导航菜单

应用安全检测报告

应用安全检测报告,支持文件搜索、内容检索和AI代码分析

移动应用安全检测报告

应用图标

沐爱 v1.0.0

Android APK 2c307d03...
49
安全评分

安全基线评分

49/100

中风险

综合风险等级

风险等级评定
  1. A
  2. B
  3. C
  4. F

应用存在一定安全风险,建议优化

漏洞与安全项分布

2 高危
30 中危
3 信息
1 安全

隐私风险评估

4
第三方跟踪器

中等隐私风险
检测到少量第三方跟踪器


检测结果分布

高危安全漏洞 2
中危安全漏洞 30
安全提示信息 3
已通过安全项 1
重点安全关注 0

高危安全漏洞 使用弱加密算法

使用弱加密算法
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/ishumei/l111l1111llIl/l1111l111111Il.java, line(s) 18,44,54
com/nirvana/tools/core/CryptUtil.java, line(s) 202

高危安全漏洞 该文件是World Writable。任何应用程序都可以写入文件

该文件是World Writable。任何应用程序都可以写入文件
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
com/faceunity/nama/data/disksource/facebeauty/FUDiskFaceBeautyUtils.java, line(s) 208
com/faceunity/nama/data/disksource/style/FUDiskFaceStyleUtils.java, line(s) 216
com/nirvana/tools/core/UTSharedPreferencesHelper.java, line(s) 7,21
com/nirvana/tools/logger/utils/UTSharedPreferencesHelper.java, line(s) 18

中危安全漏洞 应用已启用明文网络流量

[android:usesCleartextTraffic=true]
应用允许明文网络流量(如 HTTP、FTP 协议、DownloadManager、MediaPlayer 等)。API 级别 27 及以下默认启用,28 及以上默认禁用。明文流量缺乏机密性、完整性和真实性保护,攻击者可窃听或篡改传输数据。建议关闭明文流量,仅使用加密协议。

中危安全漏洞 Activity (com.nlkfybqszm.oqewrsg.BindAlipayActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (com.nlkfybqszm.oqewrsg.MainActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity 设置了 TaskAffinity 属性

(com.huijing.moonlove.wxapi.WXEntryActivity)
设置 taskAffinity 后,其他应用可读取发送至该 Activity 的 Intent。为防止敏感信息泄露,建议保持默认 affinity(包名)。

中危安全漏洞 Activity (com.huijing.moonlove.wxapi.WXEntryActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (com.tencent.tauth.AuthActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (com.tencent.connect.common.AssistActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (com.alipay.sdk.app.PayResultActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (com.alipay.sdk.app.AlipayResultActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Service (com.taobao.accs.data.MsgDistributeService) 未受保护。

[android:exported=true]
检测到  Service 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Broadcast Receiver (org.android.agoo.xiaomi.MiPushBroadcastReceiver) 未受保护。

[android:exported=true]
检测到  Broadcast Receiver 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Service (com.xiaomi.mipush.sdk.PushMessageHandler) 受权限保护,但应检查权限保护级别。

Permission: com.xiaomi.xmsf.permission.MIPUSH_RECEIVE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 Activity (com.xiaomi.mipush.sdk.NotificationClickedActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Service (com.huawei.hms.support.api.push.service.HmsMsgService) 未受保护。

[android:exported=true]
检测到  Service 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Content Provider (com.huawei.hms.support.api.push.PushProvider) 未受保护。

[android:exported=true]
检测到  Content Provider 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Broadcast Receiver (org.android.agoo.mezu.MeizuPushMsgReceiver) 受权限保护,但应检查权限保护级别。

Permission: com.meizu.cloud.push.permission.MESSAGE [android:exported=true]
检测到  Broadcast Receiver 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 Service (com.heytap.msp.push.service.CompatibleDataMessageCallbackService) 受权限保护,但应检查权限保护级别。

Permission: com.coloros.mcs.permission.SEND_MCS_MESSAGE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 Service (com.heytap.msp.push.service.DataMessageCallbackService) 受权限保护,但应检查权限保护级别。

Permission: com.heytap.mcs.permission.SEND_PUSH_MESSAGE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 Service (com.vivo.push.sdk.service.CommandClientService) 受权限保护,但应检查权限保护级别。

Permission: com.push.permission.UPSTAGESERVICE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 应用程序使用不安全的随机数生成器

