安全声明:本平台专为移动应用安全风险研究与合规评估设计,严禁用于任何非法用途。如有疑问或建议,欢迎加入微信群交流

应用图标

文件基本信息

文件名称
com.yixing.snugglelive.apk
文件大小
40.58MB
MD5
d5a030b18608aaa59cfbcc3a9ec15089
SHA1
7a61151da6714187821ddeeb7c1f5aa4f0da2863
SHA256
efdc01f96ca2090d5d0359aae24b84f7f465bfd6f879004f34f754b1d18ca01f
病毒检测
无法判定

应用基础信息

应用名称
依偎语音
包名
com.yixing.snugglelive
主活动
com.yixing.snugglelive.ui.main.activity.SplashActivity
目标SDK
33
最小SDK
21
版本号
1.30
子版本号
30
加固信息
未加壳

反编译与源码导出

Manifest文件 查看
Java源代码 查看 -- 下载

文件结构与资源列表

    应用签名证书信息

    二进制文件已签名
    v1 签名: True
    v2 签名: True
    v3 签名: False
    v4 签名: False
    主题: C=610000, ST=SC, L=CD, O=AdvanceTogether, OU=Yixing, CN=SnuggleLive
    签名算法: rsassa_pkcs1v15
    有效期自: 2023-12-14 08:11:16+00:00
    有效期至: 2053-12-06 08:11:16+00:00
    发行人: C=610000, ST=SC, L=CD, O=AdvanceTogether, OU=Yixing, CN=SnuggleLive
    序列号: 0x54522ded
    哈希算法: sha256
    证书MD5: 78468a0d647f705530b84532f119bb57
    证书SHA1: a3167b72a7ac1f4ec9c27547f25d0892f8a69edb
    证书SHA256: abba0292d447749e4cc6c9b788d08a2328a97d4361abff96939615c1f7e068fa
    证书SHA512: 5bdd960875bb1f29cec0a7a28f849d1b4c7011b86afd437a7898e3a589ab1eae188f18654d317aecbccb2cc64eb3580e150bbda65375c5b9a74d8ea71a3f3be7
    公钥算法: rsa
    密钥长度: 2048
    指纹: 6181ceca824f1eb56d6abbc3f7ac47a261a22633166869b9800bbf73543d95da
    找到 1 个唯一证书

    权限声明与风险分级

    权限名称 安全等级 权限内容 权限描述 关联代码
    android.permission.RECORD_AUDIO 危险 获取录音权限 允许应用程序获取录音权限。
    android.permission.MODIFY_AUDIO_SETTINGS 危险 允许应用修改全局音频设置 允许应用程序修改全局音频设置,如音量。多用于消息语音功能。
    android.permission.WAKE_LOCK 危险 防止手机休眠 允许应用程序防止手机休眠,在手机屏幕关闭后后台进程仍然运行。
    android.permission.RECEIVE_USER_PRESENT 普通 允许程序唤醒机器 允许应用可以接收点亮屏幕或解锁广播。
    android.permission.READ_PHONE_STATE 危险 读取手机状态和标识 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。
    android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
    android.permission.READ_MEDIA_IMAGES 危险 允许从外部存储读取图像文件 允许应用程序从外部存储读取图像文件。
    android.permission.READ_MEDIA_AUDIO 危险 允许从外部存储读取音频文件 允许应用程序从外部存储读取音频文件。
    android.permission.READ_MEDIA_VIDEO 危险 允许从外部存储读取视频文件 允许应用程序从外部存储读取视频文件。
    android.permission.WRITE_SETTINGS 危险 修改全局系统设置 允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。
    android.permission.VIBRATE 普通 控制振动器 允许应用程序控制振动器,用于消息通知振动功能。
    android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
    android.permission.MOUNT_UNMOUNT_FILESYSTEMS 危险 装载和卸载文件系统 允许应用程序装载和卸载可移动存储器的文件系统。
    android.permission.CAMERA 危险 拍照和录制视频 允许应用程序拍摄照片和视频,且允许应用程序收集相机在任何时候拍到的图像。
    android.permission.FLASHLIGHT 普通 控制闪光灯 允许应用程序控制闪光灯。
    android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
    android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
    android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
    android.permission.ACCESS_FINE_LOCATION 危险 获取精确位置 通过GPS芯片接收卫星的定位信息,定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
    android.permission.ACCESS_COARSE_LOCATION 危险 获取粗略位置 通过WiFi或移动基站的方式获取用户错略的经纬度信息,定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
    android.permission.CHANGE_NETWORK_STATE 危险 改变网络连通性 允许应用程序改变网络连通性。
    android.permission.CHANGE_WIFI_STATE 危险 改变Wi-Fi状态 允许应用程序改变Wi-Fi状态。
    com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE 普通 Google 定义的权限 由 Google 定义的自定义权限。

    证书安全合规分析

    高危
    0
    警告
    1
    信息
    1
    标题 严重程度 描述信息
    已签名应用 信息 应用程序已使用代码签名证书进行签名

    Manifest 配置安全分析

    高危
    0
    警告
    6
    信息
    0
    屏蔽
    0
    序号 问题 严重程度 描述信息 操作
    1 应用程序可以安装在有漏洞的已更新 Android 版本上
    Android 5.0-5.0.2, [minSdk=21]
    信息 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
    2 应用程序已启用明文网络流量
    [android:usesCleartextTraffic=true]
    警告 应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。
    3 应用程序数据可以被备份
    [android:allowBackup=true]
    警告 这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。
    4 Activity设置了TaskAffinity属性
    (com.yixing.snugglelive.wxapi.WXEntryActivity)
    警告 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
    5 Activity (com.yixing.snugglelive.wxapi.WXEntryActivity) 未被保护。
    [android:exported=true]
    警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
    6 Activity设置了TaskAffinity属性
    (com.yixing.snugglelive.wxapi.WXPayEntryActivity)
    警告 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
    7 Activity (com.yixing.snugglelive.wxapi.WXPayEntryActivity) 未被保护。
    [android:exported=true]
    警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

