文件信息
文件名称 比特逼_3.0.0.apk应用信息
应用名称 比特逼证书信息
二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: True
v4 签名: False
主题: C=inject, ST=inject, L=inject, O=inject, OU=inject, CN=inject.keystore
签名算法: rsassa_pkcs1v15
有效期自: 2019-10-11 02:39:57+00:00
有效期至: 2841-02-23 02:39:57+00:00
发行人: C=inject, ST=inject, L=inject, O=inject, OU=inject, CN=inject.keystore
序列号: 0x47f931c3
哈希算法: sha256
证书MD5: 64843786c6ada15ca4254f4da77e4978
证书SHA1: b2e643d00042e8e23481794e88eedd3966c65dfa
证书SHA256: 28afa96de62296ef3b7598b27d00b673920d3e0bf5fad9c95ad4ef8de5d8df99
证书SHA512: 2bcfcb9c6759eb8689d05d7f2393725c1ebea61bf8c4559c9057dc654ad28c1c776ddbe55a6f8a6af71968f2883555e7a74e6c588854a5a2c275ddb4cf0536d2
公钥算法: rsa
密钥长度: 1024
指纹: 61cc7d71417395a5265a787e508b72c4fdc6d6d0107c97d17221206671ae528f
找到 1 个唯一证书应用程序权限
证书分析
| 标题 | 严重程度 | 描述信息 |
|---|---|---|
| 已签名应用 | 信息 | 应用程序已使用代码签名证书进行签名 |
| 应用程序存在Janus漏洞 | 警告 | 应用程序使用了v1签名方案进行签名，如果只使用v1签名方案，那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序，以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。 |
MANIFEST分析
| 序号 | 问题 | 严重程度 | 描述信息 | 操作 |
|---|---|---|---|---|
| 1 |
应用程序可以安装在有漏洞的已更新 Android 版本上 Android 5.1-5.1.1, [minSdk=22] |
警告 | 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。 | |
| 2 |
应用程序已启用明文网络流量 [android:usesCleartextTraffic=true] |
警告 | 应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。 | |
| 3 |
程序可被任意调试 [android:debuggable=true] |
高危 | 应用可调试标签被开启，这使得逆向工程师更容易将调试器挂接到应用程序上。这允许导出堆栈跟踪和访问调试助手类。 | |
| 4 |
应用程序数据可以被备份 [android:allowBackup=true] |
警告 | 这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。 | |
| 5 |
Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.DUMP [android:exported=true] |
警告 | 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。 |
可浏览的ACTIVITIES
| ACTIVITY | INTENT |
|---|
网络安全配置
| 序号 | 范围 | 严重级别 | 描述 |
|---|
API调用分析
源代码分析
| 序号 | 问题 | 等级 | 参考标准 | 文件位置 | 操作 |
|---|---|---|---|---|---|
| 1 | 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 | 信息 | OWASP MASVS: MSTG-STORAGE-10 | com/capacitorjs/plugins/clipboard/Clipboard.java com/cloudinject/feature/̙̗/C0294.java | |
| 2 | 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 | 警告 | CWE: CWE-749: 暴露危险方法或函数 OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-7 | com/tencent/as/javask.java | |
| 3 | WebView域控制不严格漏洞 | 高危 | CWE: CWE-73: 外部控制文件名或路径 | com/tencent/as/javask.java | |
| 4 | 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 | 警告 | CWE: CWE-312: 明文存储敏感信息 OWASP Top 10: M9: Reverse Engineering OWASP MASVS: MSTG-STORAGE-14 | 显示文件 | |
| 5 | 应用程序记录日志信息,不得记录敏感信息 | 信息 | CWE: CWE-532: 通过日志文件的信息暴露 OWASP MASVS: MSTG-STORAGE-3 | 显示文件 | |
| 6 | 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 | 高危 | CWE: CWE-649: 依赖于混淆或加密安全相关输入而不进行完整性检查 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-3 | ee/forgr/capacitor_updater/CryptoCipher.java | |
| 7 | 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 | 警告 | CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2 | com/getcapacitor/BridgeWebChromeClient.java com/getcapacitor/FileUtils.java mirrorb/android/hardware/location/C0394.java | |
| 8 | 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 | 警告 | CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2 | com/getcapacitor/BridgeWebChromeClient.java |
动态库分析
| 序号 | 动态库 | NX(堆栈禁止执行) | STACK CANARY(栈保护) | RELRO | RPATH（指定SO搜索路径） | RUNPATH（指定SO搜索路径） | FORTIFY(常用函数加强检查) | SYMBOLS STRIPPED(裁剪符号表) |
|---|
文件分析
| 序号 | 问题 | 文件 |
|---|
VIRUSTOTAL扫描
该文件并未在病毒库中，文件上传功能被禁用。
滥用权限
恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。
IP地图
域名检测
| 域名 | 状态 | 中国境内 | 位置信息 | 解析 |
|---|---|---|---|---|
| log-report.com |
安全 |
否 |
IP地址: 104.21.75.58 国家: United States of America 地区: California 城市: San Francisco 查看: Google 地图 |
|
| www.r.animator.fragment |
安全 |
否 | 没有可用的地理位置信息。 |
|
| ssl.gstatic.com |
安全 |
否 |
IP地址: 142.250.189.3 国家: United States of America 地区: California 城市: Mountain View 查看: Google 地图 |
|
| www.r.attr.start |
安全 |
否 | 没有可用的地理位置信息。 |
|
手机号码
网址