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/hjq/permissions/manager/PermissionRequestCodeManager.java, line(s) 6
com/hunjing/moon/lib_common/util/StringUtils.java, line(s) 12
com/ishumei/l111l1111llIl/l111l11111Il.java, line(s) 5
com/nlkfybqszm/oqewrsg/PaymentActivity.java, line(s) 32
com/nlkfybqszm/oqewrsg/widget/RandomLayout.java, line(s) 12
faceverify/k.java, line(s) 24
org/android/spdy/SpdyBytePool.java, line(s) 3
org/greenrobot/greendao/test/DbTest.java, line(s) 7

中危安全漏洞 SHA-1是已知存在哈希冲突的弱哈希

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/faceunity/wrapper/authpack.java, line(s) 12
com/hunjing/moon/lib_common/util/StringUtils.java, line(s) 94
com/ishumei/l111l11111I1l/l1111l111111Il/l111l1111lIl.java, line(s) 57
com/ishumei/l111l11111I1l/l1111l111111Il/l11l1111lIIl.java, line(s) 57
com/ishumei/l111l1111llIl/l1111l111111Il.java, line(s) 67
com/jg/ids/i/i.java, line(s) 101
com/nlkfybqszm/oqewrsg/util/DeviceIdUtil.java, line(s) 138
com/test/commentdialog/util/AppUtil.java, line(s) 164
org/repackage/a/a/a/a/c.java, line(s) 56

中危安全漏洞 IP地址泄露

IP地址泄露


Files:
com/danikula/videocache/HttpProxyCacheServer.java, line(s) 32
face/security/device/BuildConfig.java, line(s) 13
org/android/spdy/SpdyRequest.java, line(s) 26,161,180,203,228,248,274,293,316,341

中危安全漏洞 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据

应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/cretin/www/cretinautoupdatelibrary/utils/AppUpdateUtils.java, line(s) 394
com/cretin/www/cretinautoupdatelibrary/utils/DownloadService.java, line(s) 204,227
com/danikula/videocache/StorageUtils.java, line(s) 21,33
com/example/pictureselectorlibrary/util/UCropOptions.java, line(s) 17
com/faceunity/core/utils/FileUtils.java, line(s) 91
com/faceunity/nama/FUConfig.java, line(s) 91,96
com/faceunity/nama/utils/FileUtils.java, line(s) 128,184,195
com/faceunity/nama/utils/Uri2PathUtil.java, line(s) 64
com/ishumei/l111l11111I1l/l111l1111llIl.java, line(s) 87
com/ishumei/l111l11111lIl/l1111l111111Il/l1111l111111Il.java, line(s) 18,62,70
com/ishumei/l111l1111llIl/l111l1111llIl.java, line(s) 560
com/lxj/xpopup/util/XPopupUtils.java, line(s) 668,691
com/nlkfybqszm/oqewrsg/util/FileUtils.java, line(s) 8
com/nlkfybqszm/oqewrsg/util/StorageUtil.java, line(s) 31,56
com/yalantis/ucrop/util/FileUtils.java, line(s) 216
top/zibin/luban/LubanUtils.java, line(s) 73,75

中危安全漏洞 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/danikula/videocache/sourcestorage/DatabaseSourceInfoStorage.java, line(s) 6,7,80
com/github/yuweiguocn/library/greendao/MigrationHelper.java, line(s) 5,46,85
com/nirvana/tools/logger/cache/db/AbstractDatabase.java, line(s) 7,322
com/nirvana/tools/logger/cache/db/DBHelper.java, line(s) 4,5,16,17,18,27
com/nlkfybqszm/oqewrsg/db/dao/ChatMessageDao.java, line(s) 4,81,89
com/nlkfybqszm/oqewrsg/db/dao/ChatTargetDao.java, line(s) 4,74,82
org/greenrobot/greendao/AbstractDao.java, line(s) 6,7,388,434,639,655,687
org/greenrobot/greendao/DbUtils.java, line(s) 6,23,66
org/greenrobot/greendao/database/StandardDatabase.java, line(s) 5,60,61