    可浏览 Activity 组件分析

    ACTIVITY INTENT

    网络通信安全风险分析

    序号 范围 严重级别 描述

    API调用分析

    API功能 源码文件
    一般功能-> 获取系统服务(getSystemService)
    com/geetest/onelogin/f/e.java
    com/geetest/onelogin/n/g/b.java
    com/geetest/onelogin/u/c.java
    com/geetest/onelogin/u/c0.java
    com/geetest/onelogin/u/l.java
    com/geetest/onelogin/u/m.java
    com/geetest/onelogin/u/n.java
    com/geetest/onelogin/u/o.java
    com/geetest/onelogin/view/c.java
    com/geetest/onepassv2/b/c.java
    com/geetest/onepassv2/e/b.java
    com/live/sdk/camera/CameraUtils.java
    com/live/sdk/screen/ScreenRecordActivity.java
    com/live/sdk/ui/CameraLivingView.java
    com/live/sdk/ui/CameraView.java
    com/lljjcoder/style/citypickerview/widget/wheel/adapters/AbstractWheelTextAdapter.java
    com/sdk/b/a.java
    com/sdk/g/a.java
    com/sdk/j/b.java
    com/sdk/o/a.java
    com/sdk/o/b.java
    com/sdk/t/a.java
    com/sdk/y/b.java
    com/wangsu/libwswebrtc/b/a.java
    com/yalantis/ucrop/util/BitmapLoadUtils.java
    com/yixing/snugglelive/Application.java
    com/yixing/snugglelive/global/NetworkConnectChangedReceiver.java
    com/yixing/snugglelive/ui/base/AppActivity.java
    com/yixing/snugglelive/ui/live/activity/OneOnOneVideoActivity.java
    com/yixing/snugglelive/ui/live/activity/VoicePartyActivity.java
    com/yixing/snugglelive/ui/login/activity/LoginActivity.java
    com/yixing/snugglelive/ui/main/activity/MainActivity.java
    com/yixing/snugglelive/ui/main/activity/ProfileHomeActivity.java
    com/yixing/snugglelive/ui/main/activity/UserProfileActivity.java
    com/yixing/snugglelive/ui/main/fragment/AnchorMineFragment.java
    com/yixing/snugglelive/ui/main/fragment/ChatMsgFragment.java
    com/yixing/snugglelive/ui/main/fragment/NearbyFragment.java
    com/yixing/snugglelive/ui/main/fragment/NormalUserMineFragment.java
    com/yixing/snugglelive/ui/mine/activity/PublishBlogActivity.java
    com/yixing/snugglelive/ui/mine/adapter/PaymentOrdersAdapter.java
    com/yixing/snugglelive/utils/ActivityUtil.java
    com/yixing/snugglelive/utils/ProcessUtil.java
    com/yixing/snugglelive/widget/dialog/SimpleProfilePartyDialog.java
    com/yixing/snugglelive/widget/userguideview/MeasureUtil.java
    io/branch/referral/BranchUtil.java
    io/branch/referral/DeviceInfo.java
    io/branch/referral/ShareLinkManager.java
    io/branch/referral/SystemObserver.java
    io/github/inflationx/viewpump/ViewPumpContextWrapper.java
    org/webrtc/Camera2Capturer.java
    org/webrtc/Camera2Enumerator.java
    org/webrtc/CameraSession.java
    org/webrtc/NetworkMonitorAutoDetect.java
    org/webrtc/ScreenCapturerAndroid.java
    org/webrtc/audio/JavaAudioDeviceModule.java
    org/webrtc/audio/WebRtcAudioManager.java
    org/webrtc/voiceengine/WebRtcAudioManager.java
    org/webrtc/voiceengine/WebRtcAudioTrack.java
    org/webrtc/voiceengine/WebRtcAudioUtils.java
    组件-> 启动 Activity
    com/geetest/onelogin/activity/OneLoginWebActivity.java
    com/geetest/onelogin/m/c.java
    com/live/sdk/screen/ScreenRecordActivity.java
    com/lljjcoder/style/citythreelist/CityActivity.java
    com/lljjcoder/style/citythreelist/ProvinceActivity.java
    com/yalantis/ucrop/UCrop.java
    com/yixing/snugglelive/Application.java
    com/yixing/snugglelive/core/fcpermission/FcPermissions.java
    com/yixing/snugglelive/core/fcpermission/FcPermissionsB.java
    com/yixing/snugglelive/core/swipe/SwipeBackAppCompatActivity.java
    com/yixing/snugglelive/global/RechargeDialogUtils.java
    com/yixing/snugglelive/ui/base/AppActivity.java
    com/yixing/snugglelive/ui/base/AppFragment.java
    com/yixing/snugglelive/ui/live/activity/OneOnOneVideoActivity.java
    com/yixing/snugglelive/ui/live/activity/PartyRoomRuleActivity.java
    com/yixing/snugglelive/ui/live/activity/PrivateChatEndActtivity.java
    com/yixing/snugglelive/ui/live/activity/PrivateChatReviewActivity.java
    com/yixing/snugglelive/ui/live/activity/UpdatePartySettingActivity.java
    com/yixing/snugglelive/ui/live/activity/VideoCallingActivity.java
    com/yixing/snugglelive/ui/live/activity/VoicePartyActivity.java
    com/yixing/snugglelive/ui/live/activity/VoicePartyEndActivity.java
    com/yixing/snugglelive/ui/live/adpapter/PartyOnlineMembersAdapter.java
    com/yixing/snugglelive/ui/live/fragment/GameRouletteFragment.java
    com/yixing/snugglelive/ui/live/fragment/GameTeenPattiFragment.java
    com/yixing/snugglelive/ui/live/fragment/GiftParentFragmernt.java
    com/yixing/snugglelive/ui/login/activity/LoginActivity.java
    com/yixing/snugglelive/ui/login/activity/PhoneLoginActivity.java
    com/yixing/snugglelive/ui/login/activity/RegisterActivity.java
    com/yixing/snugglelive/ui/login/activity/ResetPasswordActivity.java
    com/yixing/snugglelive/ui/main/activity/ChatMsgActivity.java
    com/yixing/snugglelive/ui/main/activity/FullScreenVideoActivity.java
    com/yixing/snugglelive/ui/main/activity/MainActivity.java
    com/yixing/snugglelive/ui/main/activity/OpenVoicePartyActivity.java
    com/yixing/snugglelive/ui/main/activity/ProfileHomeActivity.java
    com/yixing/snugglelive/ui/main/activity/SelectPhotoFromAlbumActivity.java
    com/yixing/snugglelive/ui/main/activity/SplashActivity.java
    com/yixing/snugglelive/ui/main/activity/UserProfileActivity.java
    com/yixing/snugglelive/ui/main/activity/VideoIncomingCallActivity.java
    com/yixing/snugglelive/ui/main/adapter/BlogCommentsAdapter.java
    com/yixing/snugglelive/ui/main/adapter/NearbyUserAdapter.java
    com/yixing/snugglelive/ui/main/adapter/NewUserAdapter.java
    com/yixing/snugglelive/ui/main/adapter/OnLineUserAdapter.java
    com/yixing/snugglelive/ui/main/adapter/PhotoAlbumAdapter.java
    com/yixing/snugglelive/ui/main/adapter/PostPhotoAdapter.java
    com/yixing/snugglelive/ui/main/adapter/RecommendUserAdapter.java
    com/yixing/snugglelive/ui/main/adapter/SearchUserAdapter.java
    com/yixing/snugglelive/ui/main/adapter/VoicePartyAdapter.java
    com/yixing/snugglelive/ui/main/fragment/AnchorMineFragment.java
    com/yixing/snugglelive/ui/main/fragment/ChatMsgFragment.java
    com/yixing/snugglelive/ui/main/fragment/MutualLookFragment.java
    com/yixing/snugglelive/ui/main/fragment/NearbyFragment.java
    com/yixing/snugglelive/ui/main/fragment/NormalUserMineFragment.java
    com/yixing/snugglelive/ui/main/fragment/VoicePartyFragment.java
    com/yixing/snugglelive/ui/main/holder/RecycleItemBroadcasterBlogHolder.java
    com/yixing/snugglelive/ui/main/holder/RecyclerItemBlogHolder.java
    com/yixing/snugglelive/ui/mine/activity/AboutSnuggleActivity.java
    com/yixing/snugglelive/ui/mine/activity/AlbumVideoPreviewActivity.java
    com/yixing/snugglelive/ui/mine/activity/CustomerServiceActivity.java
    com/yixing/snugglelive/ui/mine/activity/EditProfileActivity.java
    com/yixing/snugglelive/ui/mine/activity/MyAlbumActivity.java
    com/yixing/snugglelive/ui/mine/activity/MyBlogActivity.java
    com/yixing/snugglelive/ui/mine/activity/MyWalletActivity.java
    com/yixing/snugglelive/ui/mine/activity/OpenVIPActivity.java
    com/yixing/snugglelive/ui/mine/activity/PaymentWebviewActivity.java
    com/yixing/snugglelive/ui/mine/activity/PublishBlogActivity.java
    com/yixing/snugglelive/ui/mine/activity/RechargeActivity.java
    com/yixing/snugglelive/ui/mine/activity/SettingActivity.java
    com/yixing/snugglelive/ui/mine/activity/VIPCenterActivity.java