| 网址信息 | 源码文件 |
|---|---|
|
http://ionicframework.com https://ionicframework.com/docs/vue/navigation https://github.com/systemjs/systemjs/blob/main/docs/errors.md https://vuejs.org/error-reference/ https://github.com/zloirock/core-js/blob/v3.35.0/LICENSE https://stackoverflow.com/questions/29249132/wkwebview-complex-communication-between-javascript-native-code/49474323 https://ai.tiktok155.com/web/imgServer/ https://xjh.tiktok155.com/web/ https://aomedia.org/emsg/ID3 http://bqm.125ks.cn https://github.com/zloirock/core-js https://stackoverflow.com/a/57382543 https://example.com https://xjh.tk01.tv https://capacitorjs.com/ https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE |
自研引擎分析结果 |
|
https://log-report.com/report |
com/cloudinject/feature/̗̖/C0217.java |
|
www.r.attr.start_dir} |
com/getcapacitor/android/R.java |
|
www.r.animator.fragment_close_enter www.r.animator.fragment_close_exit www.r.animator.fragment_fade_enter www.r.animator.fragment_fade_exit www.r.animator.fragment_open_enter www.r.animator.fragment_open_exit |
com/px/R.java |
|
https://ssl.gstatic.com/accessibility/javascript/android/ |
自研引擎分析结果 |
FIREBASE实例
邮箱
追踪器
| 名称 | 类别 | 网址 |
|---|
密钥凭证
活动列表
已显示 1 个activities
1、 io.ionic.starter.MainActivity
服务列表
已显示 1 个services
1、 ee.forgr.capacitor_updater.DownloadService
广播接收者列表
已显示 1 个receivers
1、 androidx.profileinstaller.ProfileInstallReceiver
内容提供者列表
已显示 2 个providers
1、 androidx.core.content.FileProvider
2、 androidx.startup.InitializationProvider
第三方SDK
| SDK名称 | 开发者 | 描述信息 |
|---|---|---|
| File Provider | Android | FileProvider 是 ContentProvider 的特殊子类，它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。 |
| Jetpack App Startup | App Startup 库提供了一种直接，高效的方法来在应用程序启动时初始化组件。库开发人员和应用程序开发人员都可以使用 App Startup 来简化启动顺序并显式设置初始化顺序。App Startup 允许您定义共享单个内容提供程序的组件初始化程序，而不必为需要初始化的每个组件定义单独的内容提供程序。这可以大大缩短应用启动时间。 | |
| Jetpack ProfileInstaller | 让库能够提前预填充要由 ART 读取的编译轨迹。 | |
| Jetpack AppCompat | Allows access to new APIs on older API versions of the platform (many using Material Design). |
文件列表
AndroidManifest.xml
assets/QALiFZFUmP
classes6.dex
classes.dex
res/drawable-mdpi-v4/ic_call_decline_low.png
res/interpolator/btn_checkbox_checked_mtrl_animation_interpolator_0.xml
res/drawable-hdpi-v4/abc_list_longpressed_holo.9.png
res/drawable-anydpi-v21/ic_call_answer.xml
assets/public/assets/ic_ai_two_no-RELOL3I3.png
res/drawable/abc_ic_menu_selectall_mtrl_alpha.xml
kotlin/reflect/reflect.kotlin_builtins
res/drawable-xhdpi-v4/notification_bg_low_pressed.9.png
res/drawable-xxxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png
res/color-v23/abc_btn_colored_text_material.xml
assets/public/assets/index-6YHeSsVM.css
res/drawable/notification_bg_low.xml
res/drawable-hdpi-v4/abc_text_select_handle_middle_mtrl.png
res/drawable/abc_list_selector_background_transition_holo_light.xml
assets/setup_sdk_share_dot.png
res/color/abc_primary_text_disable_only_material_dark.xml
res/drawable-xxhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png
assets/public/assets/bg_mine_wallet-XcoJmXIa.png
assets/public/assets/tutor-4-n5gkN-VB.webp
res/anim/btn_radio_to_off_mtrl_ring_outer_animation.xml
assets/public/assets/icon_11-wrP3LbpC.png
res/mipmap-hdpi-v4/ic_launcher.png
res/layout/abc_alert_dialog_button_bar_material.xml
res/drawable-mdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png
resources.arsc
res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_light.9.png
res/animator/fragment_close_enter.xml
res/drawable-mdpi-v4/abc_list_pressed_holo_dark.9.png
assets/public/assets/input-shims-Nj8-MtIm.js
res/drawable-xxhdpi-v4/abc_list_pressed_holo_dark.9.png
res/drawable/abc_list_selector_background_transition_holo_dark.xml
assets/public/assets/icon_1_n-9QkTTxwC.png
res/drawable-xhdpi-v4/abc_btn_radio_to_on_mtrl_000.png
res/drawable-hdpi-v4/abc_spinner_mtrl_am_alpha.9.png
res/color/abc_tint_spinner.xml
res/xml/network_security_config.xml
