org/telegram/ui/Components/ChatThemeBottomSheet.java
org/telegram/ui/Components/Crop/CropView.java
org/telegram/ui/Components/FloatingDebug/FloatingDebugView.java
org/telegram/ui/Components/GroupCallPip.java
org/telegram/ui/Components/ImageUpdater.java
org/telegram/ui/Components/InstantCameraView.java
org/telegram/ui/Components/OtherDocumentPlaceholderDrawable.java
org/telegram/ui/Components/Paint/PaintTypeface.java
org/telegram/ui/Components/Paint/PersistColorPalette.java
org/telegram/ui/Components/Paint/ShapeDetector.java
org/telegram/ui/Components/Paint/Slice.java
org/telegram/ui/Components/Paint/Views/ColorPicker.java
org/telegram/ui/Components/PhonebookShareAlert.java
org/telegram/ui/Components/PhotoViewerWebView.java
org/telegram/ui/Components/PipRoundVideoView.java
org/telegram/ui/Components/PipVideoOverlay.java
org/telegram/ui/Components/Premium/GLIcon/ObjLoader.java
org/telegram/ui/Components/Premium/GLIcon/Star3DIcon.java
org/telegram/ui/Components/Premium/VideoScreenPreview.java
org/telegram/ui/Components/RLottieDrawable.java
org/telegram/ui/Components/StickersAlert.java
org/telegram/ui/Components/ThemeEditorView.java
org/telegram/ui/Components/ThemePreviewDrawable.java
org/telegram/ui/Components/VideoPlayer.java
org/telegram/ui/Components/VideoSeekPreviewImage.java
org/telegram/ui/Components/WallpaperUpdater.java
org/telegram/ui/Components/WebPlayerView.java
org/telegram/ui/Components/voip/PrivateVideoPreviewDialog.java
org/telegram/ui/Components/voip/VoIPHelper.java
org/telegram/ui/Components/voip/VoIPPiPView.java
org/telegram/ui/Components/voip/VoIPTextureView.java
org/telegram/ui/ContactsActivity.java
org/telegram/ui/CountrySelectActivity.java
org/telegram/ui/DataAutoDownloadActivity.java
org/telegram/ui/DataSettingsActivity.java
org/telegram/ui/DefaultThemesPreviewCell.java
org/telegram/ui/DeviceUtils.java
org/telegram/ui/DialogsActivity.java
org/telegram/ui/EditWidgetActivity.java
org/telegram/ui/GroupCallActivity.java
org/telegram/ui/JMTFastShotManager.java
org/telegram/ui/LaunchActivity.java
org/telegram/ui/LiteModeSettingsActivity.java
org/telegram/ui/LoginActivity.java
org/telegram/ui/NewContactBottomSheet.java
org/telegram/ui/NotificationsCustomSettingsActivity.java
org/telegram/ui/NotificationsSettingsActivity.java
org/telegram/ui/NotificationsSoundActivity.java
org/telegram/ui/PassportActivity.java
org/telegram/ui/PaymentFormActivity.java
org/telegram/ui/PhotoCropActivity.java
org/telegram/ui/PhotoPickerActivity.java
org/telegram/ui/PhotoViewer.java
org/telegram/ui/ProfileActivity.java
org/telegram/ui/ProfileNotificationsActivity.java
org/telegram/ui/ProxyListActivity.java
org/telegram/ui/ProxySettingsActivity.java
org/telegram/ui/QuickRepliesSettingsActivity.java
org/telegram/ui/RestrictedLanguagesSelectActivity.java
org/telegram/ui/SecretMediaViewer.java
org/telegram/ui/ShareActivity.java
org/telegram/ui/Storage/CacheModel.java
org/telegram/ui/ThemeActivity.java
org/telegram/ui/ThemePreviewActivity.java
org/telegram/ui/VoIPFragment.java
org/telegram/ui/WallpapersListActivity.java
org/telegram/ui/WebviewActivity.java
org/webrtc/AndroidVideoDecoder.java
org/webrtc/Camera1Session.java
org/webrtc/FileVideoCapturer.java
org/webrtc/HardwareVideoEncoder.java
org/webrtc/JniHelper.java
org/webrtc/Logging.java
org/webrtc/MediaCodecWrapperFactory.java
org/webrtc/MediaCodecWrapperFactoryImpl.java
org/webrtc/VideoFileRenderer.java
一般功能-> 获取系统服务(getSystemService)
cn/jzvd/JZUtils.java
cn/jzvd/Jzvd.java
cn/jzvd/JzvdStd.java
com/davemorrissey/labs/subscaleview/decoder/SkiaPooledImageRegionDecoder.java
com/github/gzuliyujiang/oaid/DeviceID.java
com/github/gzuliyujiang/oaid/impl/CooseaImpl.java
com/hbisoft/hbrecorder/HBRecorder.java
com/hbisoft/hbrecorder/HBRecorderCodecInfo.java
com/hbisoft/hbrecorder/ScreenRecordService.java
com/hjq/window/EasyWindow.java
com/lxj/xpopup/util/KeyboardUtils.java
com/lxj/xpopup/util/XPopupUtils.java
com/tencent/qimei/a/a.java
com/tencent/qimei/c/a.java
com/tencent/qimei/c/c.java
com/tencent/qimei/g/b.java
com/tencent/qmsp/sdk/f/f.java
io/nlopez/smartlocation/location/providers/LocationManagerProvider.java
org/telegram/messenger/AndroidUtilities.java
org/telegram/messenger/ApplicationLoader.java
org/telegram/messenger/EmuDetector.java
org/telegram/messenger/FilesMigrationService.java
org/telegram/messenger/ImageLoader.java
org/telegram/messenger/LiteMode.java
org/telegram/messenger/LocaleController.java
org/telegram/messenger/LocationController.java
org/telegram/messenger/MediaController.java
org/telegram/messenger/MediaDataController.java
org/telegram/messenger/MessagesController.java
org/telegram/messenger/MusicPlayerService.java
org/telegram/messenger/NotificationsController.java
org/telegram/messenger/SendMessagesHelper.java
org/telegram/messenger/SharedConfig.java
org/telegram/messenger/TranslateController.java
org/telegram/messenger/XiaomiUtilities.java
org/telegram/messenger/camera/CameraSession.java
org/telegram/messenger/camera/CameraView.java
org/telegram/messenger/support/JobIntentService.java
org/telegram/messenger/support/fingerprint/FingerprintManagerCompatApi23.java
org/telegram/messenger/voip/JNIUtilities.java
org/telegram/messenger/voip/VideoCapturerDevice.java
org/telegram/messenger/voip/VoIPService.java
org/telegram/messenger/voip/VoipAudioManager.java
org/telegram/ui/ActionBar/ActionBarPopupWindow.java
org/telegram/ui/ActionBar/BaseFragment.java
org/telegram/ui/ActionBar/FloatingActionMode.java