    com/yixing/snugglelive/ui/mine/activity/WithdrawBonusActivity.java
    com/yixing/snugglelive/ui/mine/adapter/AnchorFansAdapter.java
    com/yixing/snugglelive/ui/mine/adapter/FollowingAnchorsAdapter.java
    com/yixing/snugglelive/ui/mine/adapter/MineAlbumAdapter.java
    com/yixing/snugglelive/ui/mine/adapter/PrivateChatRecordsAdapter.java
    com/yixing/snugglelive/ui/mine/adapter/WithdrawBankCardAdapter.java
    com/yixing/snugglelive/utils/ActivityManager.java
    com/yixing/snugglelive/utils/ActivityUtil.java
    com/yixing/snugglelive/widget/ImageFillWebViewClient.java
    com/yixing/snugglelive/widget/dialog/RealNameAthTipDialog.java
    com/yixing/snugglelive/widget/dialog/SimpleProfilePartyDialog.java
    com/yixing/snugglelive/widget/dialog/UserAgreementAndPrivacyPolicyDialog.java
    com/yixing/snugglelive/widget/dialog/VideoIncomingCallDialog.java
    io/branch/referral/Branch.java
    io/branch/referral/InstantAppUtil.java
    io/branch/referral/ShareLinkManager.java
    io/branch/referral/util/SharingUtil.java
    io/branch/referral/validators/DeepLinkRoutingValidator.java
    一般功能-> IPC通信
    com/geetest/onelogin/activity/OneLoginActivity.java
    com/geetest/onelogin/activity/OneLoginWebActivity.java
    com/geetest/onelogin/f/e.java
    com/geetest/onelogin/i/b.java
    com/geetest/onelogin/listener/AbstractOneLoginListener.java
    com/geetest/onelogin/listener/a.java
    com/geetest/onelogin/m/c.java
    com/geetest/onelogin/n/g/b.java
    com/geetest/onepassv2/e/b.java
    com/live/sdk/controller/video/ScreenVideoController.java
    com/live/sdk/screen/ScreenRecordActivity.java
    com/lljjcoder/style/citylist/CityListSelectActivity.java
    com/lljjcoder/style/citythreelist/AreaActivity.java
    com/lljjcoder/style/citythreelist/CityActivity.java
    com/lljjcoder/style/citythreelist/ProvinceActivity.java
    com/sdk/base/module/permission/PermissionActivity.java
    com/wangsu/libwswebrtc/b/a.java
    com/yalantis/ucrop/UCrop.java
    com/yalantis/ucrop/UCropActivity.java
    com/yalantis/ucrop/UCropFragment.java
    com/yixing/snugglelive/Application.java
    com/yixing/snugglelive/R.java
    com/yixing/snugglelive/core/fcpermission/FcPermissions.java
    com/yixing/snugglelive/core/fcpermission/FcPermissionsB.java
    com/yixing/snugglelive/core/swipe/SwipeBackAppCompatActivity.java
    com/yixing/snugglelive/global/NetworkConnectChangedReceiver.java
    com/yixing/snugglelive/global/RechargeDialogUtils.java
    com/yixing/snugglelive/ui/base/AppActivity.java
    com/yixing/snugglelive/ui/base/AppFragment.java
    com/yixing/snugglelive/ui/live/activity/OneOnOneVideoActivity.java
    com/yixing/snugglelive/ui/live/activity/PartyRoomRuleActivity.java
    com/yixing/snugglelive/ui/live/activity/PrivateChatEndActtivity.java
    com/yixing/snugglelive/ui/live/activity/PrivateChatReviewActivity.java
    com/yixing/snugglelive/ui/live/activity/UpdatePartySettingActivity.java
    com/yixing/snugglelive/ui/live/activity/UserPartySettingsActivity.java
    com/yixing/snugglelive/ui/live/activity/VideoCallingActivity.java
    com/yixing/snugglelive/ui/live/activity/VoicePartyActivity.java
    com/yixing/snugglelive/ui/live/activity/VoicePartyEndActivity.java
    com/yixing/snugglelive/ui/live/adpapter/PartyOnlineMembersAdapter.java
    com/yixing/snugglelive/ui/live/fragment/GameRouletteFragment.java
    com/yixing/snugglelive/ui/live/fragment/GameTeenPattiFragment.java
    com/yixing/snugglelive/ui/live/fragment/GiftParentFragmernt.java
    com/yixing/snugglelive/ui/login/activity/LoginActivity.java
    com/yixing/snugglelive/ui/login/activity/PhoneLoginActivity.java
    com/yixing/snugglelive/ui/login/activity/RegisterActivity.java
    com/yixing/snugglelive/ui/login/activity/ResetPasswordActivity.java
    com/yixing/snugglelive/ui/main/activity/BlogCommentsActivity.java
    com/yixing/snugglelive/ui/main/activity/BlogPreviewPhotoActivity.java
    com/yixing/snugglelive/ui/main/activity/ChatMsgActivity.java
    com/yixing/snugglelive/ui/main/activity/FullScreenVideoActivity.java
    com/yixing/snugglelive/ui/main/activity/MainActivity.java
    com/yixing/snugglelive/ui/main/activity/OpenVoicePartyActivity.java
    com/yixing/snugglelive/ui/main/activity/ProfileHomeActivity.java
    com/yixing/snugglelive/ui/main/activity/SelectPartyBackgroundActivity.java
    com/yixing/snugglelive/ui/main/activity/SelectPhotoFromAlbumActivity.java
    com/yixing/snugglelive/ui/main/activity/SplashActivity.java
    com/yixing/snugglelive/ui/main/activity/UserProfileActivity.java
    com/yixing/snugglelive/ui/main/activity/VideoIncomingCallActivity.java
    com/yixing/snugglelive/ui/main/adapter/BlogCommentsAdapter.java
    com/yixing/snugglelive/ui/main/adapter/NearbyUserAdapter.java
    com/yixing/snugglelive/ui/main/adapter/NewUserAdapter.java
    com/yixing/snugglelive/ui/main/adapter/OnLineUserAdapter.java
    com/yixing/snugglelive/ui/main/adapter/PhotoAlbumAdapter.java
    com/yixing/snugglelive/ui/main/adapter/PostPhotoAdapter.java
    com/yixing/snugglelive/ui/main/adapter/RecommendUserAdapter.java
    com/yixing/snugglelive/ui/main/adapter/SearchUserAdapter.java
    com/yixing/snugglelive/ui/main/adapter/VoicePartyAdapter.java
    com/yixing/snugglelive/ui/main/fragment/AnchorMineFragment.java
    com/yixing/snugglelive/ui/main/fragment/ChatMsgFragment.java
    com/yixing/snugglelive/ui/main/fragment/MutualLookFragment.java
    com/yixing/snugglelive/ui/main/fragment/NearbyFragment.java
    com/yixing/snugglelive/ui/main/fragment/NormalUserMineFragment.java
    com/yixing/snugglelive/ui/main/fragment/VoicePartyFragment.java
    com/yixing/snugglelive/ui/main/holder/RecycleItemBroadcasterBlogHolder.java
    com/yixing/snugglelive/ui/main/holder/RecyclerItemBlogHolder.java
    com/yixing/snugglelive/ui/mine/activity/AboutSnuggleActivity.java
    com/yixing/snugglelive/ui/mine/activity/AlbumPreviewPhotoActivity.java
    com/yixing/snugglelive/ui/mine/activity/AlbumVideoPreviewActivity.java
    com/yixing/snugglelive/ui/mine/activity/CustomerServiceActivity.java
    com/yixing/snugglelive/ui/mine/activity/EditActivity.java
    com/yixing/snugglelive/ui/mine/activity/EditProfileActivity.java
    com/yixing/snugglelive/ui/mine/activity/MyAlbumActivity.java
    com/yixing/snugglelive/ui/mine/activity/MyBlogActivity.java
    com/yixing/snugglelive/ui/mine/activity/MyWalletActivity.java
    com/yixing/snugglelive/ui/mine/activity/OpenVIPActivity.java
    com/yixing/snugglelive/ui/mine/activity/PayeeEditActivity.java
    com/yixing/snugglelive/ui/mine/activity/PaymentWebviewActivity.java
    com/yixing/snugglelive/ui/mine/activity/PrivacyPolicyActivity.java
    com/yixing/snugglelive/ui/mine/activity/PublishBlogActivity.java
    com/yixing/snugglelive/ui/mine/activity/RechargeActivity.java
    com/yixing/snugglelive/ui/mine/activity/SettingActivity.java
    com/yixing/snugglelive/ui/mine/activity/VIPCenterActivity.java
    com/yixing/snugglelive/ui/mine/activity/WithdrawBonusActivity.java
    com/yixing/snugglelive/ui/mine/adapter/AnchorFansAdapter.java
    com/yixing/snugglelive/ui/mine/adapter/FollowingAnchorsAdapter.java
    com/yixing/snugglelive/ui/mine/adapter/MineAlbumAdapter.java
    com/yixing/snugglelive/ui/mine/adapter/PrivateChatRecordsAdapter.java
    com/yixing/snugglelive/ui/mine/adapter/WithdrawBankCardAdapter.java