res/drawable-hdpi-v4/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-hdpi-v4/abc_btn_check_to_on_mtrl_015.png
res/drawable/abc_cab_background_top_material.xml
res/color/abc_primary_text_material_light.xml
res/drawable-ldpi-v4/ic_call_answer_low.png
assets/public/assets/img_example-C6z-H8V2.png
assets/public/assets/icon_4_p-h7g6wiSg.png
res/layout/abc_screen_simple_overlay_action_mode.xml
res/drawable-xhdpi-v4/notify_panel_notification_icon_bg.png
res/drawable-xxhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png
res/color/abc_primary_text_disable_only_material_light.xml
res/anim/abc_fade_in.xml
res/layout/activity_main.xml
assets/public/assets/web-legacy-TrROjaoW.js
res/anim/abc_popup_exit.xml
res/drawable-ldrtl-hdpi-v17/abc_spinner_mtrl_am_alpha.9.png
res/color/abc_search_url_text.xml
assets/public/assets/keyboard2-legacy-M-fj03r5.js
assets/setup_sdk_share_group.png
res/drawable-xhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png
res/drawable/notification_icon_background.xml
res/drawable-mdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png
assets/public/assets/AppLoad-legacy-3G-b9BZQ.js
assets/public/assets/md.transition-legacy-lmAVL5Zz.js
res/drawable-hdpi-v4/abc_cab_background_top_mtrl_alpha.9.png
res/drawable/abc_ratingbar_material.xml
res/drawable/abc_ic_voice_search_api_material.xml
assets/public/assets/img_ai_example_two-c6sG8UzW.png
res/drawable-xhdpi-v4/abc_btn_radio_to_on_mtrl_015.png
res/interpolator/btn_checkbox_checked_mtrl_animation_interpolator_1.xml
res/drawable/abc_ic_ab_back_material.xml
res/drawable-xhdpi-v4/ic_call_decline_low.png
res/drawable-xxxhdpi-v4/abc_text_select_handle_right_mtrl.png
res/drawable-hdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-mdpi-v4/notification_bg_low_normal.9.png
res/drawable-xxxhdpi-v4/ic_call_answer_video_low.png
res/drawable-hdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png
res/interpolator/btn_checkbox_unchecked_mtrl_animation_interpolator_1.xml
res/xml/file_paths.xml
assets/public/assets/vip_recharge_bg-QzXMg3e0.png
kotlin/collections/collections.kotlin_builtins
res/layout/abc_dialog_title_material.xml
res/layout/fragment_bridge.xml
res/layout/notification_template_part_time.xml
res/drawable-hdpi-v4/abc_scrubber_control_off_mtrl_alpha.png
res/color-v23/abc_btn_colored_borderless_text_material.xml
res/drawable-mdpi-v4/abc_spinner_mtrl_am_alpha.9.png
assets/setup_sdk_share_author.png
res/drawable-hdpi-v4/ic_call_answer_low.png
res/drawable/abc_star_black_48dp.xml
res/drawable-xxhdpi-v4/abc_text_select_handle_right_mtrl.png
res/drawable-xxxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png
assets/setup_sdk_task_info.xml
res/drawable-xxhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png
res/anim/abc_popup_enter.xml
assets/public/assets/ic_ai_four_no-nUE0wZVg.png
res/drawable-mdpi-v4/ic_call_answer_video.png
res/drawable-hdpi-v4/abc_list_focused_holo.9.png
res/color/abc_tint_switch_track.xml
assets/public/assets/polyfills-legacy-VDjA5vDI.js
res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png
res/color/abc_hint_foreground_material_light.xml
res/drawable-xxhdpi-v4/ic_call_answer_video.png
assets/public/assets/icon_5_n-gVFwVdbx.png
res/anim/btn_radio_to_on_mtrl_dot_group_animation.xml
assets/public/assets/web-legacy-yJLrrWU4.js
res/color-v23/abc_tint_spinner.xml
res/drawable-hdpi-v4/ic_call_decline_low.png
res/color/abc_background_cache_hint_selector_material_dark.xml
res/drawable-hdpi-v4/ic_call_decline.png
res/drawable/tooltip_frame_light.xml
assets/public/assets/jingbi-6D_iEbXq.png
res/drawable-xxhdpi-v4/abc_btn_check_to_on_mtrl_000.png
res/layout/abc_search_view.xml
assets/public/assets/icon_6--3QJAnGP.png
res/drawable-xxhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png
assets/public/assets/ic_ai_one-S0SEbRpB.png
res/drawable-mdpi-v4/ic_call_answer.png
res/drawable-v23/compat_splash_screen.xml
res/drawable-xhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png
assets/public/assets/icon_index_like.08e6f37-ErM7EORH.png