org/telegram/ui/ActionBar/Theme.java
org/telegram/ui/ActionIntroActivity.java
org/telegram/ui/ArticleViewer.java
org/telegram/ui/AvatarPreviewer.java
org/telegram/ui/Cells/ChatMessageCell.java
org/telegram/ui/ChangeBioActivity.java
org/telegram/ui/ChangeUsernameActivity.java
org/telegram/ui/ChannelCreateActivity.java
org/telegram/ui/Charts/BaseChartView.java
org/telegram/ui/ChatActivity.java
org/telegram/ui/ChatEditActivity.java
org/telegram/ui/ChatEditTypeActivity.java
org/telegram/ui/ChatRightsEditActivity.java
org/telegram/ui/CodeNumberField.java
org/telegram/ui/Components/AlertsCreator.java
org/telegram/ui/Components/BotWebViewContainer.java
org/telegram/ui/Components/ChatActivityEnterView.java
org/telegram/ui/Components/ChatAttachAlertLocationLayout.java
org/telegram/ui/Components/EditTextCaption.java
org/telegram/ui/Components/EmbedBottomSheet.java
org/telegram/ui/Components/GroupCallPip.java
org/telegram/ui/Components/GroupCallPipAlertView.java
org/telegram/ui/Components/InstantCameraView.java
org/telegram/ui/Components/InviteMembersBottomSheet.java
org/telegram/ui/Components/LinkActionView.java
org/telegram/ui/Components/NumberPicker.java
org/telegram/ui/Components/PasscodeView.java
org/telegram/ui/Components/PhonebookShareAlert.java
org/telegram/ui/Components/PipRoundVideoView.java
org/telegram/ui/Components/PipVideoOverlay.java
org/telegram/ui/Components/SenderSelectPopup.java
org/telegram/ui/Components/ShareAlert.java
org/telegram/ui/Components/SharedMediaLayout.java
org/telegram/ui/Components/ThemeEditorView.java
org/telegram/ui/Components/WallpaperParallaxEffect.java
org/telegram/ui/Components/WebPlayerView.java
org/telegram/ui/Components/voip/AcceptDeclineView.java
org/telegram/ui/Components/voip/CallSwipeView.java
org/telegram/ui/Components/voip/PrivateVideoPreviewDialog.java
org/telegram/ui/Components/voip/RTMPStreamPipOverlay.java
org/telegram/ui/Components/voip/VoIPPiPView.java
org/telegram/ui/Components/voip/VoIPTextureView.java
org/telegram/ui/Components/voip/VoIPWindowView.java
org/telegram/ui/ContactsActivity.java
org/telegram/ui/ContentPreviewViewer.java
org/telegram/ui/GroupCallActivity.java
org/telegram/ui/GroupCreateFinalActivity.java
org/telegram/ui/GroupInviteActivity.java
org/telegram/ui/IdenticonActivity.java
org/telegram/ui/JMTDiscoverWebActivity.java
org/telegram/ui/LaunchActivity.java
org/telegram/ui/LinkEditActivity.java
org/telegram/ui/LocationActivity.java
org/telegram/ui/ManageLinksActivity.java
org/telegram/ui/NewContactBottomSheet.java
org/telegram/ui/PassportActivity.java
org/telegram/ui/PaymentFormActivity.java
org/telegram/ui/PhotoAlbumPickerActivity.java
org/telegram/ui/PhotoViewer.java
org/telegram/ui/PopupNotificationActivity.java
org/telegram/ui/PrivacyControlActivity.java
org/telegram/ui/ProfileActivity.java
org/telegram/ui/ProxySettingsActivity.java
org/telegram/ui/QrActivity.java
org/telegram/ui/RestrictedLanguagesSelectActivity.java
org/telegram/ui/SecretMediaViewer.java
org/telegram/ui/SelectAnimatedEmojiDialog.java
org/telegram/ui/SessionBottomSheet.java
org/telegram/ui/StickersActivity.java
org/telegram/ui/ThemeActivity.java
org/telegram/ui/ThemeSetUrlActivity.java
org/telegram/ui/TopicCreateFragment.java
org/telegram/ui/VoIPFragment.java
org/telegram/ui/WallpapersListActivity.java
org/webrtc/Camera2Capturer.java
org/webrtc/Camera2Enumerator.java
org/webrtc/NetworkMonitorAutoDetect.java
org/webrtc/ScreenCapturerAndroid.java
org/webrtc/audio/JavaAudioDeviceModule.java
org/webrtc/audio/WebRtcAudioManager.java
org/webrtc/voiceengine/WebRtcAudioManager.java
org/webrtc/voiceengine/WebRtcAudioTrack.java
org/webrtc/voiceengine/WebRtcAudioUtils.java
调用java反射机制
加密解密-> Base64 加密
加密解密-> Base64 解密
隐私数据-> 屏幕截图,截取自己应用内部界面
一般功能-> 传感器相关操作
一般功能-> IPC通信
cn/jzvd/JzvdStd.java
com/github/gzuliyujiang/oaid/impl/AsusImpl.java
com/github/gzuliyujiang/oaid/impl/CoolpadImpl.java
com/github/gzuliyujiang/oaid/impl/FreemeImpl.java
com/github/gzuliyujiang/oaid/impl/GmsImpl.java
com/github/gzuliyujiang/oaid/impl/LenovoImpl.java
com/github/gzuliyujiang/oaid/impl/MsaImpl.java
com/github/gzuliyujiang/oaid/impl/OAIDService.java
com/github/gzuliyujiang/oaid/impl/OppoExtImpl.java
com/github/gzuliyujiang/oaid/impl/OppoImpl.java
com/github/gzuliyujiang/oaid/impl/QikuImpl.java
com/github/gzuliyujiang/oaid/impl/SamsungImpl.java
com/hbisoft/hbrecorder/HBRecorder.java
com/hbisoft/hbrecorder/NotificationReceiver.java
com/hbisoft/hbrecorder/ScreenRecordService.java
com/hihonor/cloudservice/oaid/a.java
com/hihonor/cloudservice/oaid/b.java
com/lxj/xpopup/util/XPermission.java
com/lxj/xpopup/util/XPopupUtils.java
com/tencent/qimei/c/c.java
com/tencent/qimei/g/b.java
com/tencent/qmsp/oaid2/f.java
com/tencent/qmsp/oaid2/g0.java
com/tencent/qmsp/oaid2/h.java
com/tencent/qmsp/oaid2/h0.java
com/tencent/qmsp/oaid2/i.java
com/tencent/qmsp/oaid2/i0.java
com/tencent/qmsp/oaid2/j.java
com/tencent/qmsp/oaid2/j0.java
com/tencent/qmsp/oaid2/k.java
com/tencent/qmsp/oaid2/m.java
com/tencent/qmsp/oaid2/n.java
com/tencent/qmsp/oaid2/p.java
com/tencent/qmsp/oaid2/q.java
com/tencent/qmsp/oaid2/r.java
com/tencent/qmsp/oaid2/v.java
com/tencent/qmsp/oaid2/x.java
com/tencent/qmsp/sdk/g/a/a.java
com/tencent/qmsp/sdk/g/a/c.java
com/tencent/qmsp/sdk/g/a/d.java
com/tencent/qmsp/sdk/g/b/a.java
com/tencent/qmsp/sdk/g/b/b.java
com/tencent/qmsp/sdk/g/b/d.java
com/tencent/qmsp/sdk/g/c/a.java
com/tencent/qmsp/sdk/g/c/c.java
com/tencent/qmsp/sdk/g/d/a.java