中危安全漏洞 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等

文件可能包含硬编码的敏感信息,如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/effective/android/panel/log/LogFormatter.java, line(s) 20
com/fdapp/mylove/BuildConfig.java, line(s) 35,26,18,36,16,21,31,27,33,19
com/meituan/android/walle/ChannelReader.java, line(s) 11
com/nirvana/tools/logger/UaidTracker.java, line(s) 22,23,24
com/nirvana/tools/logger/utils/LocalDeviceUtil.java, line(s) 13
com/nirvana/tools/logger/utils/UTSharedPreferencesHelper.java, line(s) 14,15
com/nlkfybqszm/oqewrsg/Constants.java, line(s) 365,491
com/nlkfybqszm/oqewrsg/bean/LoginInfo.java, line(s) 143
com/nlkfybqszm/oqewrsg/im/nim/DemoPrivatizationConfig.java, line(s) 18
com/nlkfybqszm/oqewrsg/im/nim/NimSDKOptionConfig.java, line(s) 62,57,67,20
com/nlkfybqszm/oqewrsg/util/AsyncHttpHelper.java, line(s) 37
com/nlkfybqszm/oqewrsg/util/GsonUtil.java, line(s) 230
com/nlkfybqszm/oqewrsg/util/WXShareUtil.java, line(s) 173
faceverify/p.java, line(s) 49,46
org/android/spdy/SpdyProtocol.java, line(s) 43

中危安全漏洞 MD5是已知存在哈希冲突的弱哈希

MD5是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/cretin/www/cretinautoupdatelibrary/utils/Md5Utils.java, line(s) 31
com/cretin/www/cretinautoupdatelibrary/utils/RootActivity.java, line(s) 82
com/danikula/videocache/ProxyCacheUtils.java, line(s) 48
com/ishumei/l111l1111llIl/l111l1111llIl.java, line(s) 133
com/nirvana/tools/core/AppUtils.java, line(s) 104
com/nirvana/tools/core/CryptUtil.java, line(s) 185
com/nirvana/tools/logger/utils/LocalDeviceUtil.java, line(s) 20
com/nlkfybqszm/oqewrsg/util/MD5.java, line(s) 10
com/opensource/svgaplayer/SVGACache.java, line(s) 36
com/test/commentdialog/util/AppUtil.java, line(s) 187,256,347
faceverify/a0.java, line(s) 76,118,187,207,240,267,300,329,363

中危安全漏洞 不安全的Web视图实现。可能存在WebView任意代码执行漏洞

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/nlkfybqszm/oqewrsg/webview/WebViewActivity.java, line(s) 180,179
com/nlkfybqszm/oqewrsg/webview/WebViewFullScreenActivity.java, line(s) 204,203

中危安全漏洞 应用程序创建临时文件。敏感信息永远不应该被写进临时文件

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/nlkfybqszm/oqewrsg/RecordActivity.java, line(s) 377