res/drawable-xxxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-xxhdpi-v4/abc_list_focused_holo.9.png
res/drawable-xxhdpi-v4/abc_text_select_handle_left_mtrl.png
res/drawable-xhdpi-v4/notification_bg_normal.9.png
assets/public/assets/tutor-7-gqdO_LnK.webp
res/drawable/abc_ic_go_search_api_material.xml
assets/public/assets/libao-764VP3rB.png
res/drawable-xxhdpi-v4/abc_btn_check_to_on_mtrl_015.png
res/drawable-anydpi-v21/ic_call_answer_low.xml
res/anim/btn_radio_to_on_mtrl_ring_outer_path_animation.xml
res/drawable-xhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-mdpi-v4/abc_scrubber_track_mtrl_alpha.9.png
assets/public/assets/icon_5-5A7Cv6DL.png
res/drawable-xxhdpi-v4/ic_call_decline_low.png
res/drawable-ldrtl-xxxhdpi-v17/abc_spinner_mtrl_am_alpha.9.png
res/drawable-xxxhdpi-v4/abc_switch_track_mtrl_alpha.9.png
res/drawable-mdpi-v4/abc_popup_background_mtrl_mult.9.png
res/layout/abc_popup_menu_item_layout.xml
res/drawable-mdpi-v4/abc_text_select_handle_left_mtrl.png
res/layout/abc_expanded_menu_layout.xml
res/drawable/abc_ic_clear_material.xml
res/drawable-xhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-xxxhdpi-v4/ic_call_answer_low.png
res/drawable-mdpi-v4/abc_text_select_handle_middle_mtrl.png
res/drawable-xhdpi-v4/abc_spinner_mtrl_am_alpha.9.png
assets/public/assets/ic_ai_four-b5tBLsa5.png
res/layout/abc_screen_toolbar.xml
res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png
assets/public/assets/web-L2g_GkqI.js
res/drawable/abc_btn_borderless_material.xml
res/layout/abc_alert_dialog_material.xml
res/color-v23/abc_color_highlight_material.xml
res/drawable-xxhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-xxhdpi-v4/ic_call_answer.png
res/drawable-xxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png
assets/public/favicon.png
res/drawable/abc_tab_indicator_material.xml
res/color/abc_tint_default.xml
assets/setup_sdk_share_info_two.xml
assets/public/assets/tutor-2-Hpsutt0G.webp
res/drawable-xxxhdpi-v4/abc_btn_radio_to_on_mtrl_000.png
res/drawable-xxhdpi-v4/ic_call_decline.png
res/drawable-xhdpi-v4/abc_textfield_default_mtrl_alpha.9.png
res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_light.9.png
res/anim-v21/fragment_fast_out_extra_slow_in.xml
res/anim/btn_radio_to_on_mtrl_ring_outer_animation.xml
res/drawable-xhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png
org/apache/cordova/allowlist/index.html
assets/public/assets/web-FX42GLaG.js
res/layout-v21/notification_template_icon_group.xml
res/drawable/abc_ic_menu_share_mtrl_alpha.xml
res/layout/abc_activity_chooser_view_list_item.xml
res/drawable/abc_vector_test.xml
res/color/abc_tint_edittext.xml
assets/public/assets/focus-visible-legacy-to7ZvaWj.js
res/drawable-mdpi-v4/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-xhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable/abc_ic_menu_copy_mtrl_am_alpha.xml
res/layout/abc_action_bar_title_item.xml
res/drawable/abc_btn_check_material.xml
res/drawable-ldpi-v4/ic_call_decline_low.png
res/drawable-v21/notification_action_background.xml
res/drawable-xxxhdpi-v4/abc_btn_radio_to_on_mtrl_015.png
res/anim/abc_slide_out_bottom.xml
res/drawable/abc_btn_radio_material.xml
assets/public/assets/bg_mine_recharge_btn-2Vma3hve.png
res/drawable-hdpi-v4/ic_call_answer_video_low.png
res/drawable-xxhdpi-v4/abc_list_longpressed_holo.9.png
res/drawable-hdpi-v4/abc_list_selector_disabled_holo_light.9.png
res/drawable/abc_cab_background_internal_bg.xml
res/layout-v21/notification_action_tombstone.xml
res/drawable/abc_item_background_holo_light.xml
res/drawable-mdpi-v4/notification_bg_low_pressed.9.png
res/drawable-v21/abc_dialog_material_background.xml
res/drawable-mdpi-v4/abc_textfield_activated_mtrl_alpha.9.png
res/drawable/abc_seekbar_track_material.xml
assets/public/assets/web-legacy-DpNETLod.js
res/drawable-hdpi-v4/abc_switch_track_mtrl_alpha.9.png
assets/setup_sdk_task_dialog_info.xml