com/tencent/qmsp/sdk/g/d/b.java
com/tencent/qmsp/sdk/g/e/a.java
com/tencent/qmsp/sdk/g/e/c.java
com/tencent/qmsp/sdk/g/g/d.java
com/tencent/qmsp/sdk/g/g/e.java
com/tencent/qmsp/sdk/g/h/a.java
com/tencent/qmsp/sdk/g/h/b.java
io/nlopez/smartlocation/activity/providers/ActivityGooglePlayServicesProvider.java
io/nlopez/smartlocation/geocoding/providers/AndroidGeocodingProvider.java
io/nlopez/smartlocation/geofencing/providers/GeofencingGooglePlayServicesProvider.java
io/nlopez/smartlocation/location/providers/LocationGooglePlayServicesProvider.java
org/telegram/messenger/AndroidUtilities.java
org/telegram/messenger/AppStartReceiver.java
org/telegram/messenger/ApplicationLoader.java
org/telegram/messenger/AuthenticatorService.java
org/telegram/messenger/AutoMessageHeardReceiver.java
org/telegram/messenger/AutoMessageReplyReceiver.java
org/telegram/messenger/BillingController.java
org/telegram/messenger/BringAppForegroundService.java
org/telegram/messenger/CallReceiver.java
org/telegram/messenger/ChatsRemoteViewsFactory.java
org/telegram/messenger/ChatsWidgetProvider.java
org/telegram/messenger/ChatsWidgetService.java
org/telegram/messenger/ContactsRemoteViewsFactory.java
org/telegram/messenger/ContactsSyncAdapterService.java
org/telegram/messenger/ContactsWidgetProvider.java
org/telegram/messenger/ContactsWidgetService.java
org/telegram/messenger/CustomTabsCopyReceiver.java
org/telegram/messenger/DownloadController.java
org/telegram/messenger/EmuDetector.java
org/telegram/messenger/FeedRemoteViewsFactory.java
org/telegram/messenger/FeedWidgetProvider.java
org/telegram/messenger/FeedWidgetService.java
org/telegram/messenger/FilesMigrationService.java
org/telegram/messenger/GoogleVoiceClientService.java
org/telegram/messenger/ImageLoader.java
org/telegram/messenger/ImportingService.java
org/telegram/messenger/KeepAliveJob.java
org/telegram/messenger/LocaleController.java
org/telegram/messenger/LocationController.java
org/telegram/messenger/LocationSharingService.java
org/telegram/messenger/MediaController.java
org/telegram/messenger/MediaDataController.java
org/telegram/messenger/MessagesController.java
org/telegram/messenger/MusicBrowserService.java
org/telegram/messenger/MusicPlayerReceiver.java
org/telegram/messenger/MusicPlayerService.java
org/telegram/messenger/NotificationBadge.java
org/telegram/messenger/NotificationCallbackReceiver.java
org/telegram/messenger/NotificationDismissReceiver.java
org/telegram/messenger/NotificationRepeat.java
org/telegram/messenger/NotificationsController.java
org/telegram/messenger/NotificationsDisabledReceiver.java
org/telegram/messenger/NotificationsService.java
org/telegram/messenger/OpenChatReceiver.java
org/telegram/messenger/PopupReplyReceiver.java
org/telegram/messenger/R.java
org/telegram/messenger/RefererReceiver.java
org/telegram/messenger/ScreenReceiver.java
org/telegram/messenger/SendMessagesHelper.java
org/telegram/messenger/ShareBroadcastReceiver.java
org/telegram/messenger/SmsReceiver.java
org/telegram/messenger/StopLiveLocationReceiver.java
org/telegram/messenger/VideoEncodingService.java
org/telegram/messenger/WearReplyReceiver.java
org/telegram/messenger/XiaomiUtilities.java
org/telegram/messenger/browser/Browser.java
org/telegram/messenger/support/JobIntentService.java
org/telegram/messenger/support/customtabs/CustomTabsClient.java
org/telegram/messenger/support/customtabs/CustomTabsIntent.java
org/telegram/messenger/support/customtabs/CustomTabsServiceConnection.java
org/telegram/messenger/support/customtabs/CustomTabsSession.java
org/telegram/messenger/support/customtabs/ICustomTabsCallback.java
org/telegram/messenger/support/customtabs/ICustomTabsService.java
org/telegram/messenger/support/customtabsclient/shared/CustomTabsHelper.java
org/telegram/messenger/voip/VideoCapturerDevice.java
org/telegram/messenger/voip/VoIPActionsReceiver.java
org/telegram/messenger/voip/VoIPMediaButtonReceiver.java
org/telegram/messenger/voip/VoIPService.java
org/telegram/ui/ActionBar/ActionBarLayout.java
org/telegram/ui/ActionBar/BaseFragment.java
org/telegram/ui/ActionBar/INavigationLayout.java
org/telegram/ui/ActionIntroActivity.java
org/telegram/ui/ArticleViewer.java
org/telegram/ui/BasePermissionsActivity.java
org/telegram/ui/BubbleActivity.java
org/telegram/ui/CameraScanActivity.java
org/telegram/ui/ChannelAdminLogActivity.java
org/telegram/ui/ChannelCreateActivity.java
org/telegram/ui/ChatActivity.java
org/telegram/ui/ChatEditActivity.java
org/telegram/ui/ChatsWidgetConfigActivity.java
org/telegram/ui/Components/AlertsCreator.java
org/telegram/ui/Components/AudioPlayerAlert.java
org/telegram/ui/Components/BlockingUpdateView.java
org/telegram/ui/Components/BotWebViewContainer.java
org/telegram/ui/Components/ChatAttachAlert.java
org/telegram/ui/Components/ChatAttachAlertDocumentLayout.java
org/telegram/ui/Components/ChatAttachAlertPhotoLayout.java
org/telegram/ui/Components/EmbedBottomSheet.java
org/telegram/ui/Components/FragmentContextView.java
org/telegram/ui/Components/GroupCallPipAlertView.java
org/telegram/ui/Components/ImageUpdater.java
org/telegram/ui/Components/LinkActionView.java
org/telegram/ui/Components/PhonebookShareAlert.java
org/telegram/ui/Components/PhotoViewerWebView.java
org/telegram/ui/Components/PipVideoOverlay.java
org/telegram/ui/Components/Premium/PremiumNotAvailableBottomSheet.java
org/telegram/ui/Components/QRCodeBottomSheet.java
org/telegram/ui/Components/ThemeEditorView.java