中危安全漏洞 应用程序包含隐私跟踪程序

此应用程序有多个4隐私跟踪程序。跟踪器可以跟踪设备或用户,是终端用户的隐私问题。

中危安全漏洞 此应用可能包含硬编码机密信息

从应用程序中识别出以下机密确保这些不是机密或私人信息
vivo推送的=> "local_iv" : "MzMsMzQsMzUsMzYsMzcsMzgsMzksNDAsNDEsMzIsMzgsMzcsMzYsMzUsMzQsMzMsI0AzNCwzMiwzMywzNywzMywzNCwzMiwzMywzMywzMywzNCw0MSwzNSwzNSwzMiwzMiwjQDMzLDM0LDM1LDM2LDM3LDM4LDM5LDQwLDQxLDMyLDM4LDM3LDMzLDM1LDM0LDMzLCNAMzQsMzIsMzMsMzcsMzMsMzQsMzIsMzMsMzMsMzMsMzQsNDEsMzUsMzIsMzIsMzI"
华为HMS Core 应用ID的=> "com.huawei.hms.client.appid" : "appid=107870005"
友盟统计的=> "UMENG_CHANNEL" : "moonlove"
vivo推送的=> "com.vivo.push.app_id" : "105634052"
openinstall统计的=> "com.openinstall.APP_KEY" : "vwb22u"
vivo推送的=> "com.vivo.push.api_key" : "86ab47d16a7ebaabf62e04889d5fde67"
荣耀推送的=> "com.hihonor.push.app_id" : "105634052"
"security_public_key" : "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8hzUojzHX8jDL+97pqr7CaLiKSsZ0aOES7FUcX7vh9PoEDbCKNCTakRXdS5EiurPk3QpvsAGbfyIs7JWKm4py9KcIdJsZRh9onknVeAVlU++jnrGFGEYfQb8iKzClN059gYeeJBs9mwi7RGU9tj0KHUG659v5sMBxv7zNse3fJQIDAQAB"
9e919b8d90969bd1908cd1ac9a8d89969c9ab29e919e989a8d
919a8b88908d94bc908a918b8d86b68c90
9c8b87a0968ca0918a9393
98be8f8f93969c9e8b969091b3909e9b9a8d8c
93909e9b9a9baf9e9c949e989a8cb691af8d909c9a8c8c
9e919b8d90969bd18b9a939a8f97909186d1ab9a939a8f97909186b29e919e989a8d
9c9092d19a939b9a8d9b8d96899a8d8cd18d968d8ad19a9b878fd19c9091999698d1ba9ba78fbc9091999698b893909d9e93
988c92d1908f9a8d9e8b908dd19e938f979e
9e919b8d90969bd18f8d9089969b9a8dd1ac9a8b8b9691988cdbac9a9c8a8d9a
9e919b8d90969bd19e8f8fd1be8f8f93969c9e8b969091b3909e9b9a8d8c
988c92d18c9692d18c8b9e8b9a
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCLShWjAtxJv3g2VPIYOOAv4rnVDdLkdseKm7+KOkCBLV9SKY5oqksFaXcLZ+nRnjnczhze5eGKhevwliUyag6x96GyXI2WagKIoB7Uwl2byl0xB5bNvYzf+x/DKHTSoGJshU6shXWXcjGFq+mUiPhM3WGZoqdY+vvqOWD+tga8XQIDAQAB
b0ec639085ded8d439d13cb01b21e33c
n4aw0AoExz4atTkUlZJIf9eNLj7ogTlQGANNzE2R/uskFse2GsCqJKFTk4UraBkzf
8a8c9a8dd1858f908c9a9bd19e8f8f
8d90d18d9693d1909a92d18f8c9190
8f9a8d8c968c8bd18c868cd18c979088d19b9a89969c9ad196929a96
9b9ad18d909d89d19e919b8d90969bd1878f908c9a9bd1a78f908c9a9bbd8d969b989adbbc908f86b091a88d968b9aac908d8b9a9bac9a8b
92968c8c969198df9c908d9adf99969a939b8cd3df9c979a9c94df8f8d90988a9e8d9bdf9996939a
9e919b8d90969bd1908cd1ac868c8b9a92af8d908f9a8d8b969a8c
9a878fa09d9e8c9ad19e8f94
ngZlTTem7Pjdm1V9bJgQ6iQvFHsvT+vNgJ3wAIRd+iCMXm8y96yZhD2+SH5odBYS2
9e8bdf9c9092d19e919b8d90969bd196918b9a8d919e93d1908c
9e919b8d90969bd18b9a939a8f97909186d1bc9a9393b6919990a89c9b929e
9e8bdf9e919b8d90969bd19e8f8fd1be9c8b9689968b86ab978d9a9e9b
282bdd3a37ec4f898f47c5bbbf9d2369
9b9e93899694d18c868c8b9a92d1bb9a87af9e8b97b3968c8bdbba939a929a918b
9e8bdf9c9092d1968c978a929a96
d08c868cd09b9a89969c9a8cd08c868c8b9a92d09c8f8ad08f908c8c969d939a
9b9ad18d909d89d19e919b8d90969bd1878f908c9a9bd1a78f908c9a9bb79a938f9a8d8c
ac92b08f8b969091d18f8a9d93969cb49a86df968cdf918a9393de
93969d8c928c9b94d18c90df93909e9bdf999e96939a9bd1
ac92969bb29e919e989a8ddf9691968bdf999e96939a9bc5dfda8c
8c9692bc908a918b8d86b6acb0
9e919b8d90969bd18b9a939a8f97909186d1bc9a9393b6919990b88c92
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YCzxZS0FaWDOdtwgcHJ
9b9ad18d909d89d19e919b8d90969bd1878f908c9a9bd1a78f908c9a9bb691968b
bd020c08d1544d2eb70727a3017bbfdb