assets/public/assets/ios.transition-_RLbnsi4.js
res/drawable-ldrtl-xhdpi-v17/abc_spinner_mtrl_am_alpha.9.png
res/layout/select_dialog_item_material.xml
res/drawable-mdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-xhdpi-v4/abc_list_longpressed_holo.9.png
kotlin/annotation/annotation.kotlin_builtins
res/drawable-xxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png
res/drawable-watch-v20/abc_dialog_material_background.xml
res/drawable/abc_text_cursor_material.xml
assets/public/assets/ios.transition-legacy-QvXY6k3t.js
res/drawable-xhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable/notification_tile_bg.xml
res/layout/abc_list_menu_item_layout.xml
res/color/abc_secondary_text_material_light.xml
res/color/switch_thumb_material_light.xml
res/drawable-hdpi-v4/abc_list_pressed_holo_light.9.png
res/drawable-mdpi-v4/abc_scrubber_control_off_mtrl_alpha.png
res/anim/abc_slide_out_top.xml
res/layout/abc_list_menu_item_radio.xml
res/layout/abc_screen_simple.xml
res/drawable-mdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-mdpi-v4/abc_tab_indicator_mtrl_alpha.9.png
assets/public/assets/ic_ai_three-DpMJ4M9E.png
res/color-v23/abc_tint_seek_thumb.xml
assets/public/assets/swipe-back-legacy-0leKUeau.js
res/color/abc_hint_foreground_material_dark.xml
res/drawable-xhdpi-v4/abc_text_select_handle_middle_mtrl.png
res/interpolator/fast_out_slow_in.xml
res/color-v23/abc_tint_edittext.xml
res/drawable/abc_switch_thumb_material.xml
res/anim/btn_checkbox_to_unchecked_box_inner_merged_animation.xml
res/layout/abc_action_menu_layout.xml
assets/public/assets/bg_takeoffcloth-gnj32LV-.png
res/drawable/btn_checkbox_unchecked_mtrl.xml
res/layout/abc_list_menu_item_icon.xml
res/drawable-mdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-xhdpi-v4/abc_list_divider_mtrl_alpha.9.png
res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-mdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png
res/anim/btn_checkbox_to_unchecked_check_path_merged_animation.xml
res/animator/fragment_open_enter.xml
res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable/btn_radio_on_to_off_mtrl_animation.xml
res/drawable/compat_splash_screen.xml
res/drawable-v21/abc_list_divider_material.xml
res/drawable-ldrtl-xxhdpi-v17/abc_spinner_mtrl_am_alpha.9.png
res/drawable-xxhdpi-v4/abc_list_divider_mtrl_alpha.9.png
assets/public/assets/index-legacy-YCI458sq.js
res/drawable-mdpi-v4/notify_panel_notification_icon_bg.png
classes4.dex
assets/public/assets/tutor-6-GnkPxWOc.webp
res/drawable-anydpi-v21/ic_call_decline_low.xml
res/drawable-xxhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png
assets/public/assets/icon_2_p-tQqjiKiQ.png
assets/public/assets/index9-legacy-XU1CRzAP.js
res/drawable-xhdpi-v4/abc_switch_track_mtrl_alpha.9.png
res/drawable-xxxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png
res/anim/btn_checkbox_to_checked_icon_null_animation.xml
res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png
res/anim/abc_slide_in_bottom.xml
res/drawable-mdpi-v4/abc_textfield_default_mtrl_alpha.9.png
res/drawable/btn_radio_off_to_on_mtrl_animation.xml
res/layout/notification_template_part_chronometer.xml
res/drawable-xhdpi-v4/abc_list_pressed_holo_light.9.png
res/drawable-mdpi-v4/notification_bg_normal_pressed.9.png
assets/public/assets/index9-PkrL8gLr.js
res/layout/abc_action_menu_item_layout.xml
res/drawable-xhdpi-v4/abc_list_pressed_holo_dark.9.png
kotlin/coroutines/coroutines.kotlin_builtins
res/drawable-xhdpi-v4/ic_call_answer.png
assets/public/assets/icon_4-3Q28rJmm.png
res/drawable-hdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png
assets/public/app.config.js
res/drawable-hdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable/btn_radio_off_mtrl.xml
res/xml/config.xml
res/drawable-hdpi-v4/abc_text_select_handle_right_mtrl.png
res/layout/abc_search_dropdown_item_icons_2line.xml
assets/setup_sdk_share_enter.png
res/drawable-anydpi-v21/ic_call_decline.xml