org/telegram/ui/Components/WallpaperUpdater.java
org/telegram/ui/Components/voip/PrivateVideoPreviewDialog.java
org/telegram/ui/Components/voip/RTMPStreamPipOverlay.java
org/telegram/ui/Components/voip/VoIPHelper.java
org/telegram/ui/Components/voip/VoIPPiPView.java
org/telegram/ui/ContactsActivity.java
org/telegram/ui/ContactsWidgetConfigActivity.java
org/telegram/ui/DialogsActivity.java
org/telegram/ui/ExternalActionActivity.java
org/telegram/ui/FilterChatlistActivity.java
org/telegram/ui/GroupCallActivity.java
org/telegram/ui/GroupCreateFinalActivity.java
org/telegram/ui/GroupInviteActivity.java
org/telegram/ui/InviteContactsActivity.java
org/telegram/ui/JMTBaiduMapActivity.java
org/telegram/ui/JMTDiscoverWebActivity.java
org/telegram/ui/JMTMapPreviewActivity.java
org/telegram/ui/JMTWebViewActivity.java
org/telegram/ui/LaunchActivity.java
org/telegram/ui/LocationActivity.java
org/telegram/ui/LoginActivity.java
org/telegram/ui/ManageLinksActivity.java
org/telegram/ui/NotificationsCustomSettingsActivity.java
org/telegram/ui/NotificationsSettingsActivity.java
org/telegram/ui/NotificationsSoundActivity.java
org/telegram/ui/PassportActivity.java
org/telegram/ui/PaymentFormActivity.java
org/telegram/ui/PhotoViewer.java
org/telegram/ui/PopupNotificationActivity.java
org/telegram/ui/PremiumPreviewFragment.java
org/telegram/ui/ProfileActivity.java
org/telegram/ui/ProfileNotificationsActivity.java
org/telegram/ui/ProxyListActivity.java
org/telegram/ui/QrActivity.java
org/telegram/ui/SessionsActivity.java
org/telegram/ui/ShareActivity.java
org/telegram/ui/StickersActivity.java
org/telegram/ui/ThemeActivity.java
org/telegram/ui/VoIPFeedbackActivity.java
org/telegram/ui/VoIPFragment.java
org/telegram/ui/VoIPPermissionActivity.java
org/telegram/ui/WallpapersListActivity.java
org/telegram/ui/WebviewActivity.java
org/webrtc/NetworkMonitorAutoDetect.java
org/webrtc/ScreenCapturerAndroid.java
repeackage/com/asus/msa/SupplementaryDID/IDidAidlInterface.java
repeackage/com/bun/lib/MsaIdInterface.java
repeackage/com/coolpad/deviceidsupport/IDeviceIdManager.java
repeackage/com/heytap/openid/IOpenID.java
repeackage/com/oplus/stdid/IStdID.java
repeackage/com/qiku/id/IOAIDInterface.java
repeackage/com/qiku/id/QikuIdmanager.java
repeackage/com/samsung/android/deviceidservice/IDeviceIdService.java
repeackage/com/zui/deviceidservice/IDeviceidInterface.java
yjzzzd/xheiqd/ndubnbjpox/R.java
辅助功能accessibility相关
org/telegram/ui/ActionBar/ActionBarMenuItem.java
org/telegram/ui/ActionBar/ActionBarMenuSlider.java
org/telegram/ui/ActionBar/ActionBarMenuSubItem.java
org/telegram/ui/ActionBar/BottomSheet.java
org/telegram/ui/ActionBar/SimpleTextView.java
org/telegram/ui/ArticleViewer.java
org/telegram/ui/CacheControlActivity.java
org/telegram/ui/Cells/AboutLinkCell.java
org/telegram/ui/Cells/AudioPlayerCell.java
org/telegram/ui/Cells/AvailableReactionCell.java
org/telegram/ui/Cells/BotHelpCell.java
org/telegram/ui/Cells/BrightnessControlCell.java
org/telegram/ui/Cells/ChatActionCell.java
org/telegram/ui/Cells/ChatMessageCell.java
org/telegram/ui/Cells/CheckBoxCell.java
org/telegram/ui/Cells/ContextLinkCell.java
org/telegram/ui/Cells/DialogCell.java
org/telegram/ui/Cells/DrawerActionCell.java
org/telegram/ui/Cells/GroupCallTextCell.java
org/telegram/ui/Cells/GroupCallUserCell.java
org/telegram/ui/Cells/HeaderCell.java
org/telegram/ui/Cells/NotificationsCheckCell.java
org/telegram/ui/Cells/ProfileSearchCell.java
org/telegram/ui/Cells/ShareDialogCell.java
org/telegram/ui/Cells/SharedAudioCell.java
org/telegram/ui/Cells/SharedLinkCell.java
org/telegram/ui/Cells/StickerSetCell.java
org/telegram/ui/Cells/TextCell.java
org/telegram/ui/Cells/TextCheckCell.java
org/telegram/ui/Cells/TextCheckbox2Cell.java
org/telegram/ui/Cells/TextDetailCell.java
org/telegram/ui/Cells/TextInfoPrivacyCell.java
org/telegram/ui/Cells/TextRadioCell.java
org/telegram/ui/Cells/TextSettingsCell.java
org/telegram/ui/Cells/UserCell.java
org/telegram/ui/ChangeBioActivity.java
org/telegram/ui/ChannelAdminLogActivity.java
org/telegram/ui/ChatActivity.java
org/telegram/ui/ChatEditTypeActivity.java
org/telegram/ui/Components/AnimatedTextView.java
org/telegram/ui/Components/AudioPlayerAlert.java
org/telegram/ui/Components/ChatActivityEnterView.java
org/telegram/ui/Components/ChatAttachAlert.java
org/telegram/ui/Components/ChatAttachAlertPhotoLayout.java
org/telegram/ui/Components/ChatAttachAlertPhotoLayoutPreview.java
org/telegram/ui/Components/ChatAvatarContainer.java
org/telegram/ui/Components/ColorPicker.java
org/telegram/ui/Components/EditTextBoldCursor.java
org/telegram/ui/Components/EditTextCaption.java
org/telegram/ui/Components/EmojiView.java
org/telegram/ui/Components/FloatingDebug/FloatingDebugView.java
org/telegram/ui/Components/FolderBottomSheet.java
org/telegram/ui/Components/FragmentContextView.java
org/telegram/ui/Components/GroupCreateSpan.java
org/telegram/ui/Components/MediaActivity.java
org/telegram/ui/Components/PasscodeView.java
org/telegram/ui/Components/RecyclerListView.java
org/telegram/ui/Components/SearchDownloadsContainer.java
org/telegram/ui/Components/SeekBarAccessibilityDelegate.java
org/telegram/ui/Components/ShareAlert.java
org/telegram/ui/Components/SlideChooseView.java
org/telegram/ui/Components/voip/AcceptDeclineView.java
org/telegram/ui/Components/voip/VoIPToggleButton.java
org/telegram/ui/DialogsActivity.java
org/telegram/ui/FilterCreateActivity.java
org/telegram/ui/FiltersSetupActivity.java