    com/yixing/snugglelive/utils/ActivityManager.java
    com/yixing/snugglelive/utils/ActivityUtil.java
    com/yixing/snugglelive/widget/ImageFillWebViewClient.java
    com/yixing/snugglelive/widget/dialog/RealNameAthTipDialog.java
    com/yixing/snugglelive/widget/dialog/SimpleProfilePartyDialog.java
    com/yixing/snugglelive/widget/dialog/UserAgreementAndPrivacyPolicyDialog.java
    com/yixing/snugglelive/widget/dialog/VideoIncomingCallDialog.java
    com/yixing/snugglelive/wxapi/WXEntryActivity.java
    com/yixing/snugglelive/wxapi/WXPayEntryActivity.java
    io/branch/receivers/SharingBroadcastReceiver.java
    io/branch/referral/Branch.java
    io/branch/referral/BranchActivityLifecycleObserver.java
    io/branch/referral/Defines.java
    io/branch/referral/InstantAppUtil.java
    io/branch/referral/PrefHelper.java
    io/branch/referral/ServerRequest.java
    io/branch/referral/ServerRequestInitSession.java
    io/branch/referral/ServerRequestQueue.java
    io/branch/referral/ShareLinkManager.java
    io/branch/referral/SystemObserver.java
    io/branch/referral/TrackingController.java
    io/branch/referral/util/SharingUtil.java
    io/branch/referral/validators/DeepLinkRoutingValidator.java
    io/branch/referral/validators/IntegrationValidator.java
    org/webrtc/NetworkMonitorAutoDetect.java
    org/webrtc/ScreenCapturerAndroid.java
    隐私数据-> 剪贴板数据读写操作
    隐私数据-> 获取已安装的应用程序
    一般功能-> 文件操作
    com/geetest/onelogin/c/a.java
    com/geetest/onelogin/config/b.java
    com/geetest/onelogin/f/a.java
    com/geetest/onelogin/f/d.java
    com/geetest/onelogin/f/e.java
    com/geetest/onelogin/g/b/a.java
    com/geetest/onelogin/g/c/c.java
    com/geetest/onelogin/g/c/h.java
    com/geetest/onelogin/h/b.java
    com/geetest/onelogin/h/e.java
    com/geetest/onelogin/h/h.java
    com/geetest/onelogin/i/c.java
    com/geetest/onelogin/j/b.java
    com/geetest/onelogin/u/f.java
    com/geetest/onelogin/u/h.java
    com/geetest/onelogin/u/j.java
    com/geetest/onelogin/u/k.java
    com/geetest/onelogin/u/u.java
    com/geetest/onelogin/view/GTVideoView.java
    com/geetest/onelogin/view/f/b.java
    com/geetest/onepassv2/c/b.java
    com/geetest/onepassv2/h/a.java
    com/hp/hpl/sparta/Document.java
    com/hp/hpl/sparta/Element.java
    com/hp/hpl/sparta/Node.java
    com/hp/hpl/sparta/NodeListWithPosition.java
    com/hp/hpl/sparta/ParseByteStream.java
    com/hp/hpl/sparta/ParseCharStream.java
    com/hp/hpl/sparta/Parser.java
    com/hp/hpl/sparta/Text.java
    com/hp/hpl/sparta/xpath/ExprFactory.java
    com/hp/hpl/sparta/xpath/SimpleStreamTokenizer.java
    com/hp/hpl/sparta/xpath/Step.java
    com/hp/hpl/sparta/xpath/XPath.java
    com/hp/hpl/sparta/xpath/XPathException.java
    com/live/sdk/camera/CameraHolder.java
    com/live/sdk/stream/amf/AmfArray.java
    com/live/sdk/stream/amf/AmfBoolean.java
    com/live/sdk/stream/amf/AmfData.java
    com/live/sdk/stream/amf/AmfDecoder.java
    com/live/sdk/stream/amf/AmfMap.java
    com/live/sdk/stream/amf/AmfNull.java
    com/live/sdk/stream/amf/AmfNumber.java
    com/live/sdk/stream/amf/AmfObject.java
    com/live/sdk/stream/amf/AmfString.java
    com/live/sdk/stream/amf/AmfUndefined.java
    com/live/sdk/stream/amf/Util.java
    com/live/sdk/stream/sender/local/LocalSender.java
    com/live/sdk/stream/sender/rtmp/Util.java
    com/live/sdk/stream/sender/rtmp/io/ReadThread.java
    com/live/sdk/stream/sender/rtmp/io/RtmpConnection.java
    com/live/sdk/stream/sender/rtmp/io/RtmpDecoder.java
    com/live/sdk/stream/sender/rtmp/io/StoreChunk.java
    com/live/sdk/stream/sender/rtmp/io/WriteThread.java
    com/live/sdk/stream/sender/rtmp/packets/Abort.java
    com/live/sdk/stream/sender/rtmp/packets/Acknowledgement.java
    com/live/sdk/stream/sender/rtmp/packets/Chunk.java
    com/live/sdk/stream/sender/rtmp/packets/ChunkHeader.java
    com/live/sdk/stream/sender/rtmp/packets/Command.java
    com/live/sdk/stream/sender/rtmp/packets/ContentData.java
    com/live/sdk/stream/sender/rtmp/packets/Data.java
    com/live/sdk/stream/sender/rtmp/packets/Handshake.java
    com/live/sdk/stream/sender/rtmp/packets/SetChunkSize.java
    com/live/sdk/stream/sender/rtmp/packets/SetPeerBandwidth.java
    com/live/sdk/stream/sender/rtmp/packets/UserControl.java
    com/live/sdk/stream/sender/rtmp/packets/VariableBodyRtmpPacket.java
    com/live/sdk/stream/sender/rtmp/packets/WindowAckSize.java
    com/live/sdk/video/GLSLFileUtils.java
    com/lljjcoder/utils/utils.java
    com/nineoldandroids/animation/AnimatorInflater.java
    com/opensource/svgaplayer/SVGACache.java
    com/opensource/svgaplayer/SVGADynamicEntity$setDynamicImage$1.java
    com/opensource/svgaplayer/SVGAParser$decodeFromInputStream$1.java
    com/opensource/svgaplayer/SVGAParser$decodeFromSVGAFileCacheKey$1.java
    com/opensource/svgaplayer/SVGAParser.java
    com/opensource/svgaplayer/SVGASoundManager.java
    com/opensource/svgaplayer/SVGAVideoEntity.java
    com/opensource/svgaplayer/proto/AudioEntity.java
    com/opensource/svgaplayer/proto/FrameEntity.java
    com/opensource/svgaplayer/proto/Layout.java
    com/opensource/svgaplayer/proto/MovieEntity.java
    com/opensource/svgaplayer/proto/MovieParams.java
    com/opensource/svgaplayer/proto/ShapeEntity.java
    com/opensource/svgaplayer/proto/SpriteEntity.java
    com/opensource/svgaplayer/proto/Transform.java
    com/sdk/b/a.java
    com/sdk/b/d.java
    com/sdk/b/e.java
    com/sdk/b/f.java
    com/sdk/base/framework/bean/OauthResultMode.java
    com/sdk/base/framework/utils/log/LogFile.java
    com/sdk/d/a.java
    com/sdk/d/c.java
    com/sdk/e/f.java
    com/sdk/k/a.java
    com/sdk/q/d.java
    com/wangsu/httpclient/WsRTCHttp.java
    com/wangsu/libwswebrtc/b/b.java
    com/yalantis/ucrop/task/BitmapCropTask.java
    com/yalantis/ucrop/task/BitmapLoadTask.java
    com/yalantis/ucrop/util/BitmapLoadUtils.java
    com/yalantis/ucrop/util/FileUtils.java
    com/yalantis/ucrop/util/ImageHeaderParser.java
    com/yixing/snugglelive/Application.java
    com/yixing/snugglelive/BaseUrlInterceptor.java
    com/yixing/snugglelive/engine/persistentcookiejar/persistence/SerializableCookie.java
    com/yixing/snugglelive/engine/persistentcookiejar/persistence/SharedPrefsCookiePersistor.java
    com/yixing/snugglelive/exoplayer/listener/Listener.java
    com/yixing/snugglelive/exoplayer/trackselector/BolaTrackSelection.java
    com/yixing/snugglelive/global/BankCardUtils.java
    com/yixing/snugglelive/global/HttpUtils.java
    com/yixing/snugglelive/global/LocationUtils.java
    com/yixing/snugglelive/global/OkHttpGlideModule.java
    com/yixing/snugglelive/global/OkHttpStreamFetcher.java
    com/yixing/snugglelive/global/OkHttpUrlLoader.java
    com/yixing/snugglelive/setting/SharedPrefsUtils.java
    com/yixing/snugglelive/ui/main/activity/FullScreenVideoActivity.java
    com/yixing/snugglelive/ui/main/activity/OpenVoicePartyActivity.java
    com/yixing/snugglelive/ui/main/activity/ProfileHomeActivity.java
    com/yixing/snugglelive/ui/main/activity/SelectPhotoFromAlbumActivity.java
    com/yixing/snugglelive/ui/main/holder/RecycleItemBroadcasterBlogHolder.java
    com/yixing/snugglelive/ui/main/holder/RecyclerItemBlogHolder.java
    com/yixing/snugglelive/ui/mine/activity/AlbumVideoPreviewActivity.java
    com/yixing/snugglelive/ui/mine/activity/EditProfileActivity.java
    com/yixing/snugglelive/ui/mine/activity/MyAlbumActivity.java