res/drawable-xhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_dark.9.png
res/drawable/abc_btn_check_material_anim.xml
assets/public/assets/1-vj-7CYZ3.svg
res/drawable-anydpi-v21/ic_call_answer_video.xml
res/drawable-xhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png
res/layout/splash_screen_view.xml
res/drawable-xhdpi-v4/notification_bg_low_normal.9.png
res/drawable-ldpi-v4/ic_call_decline.png
res/animator/fragment_fade_enter.xml
assets/public/assets/keyboard2-_zbJbtAM.js
assets/public/assets/ic_ai_one_no-_I_yX0J7.png
res/drawable/abc_seekbar_thumb_material.xml
res/anim/abc_fade_out.xml
res/color/abc_background_cache_hint_selector_material_light.xml
res/layout/custom_dialog.xml
res/drawable-xhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png
assets/public/assets/icon_3_n-mte6R7ox.png
res/drawable/compat_splash_screen_no_icon_background.xml
res/drawable-hdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-v21/abc_edit_text_material.xml
assets/setup_sdk_share_info2.xml
res/drawable-xxxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png
assets/public/assets/web-F50Vd2Yd.js
classes5.dex
res/drawable-xxxhdpi-v4/abc_btn_check_to_on_mtrl_000.png
assets/public/assets/figure_n-A0pqU_ON.jpg
assets/public/assets/icon_4_n-EuYcyoVl.png
res/anim/btn_radio_to_off_mtrl_ring_outer_path_animation.xml
res/drawable/notification_bg.xml
assets/capacitor.config.json
res/drawable-hdpi-v4/abc_scrubber_track_mtrl_alpha.9.png
res/layout/bridge_layout_main.xml
res/drawable-hdpi-v4/abc_btn_radio_to_on_mtrl_000.png
res/drawable-xxxhdpi-v4/ic_call_decline_low.png
assets/setup_sdk_share_notice.png
res/drawable/abc_ic_arrow_drop_right_black_24dp.xml
res/layout-watch-v20/abc_alert_dialog_button_bar_material.xml
res/drawable/abc_list_selector_holo_light.xml
res/drawable-mdpi-v4/abc_btn_radio_to_on_mtrl_015.png
assets/public/index.html
res/drawable-xhdpi-v4/ic_call_decline.png
assets/public/assets/index-iItGhkmb.js
res/drawable-hdpi-v4/abc_popup_background_mtrl_mult.9.png
DebugProbesKt.bin
res/drawable-xhdpi-v4/abc_list_focused_holo.9.png
res/drawable-hdpi-v4/ic_call_answer_video.png
res/drawable-hdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-xxhdpi-v4/abc_switch_track_mtrl_alpha.9.png
res/interpolator/btn_radio_to_off_mtrl_animation_interpolator_0.xml
res/drawable-v21/abc_action_bar_item_background_material.xml
res/drawable-xxxhdpi-v4/ic_call_answer_video.png
res/drawable/test_level_drawable.xml
res/drawable-xxhdpi-v4/ic_call_answer_low.png
res/anim/abc_shrink_fade_out_from_bottom.xml
res/drawable-hdpi-v4/abc_textfield_default_mtrl_alpha.9.png
assets/public/assets/tutor-1-k51hqEod.webp
res/layout/select_dialog_multichoice_material.xml
res/drawable-mdpi-v4/abc_btn_radio_to_on_mtrl_000.png
res/drawable-xhdpi-v4/abc_popup_background_mtrl_mult.9.png
res/drawable/btn_radio_on_mtrl.xml
res/layout/abc_action_mode_bar.xml
res/drawable-mdpi-v4/notification_bg_normal.9.png
res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-xxhdpi-v4/abc_list_pressed_holo_light.9.png
assets/public/assets/swipe-back-O-kw4x5a.js
res/drawable/abc_item_background_holo_dark.xml
assets/public/assets/tutor-3-SPzg0ZYl.webp
res/drawable-xxhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-mdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png
res/color/abc_tint_seek_thumb.xml
res/drawable-hdpi-v4/notification_bg_low_normal.9.png
assets/public/assets/icon_3_p--jfpbAd8.png
res/layout-v21/notification_template_custom_big.xml
res/layout/abc_list_menu_item_checkbox.xml
res/layout/abc_popup_menu_header_item_layout.xml
assets/public/assets/AppLoad-HTiUmVqB.css
res/animator/fragment_close_exit.xml
res/color/abc_secondary_text_material_dark.xml
assets/public/assets/tutor-8-eo4eV-S7.webp
res/drawable-xxxhdpi-v4/abc_btn_check_to_on_mtrl_015.png
res/animator/fragment_fade_exit.xml
assets/public/assets/notice_top_background-ABxeCRjH.png
res/drawable-hdpi-v4/abc_btn_radio_to_on_mtrl_015.png
res/layout/abc_tooltip.xml