org/telegram/ui/GroupCallActivity.java
org/telegram/ui/LiteModeSettingsActivity.java
org/telegram/ui/PhotoAlbumPickerActivity.java
org/telegram/ui/PhotoPickerActivity.java
org/telegram/ui/ProfileActivity.java
org/telegram/ui/SessionBottomSheet.java
org/telegram/ui/ThemeActivity.java
org/telegram/ui/ThemePreviewActivity.java
org/telegram/ui/TwoStepVerificationSetupActivity.java
org/telegram/ui/VoIPFragment.java
加密解密-> 信息摘要算法
组件-> 启动 Activity
com/lxj/xpopup/util/XPermission.java
org/telegram/messenger/AndroidUtilities.java
org/telegram/messenger/BillingController.java
org/telegram/messenger/BringAppForegroundService.java
org/telegram/messenger/NotificationsController.java
org/telegram/messenger/OpenChatReceiver.java
org/telegram/messenger/ShareBroadcastReceiver.java
org/telegram/messenger/browser/Browser.java
org/telegram/messenger/support/customtabs/CustomTabsIntent.java
org/telegram/messenger/voip/VoIPService.java
org/telegram/ui/ActionBar/ActionBarLayout.java
org/telegram/ui/ActionBar/BaseFragment.java
org/telegram/ui/ActionBar/INavigationLayout.java
org/telegram/ui/ActionIntroActivity.java
org/telegram/ui/ArticleViewer.java
org/telegram/ui/BasePermissionsActivity.java
org/telegram/ui/CameraScanActivity.java
org/telegram/ui/ChannelAdminLogActivity.java
org/telegram/ui/ChatActivity.java
org/telegram/ui/Components/AlertsCreator.java
org/telegram/ui/Components/AudioPlayerAlert.java
org/telegram/ui/Components/BlockingUpdateView.java
org/telegram/ui/Components/BotWebViewContainer.java
org/telegram/ui/Components/ChatAttachAlertPhotoLayout.java
org/telegram/ui/Components/FragmentContextView.java
org/telegram/ui/Components/GroupCallPipAlertView.java
org/telegram/ui/Components/ImageUpdater.java
org/telegram/ui/Components/LinkActionView.java
org/telegram/ui/Components/PhonebookShareAlert.java
org/telegram/ui/Components/PhotoViewerWebView.java
org/telegram/ui/Components/PipVideoOverlay.java
org/telegram/ui/Components/Premium/PremiumNotAvailableBottomSheet.java
org/telegram/ui/Components/QRCodeBottomSheet.java
org/telegram/ui/Components/WallpaperUpdater.java
org/telegram/ui/Components/voip/PrivateVideoPreviewDialog.java
org/telegram/ui/Components/voip/RTMPStreamPipOverlay.java
org/telegram/ui/Components/voip/VoIPHelper.java
org/telegram/ui/Components/voip/VoIPPiPView.java
org/telegram/ui/ContactsActivity.java
org/telegram/ui/DialogsActivity.java
org/telegram/ui/FilterChatlistActivity.java
org/telegram/ui/GroupCallActivity.java
org/telegram/ui/GroupInviteActivity.java
org/telegram/ui/InviteContactsActivity.java
org/telegram/ui/JMTBaiduMapActivity.java
org/telegram/ui/JMTDiscoverWebActivity.java
org/telegram/ui/JMTMapPreviewActivity.java
org/telegram/ui/JMTWebViewActivity.java
org/telegram/ui/LocationActivity.java
org/telegram/ui/LoginActivity.java
org/telegram/ui/ManageLinksActivity.java
org/telegram/ui/NotificationsSettingsActivity.java
org/telegram/ui/NotificationsSoundActivity.java
org/telegram/ui/PassportActivity.java
org/telegram/ui/PaymentFormActivity.java
org/telegram/ui/PhotoViewer.java
org/telegram/ui/PopupNotificationActivity.java
org/telegram/ui/ProfileActivity.java
org/telegram/ui/ProfileNotificationsActivity.java
org/telegram/ui/ProxyListActivity.java
org/telegram/ui/QrActivity.java
org/telegram/ui/SessionsActivity.java
org/telegram/ui/StickersActivity.java
org/telegram/ui/ThemeActivity.java
org/telegram/ui/VoIPPermissionActivity.java
org/telegram/ui/WebviewActivity.java
组件-> 启动 Service
隐私数据-> 获取GPS位置信息
隐私数据-> 获取已安装的应用程序
组件-> ContentProvider
一般功能-> 设置手机铃声,媒体音量
网络通信-> HTTP建立连接
网络通信-> WebView JavaScript接口
网络通信-> WebView GET请求 org/telegram/ui/ArticleViewer.java
org/telegram/ui/Components/EmbedBottomSheet.java
org/telegram/ui/Components/PhotoViewerWebView.java
JavaScript 接口方法
网络通信-> WebView 相关
命令执行-> getRuntime.exec() com/lxj/xpopup/util/FuckRomUtils.java
一般功能-> 查看\修改Android系统属性
DEX-> 动态加载 org/telegram/messenger/EmuDetector.java
设备指纹-> 查看本机IMSI org/telegram/messenger/EmuDetector.java
设备指纹-> 查看本机号码 org/telegram/messenger/EmuDetector.java
org/telegram/ui/PassportActivity.java
org/telegram/ui/PaymentFormActivity.java
隐私数据-> 剪贴板数据读写操作
组件-> 发送广播
一般功能-> Android通知
进程操作-> 获取运行的进程\服务 com/hbisoft/hbrecorder/HBRecorder.java
com/tencent/qimei/c/a.java
org/telegram/ui/Components/PipVideoOverlay.java
加密解密-> Crypto加解密组件
隐私数据-> 录制音频行为
网络通信-> 蓝牙连接 org/telegram/messenger/MediaController.java
org/telegram/messenger/voip/VoIPService.java
org/telegram/ui/Components/InstantCameraView.java
一般功能-> 获取活动网路信息
一般功能-> PowerManager操作
网络通信-> OkHttpClient Connection cos/MyCOSService.java
org/telegram/ui/JMTFastShotManager.java
进程操作-> 获取进程pid org/webrtc/PeerConnectionFactory.java
网络通信-> WebView使用File协议
一般功能-> 获取WiFi相关信息 org/telegram/messenger/voip/JNIUtilities.java
一般功能-> 获取网络接口信息
隐私数据-> 录制视频 com/hbisoft/hbrecorder/ScreenRecordService.java
org/telegram/messenger/camera/CameraController.java
进程操作-> 杀死进程 org/telegram/messenger/FileLog.java
org/telegram/ui/AntiAospUtils.java
一般功能-> 查询数据库(短信、联系人、通话记录、浏览器历史等) org/telegram/messenger/ContactsController.java
org/telegram/messenger/MediaController.java
org/telegram/messenger/NotificationBadge.java
隐私数据-> 用户账户管理 org/telegram/messenger/ContactsController.java
隐私数据-> 读写通讯录 org/telegram/messenger/ContactsController.java
组件-> Provider openFile org/telegram/messenger/NotificationImageProvider.java
org/telegram/messenger/voip/CallNotificationSoundProvider.java
网络通信-> HTTPS建立连接 com/stripe/android/net/StripeApiHandler.java