    com/yixing/snugglelive/ui/mine/activity/PublishBlogActivity.java
    com/yixing/snugglelive/utils/BitmapUtil.java
    com/yixing/snugglelive/utils/DataCleanManager.java
    com/yixing/snugglelive/utils/DimenTool.java
    com/yixing/snugglelive/utils/FileSizeUtil.java
    com/yixing/snugglelive/utils/FileUtil.java
    com/yixing/snugglelive/utils/LanguageUtil.java
    com/yixing/snugglelive/utils/keywordfilter/WordFilter.java
    com/yixing/snugglelive/websocket/WssWebSocketClientUtil.java
    io/branch/referral/AppStoreReferrer.java
    io/branch/referral/Base64.java
    io/branch/referral/Branch.java
    io/branch/referral/BranchJsonConfig.java
    io/branch/referral/BranchLogger.java
    io/branch/referral/BranchPreinstall.java
    io/branch/referral/BranchUtil.java
    io/branch/referral/NativeShareLinkManager.java
    io/branch/referral/PrefHelper.java
    io/branch/referral/QRCode/BranchQRCode.java
    io/branch/referral/ServerRequestQueue.java
    io/branch/referral/UniversalResourceAnalyser.java
    io/branch/referral/network/BranchRemoteInterfaceUrlConnection.java
    master/flame/danmaku/danmaku/loader/ILoader.java
    master/flame/danmaku/danmaku/loader/android/AcFunDanmakuLoader.java
    master/flame/danmaku/danmaku/loader/android/BiliDanmakuLoader.java
    master/flame/danmaku/danmaku/parser/android/AndroidFileSource.java
    master/flame/danmaku/danmaku/parser/android/JSONSource.java
    master/flame/danmaku/danmaku/util/IOUtils.java
    net/sourceforge/pinyin4j/ChineseToPinyinResource.java
    net/sourceforge/pinyin4j/GwoyeuRomatzyhResource.java
    net/sourceforge/pinyin4j/PinyinRomanizationResource.java
    net/sourceforge/pinyin4j/ResourceHelper.java
    org/checkerframework/checker/signedness/SignednessUtil.java
    org/greenrobot/greendao/DbUtils.java
    org/greenrobot/greendao/query/CloseableListIterator.java
    org/greenrobot/greendao/query/LazyList.java
    org/greenrobot/greendao/test/DbTest.java
    org/java_websocket/AbstractWrappedByteChannel.java
    org/java_websocket/SSLSocketChannel.java
    org/java_websocket/SSLSocketChannel2.java
    org/java_websocket/SocketChannelIOHelper.java
    org/java_websocket/WebSocketImpl.java
    org/java_websocket/WrappedByteChannel.java
    org/java_websocket/client/AbstractClientProxyChannel.java
    org/java_websocket/client/WebSocketClient.java
    org/java_websocket/server/CustomSSLWebSocketServerFactory.java
    org/java_websocket/server/DefaultSSLWebSocketServerFactory.java
    org/java_websocket/server/WebSocketServer.java
    org/java_websocket/util/Base64.java
    org/java_websocket/util/Charsetfunctions.java
    org/jsoup/Connection.java
    org/jsoup/HttpStatusException.java
    org/jsoup/Jsoup.java
    org/jsoup/UnsupportedMimeTypeException.java
    org/jsoup/examples/HtmlToPlainText.java
    org/jsoup/examples/ListLinks.java
    org/jsoup/helper/DataUtil.java
    org/jsoup/helper/HttpConnection.java
    org/jsoup/helper/W3CDom.java
    org/jsoup/nodes/Entities.java
    org/webrtc/Camera1Session.java
    org/webrtc/FileVideoCapturer.java
    org/webrtc/HardwareVideoEncoder.java
    org/webrtc/JniHelper.java
    org/webrtc/Logging.java
    org/webrtc/MediaCodecWrapperFactory.java
    org/webrtc/MediaCodecWrapperFactoryImpl.java
    org/webrtc/VideoCapabilityParser.java
    org/webrtc/VideoFileRenderer.java
    tv/cjump/jni/DeviceUtils.java
    网络通信-> HTTP建立连接
    网络通信-> URLConnection com/opensource/svgaplayer/SVGADynamicEntity$setDynamicImage$1.java
    com/opensource/svgaplayer/SVGAParser.java
    隐私数据-> 拍照摄像 com/live/sdk/camera/CameraHolder.java
    org/webrtc/Camera1Session.java
    网络通信-> TCP套接字
    一般功能-> 获取网络接口信息
    一般功能-> 获取活动网路信息
    设备指纹-> getSimOperator com/geetest/onelogin/u/n.java
    com/sdk/g/a.java
    一般功能-> 设置手机铃声,媒体音量
    网络通信-> HTTPS建立连接
    网络通信-> OkHttpClient Connection
    调用java反射机制
    cn/bingoogolapple/bgabanner/BGAViewPager.java
    com/geetest/onelogin/config/b.java
    com/geetest/onelogin/h/a.java
    com/geetest/onelogin/i/b.java
    com/geetest/onelogin/j/b.java
    com/geetest/onelogin/k/e.java
    com/geetest/onelogin/k/g.java
    com/geetest/onelogin/n/f/a.java
    com/geetest/onelogin/u/a0.java
    com/geetest/onelogin/u/b.java
    com/geetest/onelogin/u/c.java
    com/geetest/onelogin/u/g.java
    com/geetest/onelogin/u/l.java
    com/geetest/onelogin/u/o.java
    com/geetest/onelogin/u/r.java
    com/geetest/onelogin/u/t.java
    com/geetest/onepassv2/b/c.java
    com/mcxiaoke/bus/Helper.java
    com/mcxiaoke/bus/MethodInfo.java
    com/mcxiaoke/bus/method/MethodConverter.java
    com/mcxiaoke/bus/method/MethodHelper.java
    com/nineoldandroids/animation/PropertyValuesHolder.java
    com/nineoldandroids/util/ReflectiveProperty.java
    com/opensource/svgaplayer/SVGAImageView.java
    com/opensource/svgaplayer/drawer/SVGACanvasDrawer.java
    com/sdk/j/b.java
    com/sdk/l/a.java
    com/yixing/snugglelive/ui/base/AppActivity.java
    com/yixing/snugglelive/utils/ActivityTool.java
    com/yixing/snugglelive/utils/ActivityUtil.java
    com/yixing/snugglelive/utils/ProcessUtil.java
    com/yixing/snugglelive/widget/radiogroup/MultiLineRadioGroup.java
    com/yixing/snugglelive/widget/viewpager/Auto2ViewPager.java
    io/branch/referral/Branch.java
    io/branch/referral/BranchPreinstall.java
    io/branch/referral/InstantAppUtil.java
    io/branch/referral/SystemObserver.java
    io/branch/referral/util/DependencyUtilsKt.java
    io/github/inflationx/calligraphy3/Calligraphy.java
    io/github/inflationx/calligraphy3/CalligraphyUtils.java
    io/github/inflationx/calligraphy3/ReflectionUtils.java
    io/github/inflationx/viewpump/internal/ReflectionUtils.java
    io/github/inflationx/viewpump/internal/ReflectiveFallbackViewCreator.java
    io/github/inflationx/viewpump/internal/ViewPumpLayoutInflater.java
    net/sourceforge/pinyin4j/ResourceHelper.java
    org/greenrobot/greendao/database/DatabaseOpenHelper.java
    org/greenrobot/greendao/internal/DaoConfig.java
    org/java_websocket/util/Base64.java
    tv/cjump/jni/DeviceUtils.java
    tv/cjump/jni/NativeBitmapFactory.java
    加密解密-> Crypto加解密组件
    加密解密-> Base64 解密
    进程操作-> 杀死进程
    进程操作-> 获取进程pid
    加密解密-> 信息摘要算法
    网络通信-> SSL证书处理
    网络通信-> WebView JavaScript接口
    网络通信-> WebView使用File协议
    网络通信-> WebView 相关
    进程操作-> 获取运行的进程\服务
    DEX-> 动态加载 com/geetest/onelogin/b/c.java
    io/branch/referral/InstantAppUtil.java
    网络通信-> TCP服务器套接字 org/java_websocket/server/WebSocketServer.java
    一般功能-> 加载so文件 com/yalantis/ucrop/task/BitmapCropTask.java
    org/webrtc/NativeLibrary.java
    tv/cjump/jni/NativeBitmapFactory.java
    一般功能-> 查看\修改Android系统属性 com/geetest/onelogin/k/e.java
    io/branch/referral/BranchPreinstall.java
    隐私数据-> 获取GPS位置信息 com/yixing/snugglelive/ui/main/activity/MainActivity.java
    com/yixing/snugglelive/ui/main/fragment/NearbyFragment.java
    com/yixing/snugglelive/ui/mine/activity/PublishBlogActivity.java
    加密解密-> Base64 加密
    隐私数据-> 录制音频行为
    组件-> 启动 Service com/geetest/onelogin/i/b.java
    一般功能-> 获取Android广告ID io/branch/coroutines/AdvertisingIdsKt$getGoogleAdvertisingInfoObject$2.java
    io/branch/coroutines/AdvertisingIdsKt$getHuaweiAdvertisingInfoObject$2.java
    设备指纹-> 查看运营商信息 com/sdk/g/a.java
    隐私数据-> 屏幕截图,截取自己应用内部界面 master/flame/danmaku/danmaku/model/android/DrawingCacheHolder.java
    一般功能-> 获取WiFi相关信息 com/geetest/onepassv2/b/c.java