res/drawable-xxhdpi-v4/abc_popup_background_mtrl_mult.9.png
res/drawable-mdpi-v4/abc_list_divider_mtrl_alpha.9.png
res/drawable-ldpi-v4/ic_call_answer_video.png
res/drawable-mdpi-v4/abc_list_selector_disabled_holo_dark.9.png
res/drawable/btn_checkbox_unchecked_to_checked_mtrl_animation.xml
assets/public/assets/tutor-5-acGcp5Ao.webp
res/drawable-xhdpi-v4/ic_call_answer_low.png
res/layout/support_simple_spinner_dropdown_item.xml
assets/public/assets/default3.625b796-d_m5PmMc.png
res/drawable-xxxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png
res/layout-watch-v20/abc_alert_dialog_title_material.xml
res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_dark.9.png
res/layout/abc_select_dialog_material.xml
res/anim/abc_slide_in_top.xml
res/drawable-hdpi-v4/abc_list_divider_mtrl_alpha.9.png
res/drawable-hdpi-v4/abc_list_pressed_holo_dark.9.png
assets/public/assets/img_ai_example_one-sDpZ62lm.png
assets/public/assets/status-tap-legacy-NhPb_FB1.js
res/anim/btn_checkbox_to_checked_box_outer_merged_animation.xml
res/drawable/abc_star_half_black_48dp.xml
res/drawable-xhdpi-v4/ic_call_answer_video_low.png
assets/public/assets/jifen_icon-1Xjk-Jpv.png
assets/info.json
res/color/abc_tint_btn_checkable.xml
res/drawable-xxhdpi-v4/ic_call_answer_video_low.png
kotlin/internal/internal.kotlin_builtins
res/drawable/abc_btn_radio_material_anim.xml
assets/capacitor.plugins.json
assets/public/assets/bg_mine_info-1aX-NeDU.png
assets/public/cordova_plugins.js
res/color/abc_btn_colored_text_material.xml
res/color/abc_primary_text_material_dark.xml
assets/public/cordova.js
res/drawable-ldpi-v4/ic_call_answer_video_low.png
classes2.dex
assets/public/assets/AppLoad-NBpRxvMX.js
res/drawable-xxhdpi-v4/abc_btn_radio_to_on_mtrl_015.png
res/drawable-hdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png
assets/public/assets/ic_cm8-jnc1P-qq.png
assets/public/assets/focus-visible-Pz59kC95.js
assets/public/assets/ic_ai_three_no-HNOhncg5.png
res/drawable-xhdpi-v4/ic_call_answer_video.png
res/drawable/abc_ratingbar_indicator_material.xml
res/drawable/abc_textfield_search_material.xml
assets/public/assets/fenxiang_icon-nKl31JVB.png
res/drawable-mdpi-v4/abc_text_select_handle_right_mtrl.png
res/drawable/abc_ic_menu_paste_mtrl_am_alpha.xml
kotlin/kotlin.kotlin_builtins
res/drawable-mdpi-v4/ic_call_answer_video_low.png
res/drawable-v23/abc_control_background_material.xml
res/drawable-v21/abc_btn_colored_material.xml
res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-anydpi-v21/ic_call_answer_video_low.xml
res/drawable-xxxhdpi-v4/abc_text_select_handle_left_mtrl.png
res/drawable-mdpi-v4/ic_call_answer_low.png
res/drawable-xxhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable/abc_list_selector_holo_dark.xml
res/drawable-mdpi-v4/abc_list_longpressed_holo.9.png
res/drawable-xxhdpi-v4/abc_btn_radio_to_on_mtrl_000.png
res/drawable-hdpi-v4/abc_text_select_handle_left_mtrl.png
res/layout-v26/abc_screen_toolbar.xml
res/anim/abc_tooltip_exit.xml
res/color-v23/abc_tint_default.xml
assets/public/assets/ic_ai_two-DiYLxc8z.png
res/interpolator/btn_checkbox_unchecked_mtrl_animation_interpolator_0.xml
assets/public/assets/icon_0-zabiXGf5.png
res/drawable/abc_ratingbar_small_material.xml
res/drawable/btn_checkbox_checked_mtrl.xml
res/anim/btn_radio_to_off_mtrl_dot_group_animation.xml
res/layout/abc_action_bar_up_container.xml
res/color-v21/abc_btn_colored_borderless_text_material.xml
res/drawable/abc_spinner_textfield_background_material.xml
assets/public/assets/md.transition-0xw43Ags.js
res/layout/abc_cascading_menu_item_layout.xml
assets/public/assets/icon_3-4ulhG8b-.png
res/drawable-mdpi-v4/ic_call_decline.png
assets/public/assets/fankui_icon-2fgbAKzB.png
res/drawable-ldrtl-mdpi-v17/abc_spinner_mtrl_am_alpha.9.png
assets/native-bridge.js
res/drawable-xhdpi-v4/abc_text_select_handle_right_mtrl.png
res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable/abc_ic_search_api_material.xml
res/drawable/abc_ic_menu_overflow_material.xml