com/stripe/android/net/StripeSSLSocketFactory.java
网络通信-> SSL证书处理 com/stripe/android/net/StripeApiHandler.java
com/stripe/android/net/StripeSSLSocketFactory.java
网络通信-> TCP套接字
网络通信-> URLConnection org/telegram/messenger/ImageLoader.java
org/telegram/tgnet/ConnectionsManager.java
org/telegram/ui/Components/WebPlayerView.java
隐私数据-> 拍照摄像 org/telegram/messenger/camera/CameraController.java
org/webrtc/Camera1Session.java
一般功能-> 获取Android广告ID com/github/gzuliyujiang/oaid/impl/HonorImpl.java
com/github/gzuliyujiang/oaid/impl/HuaweiImpl.java
隐私数据-> 屏幕截图,截取自己应用内部界面 com/lxj/xpopup/util/XPopupUtils.java

源代码分析

高危
2
警告
9
信息
3
安全
1
屏蔽
0
序号 问题 等级 参考标准 文件位置 操作
1 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
OWASP MASVS: MSTG-STORAGE-3
cn/jzvd/JZTextureView.java
cn/jzvd/JZUtils.java
cn/jzvd/Jzvd.java
cn/jzvd/JzvdStd.java
com/davemorrissey/labs/subscaleview/SubsamplingScaleImageView.java
com/davemorrissey/labs/subscaleview/decoder/SkiaPooledImageRegionDecoder.java
com/github/gzuliyujiang/oaid/OAIDLog.java
com/hbisoft/hbrecorder/ScreenRecordService.java
com/lxj/xpopup/animator/TranslateAnimator.java
com/lxj/xpopup/core/BasePopupView.java
com/lxj/xpopup/util/KeyboardUtils.java
com/lxj/xpopup/util/XPermission.java
com/lxj/xpopup/widget/SmartDivider.java
com/tencent/qimei/k/a.java
com/tencent/qmsp/oaid2/c.java
com/tencent/qmsp/oaid2/j.java
com/tencent/qmsp/oaid2/y.java
com/tencent/qmsp/sdk/base/c.java
com/tencent/qmsp/sdk/f/g.java
com/tencent/qmsp/sdk/g/b/a.java
com/tencent/qmsp/sdk/g/b/b.java
com/tencent/qmsp/sdk/g/e/d.java
io/nlopez/smartlocation/utils/LoggerFactory.java
org/telegram/PhoneFormat/PhoneFormat.java
org/telegram/SQLite/SQLiteCursor.java
org/telegram/SQLite/SQLiteDatabase.java
org/telegram/SQLite/SQLitePreparedStatement.java
org/telegram/messenger/AndroidUtilities.java
org/telegram/messenger/AnimatedFileDrawableStream.java
org/telegram/messenger/ApplicationLoader.java
org/telegram/messenger/AuthTokensHelper.java
org/telegram/messenger/AutoDeleteMediaTask.java
org/telegram/messenger/BillingController.java
org/telegram/messenger/ChatObject.java
org/telegram/messenger/ChatThemeController.java
org/telegram/messenger/ChatsRemoteViewsFactory.java
org/telegram/messenger/ContactsController.java
org/telegram/messenger/ContactsRemoteViewsFactory.java
org/telegram/messenger/ContactsSyncAdapterService.java
org/telegram/messenger/DatabaseMigrationHelper.java
org/telegram/messenger/DispatchQueue.java
org/telegram/messenger/DispatchQueuePoolBackground.java
org/telegram/messenger/DocumentObject.java
org/telegram/messenger/DownloadController.java
org/telegram/messenger/Emoji.java
org/telegram/messenger/EmuInputDevicesDetector.java
org/telegram/messenger/FeedRemoteViewsFactory.java
org/telegram/messenger/FileLoadOperation.java
org/telegram/messenger/FileLoader.java
org/telegram/messenger/FileLog.java
org/telegram/messenger/FilePathDatabase.java
org/telegram/messenger/FileRefController.java
org/telegram/messenger/FileStreamLoadOperation.java
org/telegram/messenger/FileUploadOperation.java
org/telegram/messenger/FilesMigrationService.java
org/telegram/messenger/FingerprintController.java
org/telegram/messenger/GcmPushListenerService.java
org/telegram/messenger/ImageLoader.java
org/telegram/messenger/ImageReceiver.java
org/telegram/messenger/ImportingService.java
org/telegram/messenger/KeepAliveJob.java
org/telegram/messenger/LanguageDetector.java
org/telegram/messenger/LinkifyPort.java
org/telegram/messenger/LiteMode.java
org/telegram/messenger/LocaleController.java
org/telegram/messenger/LocationController.java
org/telegram/messenger/LocationSharingService.java
org/telegram/messenger/MediaController.java
org/telegram/messenger/MediaDataController.java
org/telegram/messenger/MessageObject.java
org/telegram/messenger/MessagesController.java
org/telegram/messenger/MessagesStorage.java
org/telegram/messenger/MusicBrowserService.java
org/telegram/messenger/MusicPlayerService.java
org/telegram/messenger/NativeLoader.java
org/telegram/messenger/NotificationBadge.java
org/telegram/messenger/NotificationCenter.java
org/telegram/messenger/NotificationImageProvider.java
org/telegram/messenger/NotificationsController.java
org/telegram/messenger/NotificationsDisabledReceiver.java
org/telegram/messenger/OpenChatReceiver.java
org/telegram/messenger/PushListenerController.java
org/telegram/messenger/ScreenReceiver.java
org/telegram/messenger/SecretChatHelper.java
org/telegram/messenger/SendMessagesHelper.java
org/telegram/messenger/SharedConfig.java
org/telegram/messenger/SmsReceiver.java
org/telegram/messenger/SvgHelper.java
org/telegram/messenger/TopicsController.java
org/telegram/messenger/TranslateController.java
org/telegram/messenger/UserConfig.java
org/telegram/messenger/UserNameResolver.java
org/telegram/messenger/Utilities.java
org/telegram/messenger/VideoEditedInfo.java
org/telegram/messenger/VideoEncodingService.java
org/telegram/messenger/XiaomiUtilities.java
org/telegram/messenger/browser/Browser.java
org/telegram/messenger/camera/CameraController.java
org/telegram/messenger/camera/CameraSession.java
org/telegram/messenger/camera/CameraView.java
org/telegram/messenger/ringtone/RingtoneDataStore.java
org/telegram/messenger/secretmedia/ExtendedDefaultDataSource.java
org/telegram/messenger/support/JobIntentService.java
org/telegram/messenger/support/customtabsclient/shared/CustomTabsHelper.java
org/telegram/messenger/support/fingerprint/FingerprintManagerCompatApi23.java