    安全漏洞检测

    高危
    4
    警告
    6
    信息
    3
    安全
    1
    屏蔽
    0
    序号 问题 等级 参考标准 文件位置 操作
    1 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它 信息
    OWASP MASVS: MSTG-STORAGE-10
    升级会员:解锁高级权限
    2 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
    OWASP MASVS: MSTG-STORAGE-3
    升级会员:解锁高级权限
    3 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
    OWASP Top 10: M9: Reverse Engineering
    OWASP MASVS: MSTG-STORAGE-14
    升级会员:解锁高级权限
    4 应用程序使用不安全的随机数生成器 警告 CWE: CWE-330: 使用不充分的随机数
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-6
    升级会员:解锁高级权限
    5 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 警告 CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当('SQL 注入')
    OWASP Top 10: M7: Client Code Quality
    升级会员:解锁高级权限
    6 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
    OWASP Top 10: M2: Insecure Data Storage
    OWASP MASVS: MSTG-STORAGE-2
    升级会员:解锁高级权限
    7 MD5是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4
    升级会员:解锁高级权限
    8 WebView域控制不严格漏洞 高危 CWE: CWE-73: 外部控制文件名或路径 升级会员:解锁高级权限
    9 使用弱加密算法 高危 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4
    升级会员:解锁高级权限
    10 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 安全
    OWASP MASVS: MSTG-NETWORK-4
    升级会员:解锁高级权限
    11 该文件是World Writable。任何应用程序都可以写入文件 高危 CWE: CWE-276: 默认权限不正确
    OWASP Top 10: M2: Insecure Data Storage
    OWASP MASVS: MSTG-STORAGE-2
    升级会员:解锁高级权限
    12 此应用程序使用SQL Cipher。SQLCipher为sqlite数据库文件提供256位AES加密 信息
    OWASP MASVS: MSTG-CRYPTO-1
    升级会员:解锁高级权限
    13 SHA-1是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4
    升级会员:解锁高级权限
    14 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 高危 CWE: CWE-649: 依赖于混淆或加密安全相关输入而不进行完整性检查
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-3
    升级会员:解锁高级权限

    Native库安全分析

    No Shared Objects found.
    序号 动态库 NX(堆栈禁止执行) PIE STACK CANARY(栈保护) RELRO RPATH(指定SO搜索路径) RUNPATH(指定SO搜索路径) FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)

    文件分析

    序号 问题 文件

    敏感权限分析

    恶意软件常用权限 9/30
    android.permission.RECORD_AUDIO
    android.permission.MODIFY_AUDIO_SETTINGS
    android.permission.WAKE_LOCK
    android.permission.READ_PHONE_STATE
    android.permission.WRITE_SETTINGS
    android.permission.VIBRATE
    android.permission.CAMERA
    android.permission.ACCESS_FINE_LOCATION
    android.permission.ACCESS_COARSE_LOCATION
    其它常用权限 12/46
    android.permission.READ_EXTERNAL_STORAGE
    android.permission.READ_MEDIA_IMAGES
    android.permission.READ_MEDIA_AUDIO
    android.permission.READ_MEDIA_VIDEO
    android.permission.WRITE_EXTERNAL_STORAGE
    android.permission.FLASHLIGHT
    android.permission.INTERNET
    android.permission.ACCESS_NETWORK_STATE
    android.permission.ACCESS_WIFI_STATE
    android.permission.CHANGE_NETWORK_STATE
    android.permission.CHANGE_WIFI_STATE
    com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

    恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
    其它常用权限 是已知恶意软件经常滥用的权限。

    IP地理位置

    恶意域名检测

    域名 状态 中国境内 位置信息 解析
    core.shinygirllive.com 安全
    没有可用的地理位置信息。
    media.scbjweilai.cn 安全
    IP地址: 61.164.116.141
    国家: 中国
    地区: 浙江
    城市: 温州
    查看: 高德地图

    utils.titilive.com 安全
    IP地址: 104.21.50.29
    国家: 美利坚合众国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    branch.app.link 安全
    IP地址: 54.230.176.55
    国家: 大韩民国
    地区: 京畿道
    城市: Icheon
    查看: Google 地图

    core-ws.titilive.com 安全
    IP地址: 172.67.155.220
    国家: 美利坚合众国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    api.scbjweilai.cn 安全
    IP地址: 182.136.76.4
    国家: 中国
    地区: 四川
    城市: 绵阳
    查看: 高德地图

    id6.me 安全
    IP地址: 112.33.111.233
    国家: 中国
    地区: 北京
    城市: 北京
    查看: 高德地图

    ext-ws.shinygirllive.com 安全
    没有可用的地理位置信息。
    cdn.branch.io 安全
    IP地址: 54.230.61.12
    国家: 大韩民国
    地区: 京畿道
    城市: Icheon
    查看: Google 地图

    aomedia.org 安全
    IP地址: 185.199.109.153
    国家: 美利坚合众国
    地区: 宾夕法尼亚
    城市: 加利福尼亚
    查看: Google 地图

    api2.branch.io 安全
    IP地址: 18.64.8.34
    国家: 大韩民国
    地区: 京畿道
    城市: Icheon
    查看: Google 地图

    docs.geetest.com 安全
    IP地址: 61.162.15.240
    国家: 中国
    地区: 山东
    城市: 济宁
    查看: 高德地图

    schema.org 安全
    IP地址: 142.250.207.14
    国家: 日本
    地区: 东京
    城市: 东京
    查看: Google 地图

    wap.cmpassport.com 安全
    IP地址: 112.33.111.233
    国家: 中国
    地区: 安徽
    城市: 合肥
    查看: 高德地图

    api.branch.io 安全
    IP地址: 13.225.114.93
    国家: 大韩民国
    地区: 京畿道
    城市: Icheon
    查看: Google 地图

    scbjweilai.cn 安全
    IP地址: 114.80.123.49
    国家: 中国
    地区: 上海
    城市: 上海
    查看: 高德地图

    beian.miit.gov.cn 安全
    IP地址: 59.63.226.86
    国家: 中国
    地区: 江西
    城市: 南昌
    查看: 高德地图

    greenrobot.org 安全
    IP地址: 85.13.163.69
    国家: 德国
    地区: 图林根
    城市: 弗里德斯多夫
    查看: Google 地图

    default.url 安全
    没有可用的地理位置信息。
    onepass.geetest.com 安全
    IP地址: 103.143.17.142
    国家: 中国
    地区: 北京
    城市: 北京
    查看: 高德地图

    api3-eu.branch.io 安全
    IP地址: 18.244.61.84
    国家: 美利坚合众国
    地区: 华盛顿
    城市: 西雅图
    查看: Google 地图

    live-rtc.scbjweilai.cn 安全
    IP地址: 61.147.112.146
    国家: 中国
    地区: 江苏
    城市: 扬州
    查看: 高德地图

    help.branch.io 安全
    IP地址: 104.16.242.118
    国家: 美利坚合众国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    bnc.lt 安全
    IP地址: 18.67.51.91
    国家: 大韩民国
    地区: 京畿道
    城市: Icheon
    查看: Google 地图

    opencloud.wostore.cn 安全
    IP地址: 116.128.209.136
    国家: 中国
    地区: 北京
    城市: 北京
    查看: 高德地图

    pagead2.googlesyndication.com 安全
    IP地址: 180.163.150.38
    国家: 中国
    地区: 上海
    城市: 上海
    查看: 高德地图

    open.e.189.cn 安全
    IP地址: 42.123.76.87
    国家: 中国
    地区: 北京
    城市: 北京
    查看: 高德地图

    app-h5.shinygirllive.com 安全
    没有可用的地理位置信息。
    e.189.cn 安全
    IP地址: 42.123.76.65
    国家: 中国
    地区: 北京
    城市: 北京
    查看: 高德地图

    appr.tc 安全
    IP地址: 216.239.34.21
    国家: 美利坚合众国
    地区: 加利福尼亚
    城市: 山景城
    查看: Google 地图

    log.reyun.com 安全
    IP地址: 52.81.118.135
    国家: 中国
    地区: 北京
    城市: 北京
    查看: 高德地图

    image.shinygirllive.com 安全
    没有可用的地理位置信息。
    api-e189.21cn.com 安全
    IP地址: 222.93.106.185
    国家: 中国
    地区: 江苏
    城市: 苏州
    查看: 高德地图

    schemas.microsoft.com 安全
    IP地址: 13.107.246.74
    国家: 美利坚合众国
    地区: 华盛顿
    城市: 雷德蒙
    查看: Google 地图