res/animator/fragment_open_exit.xml
kotlin/ranges/ranges.kotlin_builtins
assets/public/assets/icon_9-FAJy4FxT.png
res/drawable-xxxhdpi-v4/ic_call_decline.png
assets/public/assets/index3-zZ3hdmnf.js
res/drawable/tooltip_frame_dark.xml
res/drawable-xxhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png
assets/setup_sdk_share_bg.png
res/drawable-xxhdpi-v4/abc_textfield_default_mtrl_alpha.9.png
res/drawable-hdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-v23/compat_splash_screen_no_icon_background.xml
res/drawable-mdpi-v4/abc_switch_track_mtrl_alpha.9.png
res/drawable-mdpi-v4/abc_btn_check_to_on_mtrl_015.png
res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png
res/anim/btn_checkbox_to_checked_box_inner_merged_animation.xml
res/drawable-hdpi-v4/abc_list_selector_disabled_holo_dark.9.png
res/drawable-xhdpi-v4/abc_btn_check_to_on_mtrl_015.png
res/drawable-xxhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png
res/interpolator/btn_radio_to_on_mtrl_animation_interpolator_0.xml
res/drawable-hdpi-v4/ic_call_answer.png
res/drawable-mdpi-v4/abc_list_selector_disabled_holo_light.9.png
res/drawable/btn_checkbox_checked_to_unchecked_mtrl_animation.xml
res/anim/abc_grow_fade_in_from_bottom.xml
assets/public/assets/zuanshi1-82XUIgeP.png
res/drawable-mdpi-v4/abc_list_pressed_holo_light.9.png
res/color/switch_thumb_material_dark.xml
assets/public/assets/icon_1_p-R-Hb6e6p.png
res/layout/abc_screen_content_include.xml
classes3.dex
res/layout-v21/notification_action.xml
res/drawable-hdpi-v4/abc_btn_check_to_on_mtrl_000.png
res/drawable-hdpi-v4/notification_bg_normal_pressed.9.png
assets/setup_sdk_share_info.xml
res/anim/abc_tooltip_enter.xml
res/layout/abc_alert_dialog_title_material.xml
res/mipmap-hdpi-v4/ic_launcher_round.png
res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png
res/color-v23/abc_tint_switch_track.xml
res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-hdpi-v4/notify_panel_notification_icon_bg.png
res/drawable-mdpi-v4/abc_btn_check_to_on_mtrl_000.png
assets/public/assets/index3-legacy-0hpQv3Vt.js
res/layout/select_dialog_singlechoice_material.xml
res/layout/abc_action_mode_close_item_material.xml
res/drawable/icon_background.xml
org/apache/cordova/allowlist/index2.html
assets/res/info.json
res/drawable-mdpi-v4/abc_list_focused_holo.9.png
res/drawable-xxxhdpi-v4/ic_call_answer.png
res/drawable-xxhdpi-v4/abc_text_select_handle_middle_mtrl.png
assets/public/assets/icon_2-8LHzqsjD.png
res/drawable-xhdpi-v4/notification_bg_normal_pressed.9.png
assets/public/assets/input-shims-legacy-UiwyVqCY.js
res/drawable-xhdpi-v4/abc_text_select_handle_left_mtrl.png
assets/public/assets/status-tap-mEoditjM.js
assets/public/assets/icon_5_p-oWAYQ9fx.png
res/anim/btn_checkbox_to_unchecked_icon_null_animation.xml
assets/public/assets/chengg-RyDmcePn.png
res/drawable-xhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png
res/layout/abc_activity_chooser_view.xml
res/drawable/abc_btn_default_mtrl_shape.xml
res/drawable-mdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png
res/color-v23/abc_tint_btn_checkable.xml
res/drawable-ldpi-v4/ic_call_answer.png
res/drawable-xhdpi-v4/abc_btn_check_to_on_mtrl_000.png
assets/public/assets/icon_1-OJDV5uct.png
res/drawable-hdpi-v4/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-hdpi-v4/notification_bg_low_pressed.9.png
res/drawable/abc_seekbar_tick_mark_material.xml
res/drawable/abc_ic_menu_cut_mtrl_alpha.xml
res/drawable-hdpi-v4/notification_bg_normal.9.png
META-INF/INJECT.SF
META-INF/INJECT.RSA
META-INF/MANIFEST.MF
污点分析
当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……| 规则名称 | 描述信息 | 操作 |
|---|---|---|
| 病毒分析 | 使用安卓恶意软件常用的API进行污点分析 | 开始分析 |
| 漏洞挖掘 | 漏洞挖掘场景下的污点分析 | 开始分析 |
| 隐私合规 | 隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 | 开始分析 |
| 密码分析 | 分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等 | 开始分析 |
| Callback | 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员 | 开始分析 |