org/telegram/messenger/utils/BitmapsCache.java
org/telegram/messenger/utils/CopyUtilities.java
org/telegram/messenger/video/AudioRecoder.java
org/telegram/messenger/video/MediaCodecVideoConvertor.java
org/telegram/messenger/video/TextureRenderer.java
org/telegram/messenger/voip/AudioRecordJNI.java
org/telegram/messenger/voip/AudioTrackJNI.java
org/telegram/messenger/voip/Instance.java
org/telegram/messenger/voip/JNIUtilities.java
org/telegram/messenger/voip/NativeInstance.java
org/telegram/messenger/voip/TelegramConnectionService.java
org/telegram/messenger/voip/VideoCapturerDevice.java
org/telegram/messenger/voip/VoIPServerConfig.java
org/telegram/messenger/voip/VoIPService.java
org/telegram/tgnet/ConnectionsManager.java
org/telegram/tgnet/NativeByteBuffer.java
org/telegram/tgnet/SerializedData.java
org/telegram/tgnet/TLClassStore.java
org/telegram/tgnet/TLRPC$ChatPhoto.java
org/telegram/tgnet/TLRPC$TL_chatPhoto.java
org/telegram/tgnet/TLRPC$TL_userProfilePhoto.java
org/telegram/tgnet/TLRPC$UserProfilePhoto.java
org/telegram/ui/ActionBar/ActionBarLayout.java
org/telegram/ui/ActionBar/ActionBarPopupWindow.java
org/telegram/ui/ActionBar/AlertDialog.java
org/telegram/ui/ActionBar/BaseFragment.java
org/telegram/ui/ActionBar/BottomSheet.java
org/telegram/ui/ActionBar/DrawerLayoutContainer.java
org/telegram/ui/ActionBar/EmojiThemes.java
org/telegram/ui/ActionBar/Theme.java
org/telegram/ui/ActionBar/ThemeDescription.java
org/telegram/ui/ActionIntroActivity.java
org/telegram/ui/Adapters/ContactsAdapter.java
org/telegram/ui/Adapters/DialogsAdapter.java
org/telegram/ui/Adapters/DialogsSearchAdapter.java
org/telegram/ui/Adapters/SearchAdapter.java
org/telegram/ui/Adapters/SearchAdapterHelper.java
org/telegram/ui/ArticleViewer.java
org/telegram/ui/BasePermissionsActivity.java
org/telegram/ui/BubbleActivity.java
org/telegram/ui/CacheControlActivity.java
org/telegram/ui/CachedMediaLayout.java
org/telegram/ui/CameraScanActivity.java
org/telegram/ui/Cells/AboutLinkCell.java
org/telegram/ui/Cells/AudioPlayerCell.java
org/telegram/ui/Cells/BotHelpCell.java
org/telegram/ui/Cells/ChatActionCell.java
org/telegram/ui/Cells/ChatMessageCell.java
org/telegram/ui/Cells/ContextLinkCell.java
org/telegram/ui/Cells/DialogCell.java
org/telegram/ui/Cells/DialogMeUrlCell.java
org/telegram/ui/Cells/DrawerActionCell.java
org/telegram/ui/Cells/DrawerProfileCell.java
org/telegram/ui/Cells/SettingsSuggestionCell.java
org/telegram/ui/Cells/SharedAudioCell.java
org/telegram/ui/Cells/SharedLinkCell.java
org/telegram/ui/Cells/TextSelectionHelper.java
org/telegram/ui/Cells/ThemesHorizontalListCell.java
org/telegram/ui/ChangeBioActivity.java
org/telegram/ui/ChangeUsernameActivity.java
org/telegram/ui/ChannelAdminLogActivity.java
org/telegram/ui/ChannelCreateActivity.java
org/telegram/ui/ChatActivity.java
org/telegram/ui/ChatEditActivity.java
org/telegram/ui/ChatRightsEditActivity.java
org/telegram/ui/ChatUsersActivity.java
org/telegram/ui/Components/AlertsCreator.java
org/telegram/ui/Components/AnimatedEmojiDrawable.java
org/telegram/ui/Components/AnimatedFileDrawable.java
org/telegram/ui/Components/AudioPlayerAlert.java
org/telegram/ui/Components/AvatarDrawable.java
org/telegram/ui/Components/BlockingUpdateView.java
org/telegram/ui/Components/BlurBehindDrawable.java
org/telegram/ui/Components/BotWebViewContainer.java
org/telegram/ui/Components/BotWebViewMenuContainer.java
org/telegram/ui/Components/BotWebViewSheet.java
org/telegram/ui/Components/ChatActivityEnterView.java
org/telegram/ui/Components/ChatAttachAlertAudioLayout.java
org/telegram/ui/Components/ChatAttachAlertBotWebViewLayout.java
org/telegram/ui/Components/ChatAttachAlertDocumentLayout.java
org/telegram/ui/Components/ChatAttachAlertLocationLayout.java
org/telegram/ui/Components/ChatAttachAlertPhotoLayout.java
org/telegram/ui/Components/ChatAvatarContainer.java
org/telegram/ui/Components/ChatThemeBottomSheet.java
org/telegram/ui/Components/ClippingImageView.java
org/telegram/ui/Components/Crop/CropView.java
org/telegram/ui/Components/DrawingInBackgroundThreadDrawable.java
org/telegram/ui/Components/EditTextBoldCursor.java
org/telegram/ui/Components/EditTextCaption.java
org/telegram/ui/Components/EditTextEffects.java
org/telegram/ui/Components/EditTextEmoji.java
org/telegram/ui/Components/EmbedBottomSheet.java
org/telegram/ui/Components/EmojiColorPickerWindow.java
org/telegram/ui/Components/EmojiPacksAlert.java
org/telegram/ui/Components/EmojiView.java
org/telegram/ui/Components/FilterGLThread.java
org/telegram/ui/Components/FilterShaders.java
org/telegram/ui/Components/ForegroundDetector.java
org/telegram/ui/Components/ForwardingPreviewView.java
org/telegram/ui/Components/GroupCallPipAlertView.java
org/telegram/ui/Components/GroupVoipInviteAlert.java
org/telegram/ui/Components/ImageUpdater.java
org/telegram/ui/Components/InstantCameraView.java
org/telegram/ui/Components/JoinCallAlert.java
org/telegram/ui/Components/LetterDrawable.java
org/telegram/ui/Components/LinkActionView.java
org/telegram/ui/Components/MotionBackgroundDrawable.java
org/telegram/ui/Components/Paint/PaintTypeface.java
org/telegram/ui/Components/Paint/RenderView.java
org/telegram/ui/Components/Paint/Shader.java
org/telegram/ui/Components/Paint/ShapeDetector.java
org/telegram/ui/Components/Paint/Slice.java
org/telegram/ui/Components/Paint/Utils.java
org/telegram/ui/Components/Paint/Views/LPhotoPaintView.java
org/telegram/ui/Components/PasscodeView.java