    手机号提取

    URL链接分析

    URL信息 源码文件
    https://daily.m.zzx9.cn
    https://auth.wosms.cn
    https://msv6.wosms.cn
    https://ms.zzx9.cn
    https://m.zzx.cnklog.com
    自研引擎-A
    https://wap.cmpassport.com/resources/html/contract.html
    https://opencloud.wostore.cn/authz/resource/html/disclaimer.html?fromsdk=true
    https://e.189.cn/sdk/agreement/detail.do?hidetop=true
    com/geetest/onelogin/n/e.java
    https://id6.me/auth/preauth.do
    com/geetest/onelogin/p/e/b.java
    file:anonymous-string
    com/hp/hpl/sparta/Parser.java
    https://github.com/yyued/svgaplayer-android#cache
    file:///assets/
    com/opensource/svgaplayer/SVGAParser.java
    https://opencloud.wostore.cn/authz/resource/html/disclaimer.html?fromsdk=true
    com/unigeetest/xiaowo/account/shield/UniAccountHelper.java
    https://appr.tc
    com/wangsu/httpclient/WsRTCHttp.java
    https://appr.tc
    com/wangsu/libwswebrtc/b/b.java
    wss://api.scbjweilai.cn/chatev_ws/user/connect?token=
    wss://api.scbjweilai.cn/chatev_ws/user/extension_cmd
    https://api.scbjweilai.cn/
    com/yixing/snugglelive/Application.java
    https://scbjweilai.cn/app-builtin/assets/
    https://api.scbjweilai.cn/
    com/yixing/snugglelive/BaseUrlInterceptor.java
    https://scbjweilai.cn/app-builtin/assets/
    https://scbjweilai.cn/app-builtin/customer-service/
    wss://api.scbjweilai.cn/chatev_ws/user/extension_cmd
    https://scbjweilai.cn/
    https://api.scbjweilai.cn/
    https://media.scbjweilai.cn/
    http://live-rtc.scbjweilai.cn/
    wss://api.scbjweilai.cn/chatev_ws/user/connect
    com/yixing/snugglelive/BuildConfig.java
    https://scbjweilai.cn/app-builtin/assets/
    https://api.scbjweilai.cn/
    wss://api.scbjweilai.cn/chatev_ws/user/extension_cmd
    https://media.scbjweilai.cn/
    wss://api.scbjweilai.cn/chatev_ws/user/connect
    com/yixing/snugglelive/global/ApiUrl.java
    https://onepass.geetest.com
    https://onepass.geetest.com/v2.0/result
    https://onepass.geetest.com/onelogin/result
    com/yixing/snugglelive/global/Const.java
    https://scbjweilai.cn/app-builtin/assets/
    com/yixing/snugglelive/global/GiftAnmManager.java
    https://scbjweilai.cn/app-builtin/assets/
    https://scbjweilai.cn/app-builtin/assets/gift/
    com/yixing/snugglelive/global/GIftImageUtils.java
    https://scbjweilai.cn/app-builtin/assets/
    com/yixing/snugglelive/global/LevelResourcesUtils.java
    wss://ext-ws.shinygirllive.com
    https://app-h5.shinygirllive.com
    https://core.shinygirllive.com
    https://image.shinygirllive.com/
    wss://core-ws.titilive.com
    https://utils.titilive.com
    com/yixing/snugglelive/global/ServerConfigManager.java
    https://scbjweilai.cn/app-builtin/assets/partybackground/
    com/yixing/snugglelive/ui/live/activity/VoicePartyActivity.java
    https://scbjweilai.cn/app-builtin/assets/gift/
    com/yixing/snugglelive/ui/live/adapter/GiftItemAdapter.java
    https://scbjweilai.cn/agreement.html
    https://scbjweilai.cn/privacy_policy.html
    https://docs.geetest.com/onelogin/deploy/android
    com/yixing/snugglelive/ui/login/activity/LoginActivity.java
    https://media.scbjweilai.cn/
    com/yixing/snugglelive/ui/main/activity/FullScreenVideoActivity.java
    https://scbjweilai.cn/app-builtin/assets/partybackground/
    com/yixing/snugglelive/ui/main/adapter/PartyBackgroundAdapter.java
    https://media.scbjweilai.cn/
    com/yixing/snugglelive/ui/main/holder/RecycleItemBroadcasterBlogHolder.java
    https://media.scbjweilai.cn/
    com/yixing/snugglelive/ui/main/holder/RecyclerItemBlogHolder.java
    https://scbjweilai.cn//aboutus.html
    com/yixing/snugglelive/ui/mine/activity/AboutOursActivity.java
    https://beian.miit.gov.cn/#/home
    com/yixing/snugglelive/ui/mine/activity/AboutSnuggleActivity.java
    https://media.scbjweilai.cn/
    com/yixing/snugglelive/ui/mine/activity/AlbumVideoPreviewActivity.java
    https://scbjweilai.cn/app-builtin/customer-service/?token=
    com/yixing/snugglelive/ui/mine/activity/CustomerServiceActivity.java
    https://scbjweilai.cn//privacy_policy.html
    com/yixing/snugglelive/ui/mine/activity/PrivacyPolicyActivity.java
    https://scbjweilai.cn//agreement.html
    com/yixing/snugglelive/ui/mine/activity/ProtocolActivity.java
    https://scbjweilai.cn/app-builtin/assets/paymentmethod/
    com/yixing/snugglelive/ui/mine/adapter/PaymentMethodAdapter.java
    https://media.scbjweilai.cn/
    com/yixing/snugglelive/utils/GlideUtil.java
    https://help.branch.io/using-branch/docs/adding-test-devices
    https://help.branch.io/using-branch/docs/adding-test-devices#section-resetting-your-test-device-data
    io/branch/referral/Branch.java
    https://api.branch.io/
    https://api2.branch.io/
    https://cdn.branch.io/
    https://api3-eu.branch.io/
    io/branch/referral/PrefHelper.java
    https://bnc.lt/a/
    io/branch/referral/ServerRequestCreateUrl.java
    https://help.branch.io/developers-hub/docs/android-basic-integration#section-load-branch
    https://help.branch.io/developers-hub/docs/android-basic-integration#section-configure-app
    https://help.branch.io/developers-hub/docs/android-basic-integration#section-configure-branch-dashboard
    https://help.branch.io/using-branch/docs/android-app-links#section-add-intent-filter-to-manifest
    https://branch.app.link/link-settings-page
    io/branch/referral/validators/IntegrationValidator.java
    https://greenrobot.org/greendao/documentation/database-encryption/
    org/greenrobot/greendao/database/DatabaseOpenHelper.java
    https://onepass.geetest.com/v2.0/result
    https://image.shinygirllive.com/
    http://schema.org/photographaction
    https://wspeed.qq.com/w.cgi
    https://scbjweilai.cn/app-builtin/assets/
    http://log.reyun.com/receive/pkginfo
    https://developer.apple.com/streaming/emsg-id3
    https://onepass.geetest.com
    http://live-rtc.scbjweilai.cn/
    https://huatuocode.huatuo.qq.com
    https://utils.titilive.com
    https://docs.geetest.com/onelogin/deploy/android
    https://plus.google.com/
    https://opencloud.wostore.cn/authz/resource/html/disclaimer.html?fromsdk=true
    https://wap.cmpassport.com/resources/html/contract.html
    https://help.branch.io/using-branch/docs/android-app-links#section-add-intent-filter-to-manifest
    127.0.0.1
    http://schema.org/watchaction
    https://api3-eu.branch.io/
    https://help.branch.io/developers-hub/docs/android-basic-integration#section-configure-branch-dashboard
    wss://api.scbjweilai.cn/chatev_ws/user/connect?token=
    https://api.branch.io/
    http://schema.org/activateaction
    http://qzs.qq.com/open/mobile/invite/sdk_invite.html?
    https://greenrobot.org/greendao/documentation/database-encryption/
    https://beian.miit.gov.cn/#/home
    http://schema.org/filmaction
    https://branch.app.link/link-settings-page
    https://bnc.lt/a/
    http://schema.org/reserveaction
    https://mp.weixin.qq.com/publicpoc/opensdkconf?action=getshareconf&appid=%s&sdkversion=%s&buffer=%s
    http://cgi.connect.qq.com/qqconnectopen/openapi/policy_conf
    wss://ext-ws.shinygirllive.com
    https://onepass.geetest.com/onelogin/result
    http://schema.org/activeactionstatus
    https://api-e189.21cn.com/gw/client/accountmsg.do
    http://schema.org/failedactionstatus
    https://scbjweilai.cn/app-builtin/customer-service/?token=
    http://qzs.qq.com/open/mobile/sendstory/sdk_sendstory_v1.3.html?
    http://qzs.qq.com/open/mobile/login/qzsjump.html?
    http://appsupport.qq.com/cgi-bin/qzapps/mapp_addapp.cgi
    https://scbjweilai.cn/app-builtin/assets/gift/
    http://log.reyun.com/
    https://app-h5.shinygirllive.com
    https://appr.tc
    http://schema.org/searchaction
    https://graph.qq.com/oauth2.0/me
    https://scbjweilai.cn//privacy_policy.html
    http://schema.org/communicateaction
    https://help.branch.io/developers-hub/docs/android-basic-integration#section-load-branch
    https://help.branch.io/developers-hub/docs/android-basic-integration#section-configure-app
    https://openmobile.qq.com/oauth2.0/m_authorize?
    http://qzs.qq.com
    https://help.branch.io/using-branch/docs/adding-test-devices
    https://help.branch.io/using-branch/docs/adding-test-devices#section-resetting-your-test-device-data
    https://scbjweilai.cn//agreement.html
    113.200.129.40
    https://github.com/yyued/svgaplayer-android#cache
    https://scbjweilai.cn/
    https://appsupport.qq.com/cgi-bin/appstage/mstats_batch_report
    http://schema.org/wantaction
    https://scbjweilai.cn/privacy_policy.html
    https://api2.branch.io/
    https://core.shinygirllive.com
    http://schema.org/bookmarkaction
    http://openmobile.qq.com/oauth2.0/m_jump_by_version?
    https://openmobile.qq.com/v3/user/get_info
    https://scbjweilai.cn/agreement.html
    http://fusion.qq.com/cgi-bin/qzapps/unified_jump?appid=%1$s&from=%2$s&isopenappid=1
    https://opencloud.wostore.cn/client/sdk/receive
    https://open.e.189.cn/openapi/special/gettimestamp.do
    https://pagead2.googlesyndication.com/pagead/gen_204?id=gmob-apps
    https://opencloud.wostore.cn/openapi/netauth/precheck/u3?
    http://schema.org/listenaction
    https://default.url
    http://schema.org/viewaction
    https://scbjweilai.cn//aboutus.html
    https://id6.me/auth/preauth.do
    https://openmobile.qq.com/user/user_login_statis
    http://qzs.qq.com/open/mobile/request/sdk_request.html?
    https://scbjweilai.cn/app-builtin/assets/partybackground/
    https://openmobile.qq.com/
    https://scbjweilai.cn/app-builtin/customer-service/
    http://schema.org/completedactionstatus
    wss://api.scbjweilai.cn/chatev_ws/user/extension_cmd
    https://opencloud.wostore.cn/openapi/netauth/precheck/wp?
    file:anonymous-string
    wss://api.scbjweilai.cn/chatev_ws/user/connect
    https://e.189.cn/sdk/agreement/detail.do?hidetop=true
    http://schema.org/likeaction
    javascript:window.jsbridge&&jsbridge.callback
    https://api.scbjweilai.cn/
    https://cdn.branch.io/
    https://scbjweilai.cn/app-builtin/assets/paymentmethod/
    116.128.209.136
    https://media.scbjweilai.cn/
    https://aomedia.org/emsg/id3
    wss://core-ws.titilive.com
    file:///assets/
    http://schema.org/addaction
    自研引擎-S