org/telegram/ui/Components/PathAnimator.java
org/telegram/ui/Components/PhonebookShareAlert.java
org/telegram/ui/Components/PhotoViewerCaptionEnterView.java
org/telegram/ui/Components/PhotoViewerWebView.java
org/telegram/ui/Components/PipRoundVideoView.java
org/telegram/ui/Components/Premium/GLIcon/GLIconTextureView.java
org/telegram/ui/Components/Premium/PremiumAppIconsPreviewView.java
org/telegram/ui/Components/Premium/PremiumNotAvailableBottomSheet.java
org/telegram/ui/Components/ProfileGalleryView.java
org/telegram/ui/Components/ProximitySheet.java
org/telegram/ui/Components/QRCodeBottomSheet.java
org/telegram/ui/Components/RLottieDrawable.java
org/telegram/ui/Components/RadioButton.java
org/telegram/ui/Components/RecyclerListView.java
org/telegram/ui/Components/SeekBar.java
org/telegram/ui/Components/SeekBarView.java
org/telegram/ui/Components/ShareAlert.java
org/telegram/ui/Components/SharedMediaLayout.java
org/telegram/ui/Components/SizeNotifierFrameLayout.java
org/telegram/ui/Components/SlotsDrawable.java
org/telegram/ui/Components/StaticLayoutEx.java
org/telegram/ui/Components/StickerCategoriesListView.java
org/telegram/ui/Components/StickersAlert.java
org/telegram/ui/Components/TermsOfServiceView.java
org/telegram/ui/Components/ThemeEditorView.java
org/telegram/ui/Components/TimerDrawable.java
org/telegram/ui/Components/TranscribeButton.java
org/telegram/ui/Components/UndoView.java
org/telegram/ui/Components/VideoPlayerSeekBar.java
org/telegram/ui/Components/VideoTimelinePlayView.java
org/telegram/ui/Components/VideoTimelineView.java
org/telegram/ui/Components/WallpaperUpdater.java
org/telegram/ui/Components/WebPlayerView.java
org/telegram/ui/Components/voip/VoIPHelper.java
org/telegram/ui/Components/voip/VoIPPiPView.java
org/telegram/ui/ContactAddActivity.java
org/telegram/ui/ContactsActivity.java
org/telegram/ui/ContentPreviewViewer.java
org/telegram/ui/CountrySelectActivity.java
org/telegram/ui/DeviceUtils.java
org/telegram/ui/DialogsActivity.java
org/telegram/ui/EditWidgetActivity.java
org/telegram/ui/EmojiAnimationsOverlay.java
org/telegram/ui/ExternalActionActivity.java
org/telegram/ui/FilterChatlistActivity.java
org/telegram/ui/FilterCreateActivity.java
org/telegram/ui/FilteredSearchView.java
org/telegram/ui/FiltersSetupActivity.java
org/telegram/ui/GroupCallActivity.java
org/telegram/ui/GroupCreateActivity.java
org/telegram/ui/GroupCreateFinalActivity.java
org/telegram/ui/GroupInviteActivity.java
org/telegram/ui/GroupStickersActivity.java
org/telegram/ui/IdenticonActivity.java
org/telegram/ui/InviteContactsActivity.java
org/telegram/ui/LanguageSelectActivity.java
org/telegram/ui/LaunchActivity.java
org/telegram/ui/LocationActivity.java
org/telegram/ui/LoginActivity.java
org/telegram/ui/ManageLinksActivity.java
org/telegram/ui/NewContactBottomSheet.java
org/telegram/ui/NotificationsCustomSettingsActivity.java
org/telegram/ui/NotificationsSettingsActivity.java
org/telegram/ui/NotificationsSoundActivity.java
org/telegram/ui/PasscodeActivity.java
org/telegram/ui/PassportActivity.java
org/telegram/ui/PaymentFormActivity.java
org/telegram/ui/PeopleNearbyActivity.java
org/telegram/ui/PhotoCropActivity.java
org/telegram/ui/PhotoViewer.java
org/telegram/ui/PopupNotificationActivity.java
org/telegram/ui/PremiumPreviewFragment.java
org/telegram/ui/PrivacyControlActivity.java
org/telegram/ui/PrivacySettingsActivity.java
org/telegram/ui/ProfileActivity.java
org/telegram/ui/ProfileNotificationsActivity.java
org/telegram/ui/RestrictedLanguagesSelectActivity.java
org/telegram/ui/SecretMediaViewer.java
org/telegram/ui/SelectAnimatedEmojiDialog.java
org/telegram/ui/SessionsActivity.java
org/telegram/ui/ShareActivity.java
org/telegram/ui/StickersActivity.java
org/telegram/ui/ThemeActivity.java
org/telegram/ui/ThemePreviewActivity.java
org/telegram/ui/ThemeSetUrlActivity.java
org/telegram/ui/TopicsFragment.java
org/telegram/ui/TwoStepVerificationActivity.java
org/telegram/ui/TwoStepVerificationSetupActivity.java
org/telegram/ui/VoIPFragment.java
org/telegram/ui/VoIPPermissionActivity.java
org/telegram/ui/WallpapersListActivity.java
org/telegram/ui/WebviewActivity.java
org/webrtc/AndroidVideoDecoder.java
org/webrtc/EglRenderer.java
org/webrtc/GlGenericDrawer.java
org/webrtc/GlShader.java
org/webrtc/HardwareVideoEncoderFactory.java
org/webrtc/MediaCodecUtils.java
org/webrtc/ScreenCapturerAndroid.java
org/webrtc/TextureBufferImpl.java
org/webrtc/YuvConverter.java
org/webrtc/voiceengine/WebRtcAudioRecord.java
org/webrtc/voiceengine/WebRtcAudioTrack.java
repeackage/com/qiku/id/QikuIdmanager.java
2 应用程序使用不安全的随机数生成器 警告 CWE: CWE-330: 使用不充分的随机数
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-6
3 MD5是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
4 SHA-1是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
5 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 警告 CWE: CWE-749: 暴露危险方法或函数
OWASP Top 10: M1: Improper Platform Usage
OWASP MASVS: MSTG-PLATFORM-7
6 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击 高危 CWE: CWE-79: 在Web页面生成时对输入的转义处理不恰当('跨站脚本')
OWASP Top 10: M1: Improper Platform Usage
OWASP MASVS: MSTG-PLATFORM-6
org/telegram/ui/ArticleViewer.java
org/telegram/ui/Components/EmbedBottomSheet.java
org/telegram/ui/Components/PhotoViewerWebView.java
7 IP地址泄露 警告 CWE: CWE-200: 信息泄露
OWASP MASVS: MSTG-CODE-2
8 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
9 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它 信息
OWASP MASVS: MSTG-STORAGE-10