    Firebase配置检测

    邮箱地址提取

    EMAIL 源码文件
    dev@commons.apache
    自研引擎-S

    第三方追踪器

    名称 类别 网址
    Branch Analytics https://reports.exodus-privacy.eu.org/trackers/167

    敏感凭证泄露

    已显示 14 个secrets
    1、 MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3b9/PFJTmDI68cjDnGTsWFskS
    2、 MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCV+w9ttzAugqJLWL3SBzVYKmKP
    3、 MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5se07mkN71qsSJHjZ2Z0+Z+4LlLvf2sz7Md38VAa3EmAOvI7vZp3hbAxicL724ylcmisTPtZQhT/9C+25AELqy9PN9JmzKpwoVTUoJvxG4BoyT49+gGVl6s6zo1byNoHUzTfkmRfmC9MC53HvG8GwKP5xtcdptFjAIcgIR7oAWQIDAQAB
    4、 15f1483824cf4085ddca5a8529d873fc59a8ced2cbce67fb2b3dd9033ea03442
    5、 8afee6c1159c9cb44e5eddf1117e05b4
    6、 258EAFA5-E914-47DA-95CA-C5AB0DC85B11
    7、 c06c8400-8e06-11e0-9cb6-0002a5d5c51b
    8、 amF2YXguY3J5cHRvLnNwZWMuSXZQYXJhbWV0ZXJTcGVj
    9、 bb392ec0-8d4d-11e0-a896-0002a5d5c51b
    10、 amF2YXguY3J5cHRvLnNwZWMuU2VjcmV0S2V5U3BlYw==
    11、 nfQBXjrQuznVmTNOCnoNMqCG174mrdqF55k+iSgDE12ljEJjHR5KF10SWVF3E/RSz
    12、 3850ec2b86519c9de2e63316f8abff55
    13、 n/UztcZS26BAzILeGOw2Fv5BeSSftX2AKlhEw7RxnZX1S7rLrIIVzLeJhEctdEvM0
    14、 dd375053938c7b0edc262196ab4b0082

    字符串信息

    建议导出为TXT,方便查看。

    活动列表

    显示所有 70 个 activities

    服务列表

    广播接收者列表

    第三方SDK

    SDK名称 开发者 描述信息
    极光认证 SDK 极光 极光认证整合了三大运营商的网关认证能力,为开发者提供了一键登录和号码认证功能,优化用户注册/登录、号码验证的体验,提高安全性。
    WebRTC WebRTC 借助 WebRTC,您可以在基于开放标准的应用程序中添加实时通信功能。它支持在同级之间发送视频,语音和通用数据,从而使开发人员能够构建功能强大的语音和视频通信解决方案。该技术可在所有现代浏览器以及所有主要平台的本机客户端上使用。 WebRTC 背后的技术被实现为一个开放的 Web 标准,并在所有主要浏览器中均以常规 JavaScript API 的形式提供。
    烈焰弹幕使 Bilibili 烈焰弹幕使是 Android 上开源的弹幕解析绘制引擎项目。
    uCrop Yalantis Android 图片裁剪库。
    移动号码认证 中国移动 号码认证能力提供一键登录、本机号码校验服务。
    Google Play Service Google 借助 Google Play 服务,您的应用可以利用由 Google 提供的最新功能,例如地图,Google+ 等,并通过 Google Play 商店以 APK 的形式分发自动平台更新。 这样一来,您的用户可以更快地接收更新,并且可以更轻松地集成 Google 必须提供的最新信息。
    腾讯开放平台 Tencent 腾讯核心内部服务,二十年技术沉淀,助你成就更高梦想。
    File Provider Android FileProvider 是 ContentProvider 的特殊子类,它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
    Jetpack App Startup Google App Startup 库提供了一种直接,高效的方法来在应用程序启动时初始化组件。库开发人员和应用程序开发人员都可以使用 App Startup 来简化启动顺序并显式设置初始化顺序。App Startup 允许您定义共享单个内容提供程序的组件初始化程序,而不必为需要初始化的每个组件定义单独的内容提供程序。这可以大大缩短应用启动时间。
    Firebase Google Firebase 提供了分析、数据库、消息传递和崩溃报告等功能,可助您快速采取行动并专注于您的用户。
    Jetpack Media Google 与其他应用共享媒体内容和控件。已被 media2 取代。

    污点分析

    当apk较大时,代码量会很大,造成数据流图(ICFG)呈现爆炸式增长,所以该功能比较耗时,请先喝杯咖啡,耐心等待……
    规则名称 描述信息 操作
    病毒分析 使用安卓恶意软件常用的API进行污点分析 开始分析  
    漏洞挖掘 漏洞挖掘场景下的污点分析 开始分析  
    隐私合规 隐私合规场景下的污点分析:组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 开始分析  
    密码分析 分析加密算法是否使用常量密钥、静态初始化的向量(IV)、加密模式是否使用ECB等 开始分析  
    Callback 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用,所以如果需要分析Callback方法需要在声明文件中将其声明,这里提供一份AndroidCallbacks.txt文件,里面是一些常见的原生回调接口或类,如果有特殊接口需求,可以联系管理员 开始分析