689048dd6c255c772817ba9c
d08c868cd09b9a89969c9a8cd08c868c8b9a92d09c8f8ad08f8d9a8c9a918b
9e919b8d90969bd18f8d9089969b9a8dd1ac9a8b8b9691988cdbac868c8b9a92
30885cfc6d7b9c4060f912755ba80048
a78f908c9a9bbd8d969b989ad1959e8d
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/YHP9utFGOhGk7Xf5L7jOgQz5
8a8c9a8dd1858f908c9a9bd18c868c8b9a92
8cb79090949a9bb29a8b97909bbc9e93939d9e9c948c
9b9e93899694d18c868c8b9a92d1bb9a87af9e8b97b3968c8b
9e8bdf9e919b8d90969bd1908cd1b390908f9a8d
9e919b8d90969bd18b9a939a8f97909186d1b2ac9692ab9a939a8f97909186b29e919e989a8d
8d90d19d90908bd18c9a9c8a8d9a9d90908b949a86979e8c97
c7628f1e882b21bae7c7b2b399dd7f0a
d18b978a929d9c9e9c979aa0969b87a0
9e919b8d90969bd18b9a939a8f97909186d1bc9a9393b6919990bc9b929e
d09c8f8a998d9a8ed09c8f8a96919990a0929e87a0998d9a8e
9e919b8d90969bd18b9a939a8f97909186d1bc9a9393b6919990b38b9a
8c928c9b94df91908bdf9691968bde
b9283ee370694f7ab0cac1cde57aedfe
9d909e8d9bd392909b9a93d39d8d9e919bd3929e918a999e9c8b8a8d9a8dd3999691989a8d8f8d96918bd39c8f8aa09e9d96d39c8f8aa09e9d96cd
9e919b8d90969bd18b9a939a8f97909186d1ab9a939a8f97909186b29e919e989a8dcd
ac92b08f8b969091d1908d989e9196859e8b969091df968cdf918a9393de
989a8bac9692bc908a918b8d86b68c90
9e8bdf959e899ed1939e9198d18d9a99939a9c8bd1b29a8b97909b
ac92b08f8b969091df968cdf918a9393de
n+APJWeeIsUEJHi0FSf3EmwAtNgcJwLYed8Lrem+2+qvFY8RRjH3w4jT/wl2HKGEY
9e8bdf9e919b8d90969bd1908cd1b79e919b939a8d
989a8bac9692b08f9a8d9e8b908d
9b9ad18d909d8999d19e919b8d90969bd1878f908c9a9bd1a78f908c9a9bb79a938f9a8d8c
307f56216d351f1fb6bda28d410e257b
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5se07mkN71qsSJHjZ2Z0+Z+4LlLvf2sz7Md38VAa3EmAOvI7vZp3hbAxicL724ylcmisTPtZQhT/9C+25AELqy9PN9JmzKpwoVTUoJvxG4BoyT49+gGVl6s6zo1byNoHUzTfkmRfmC9MC53HvG8GwKP5xtcdptFjAIcgIR7oAWQIDAQAB
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCVc1ecjpc5k7TkabF935iQONDZ0/E5XWPVv9FEsI59XTRW0+BCMK1MODRSWMvHFrPMh9ZilnRr7qXuAKCBEynQEghmpIVvMYhFu48FAI9bKfkI5lKuQK+tc4X0+zTbNrpedNoKXK4C7dDjTETBH6prwWE9j5WsAf0gbjUbIs3FxwIDAQAB
nsjV57o+phSlqM0B5aPiMScxWJmCzFRX4NKcjt6KGP+3GpzmTyrpavnYQtHasperH
e163705Bd018bABb3e2362C440A94673
8f9a8d8c968c8bd18d9e9b9690d18c9a8d969e939190
014a06685f0JVDULT/MIGfMA0GCSqGSIb3DQEBAQUAA4G
e5d477b61fcd444ea5471a18671762ac
9b9ad18d909d89d19e919b8d90969bd1878f908c9a9bd1a78f908c9a9bbd8d969b989a
9e919b8d90969bd1908cd1bd8a96939b
d18b978a929d9c9e9c979aa0
8c868cd18c9a8d969e939190
9c90918b9a878bdf968cdf918a9393de

安全提示信息 应用程序记录日志信息,不得记录敏感信息

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
aiven/guide/view/util/MLog.java, line(s) 19
com/contrarywind/view/WheelView.java, line(s) 394
com/cretin/www/cretinautoupdatelibrary/utils/JSONHelper.java, line(s) 188,195,349
com/cretin/www/cretinautoupdatelibrary/utils/LogUtils.java, line(s) 9
com/cretin/www/cretinautoupdatelibrary/view/ProgressView.java, line(s) 97
com/davemorrissey/labs/subscaleview/SubsamplingScaleImageView.java, line(s) 341,345,475,479,547
com/dueeeke/videoplayer/util/L.java, line(s) 11
com/faceunity/core/camera/FUCamera.java, line(s) 281
com/faceunity/core/glview/GLTextureView.java, line(s) 157,176,279
com/faceunity/core/media/video/VideoPlayHelper.java, line(s) 126
com/faceunity/core/media/video/VideoRecordHelper.java, line(s) 72,97,109
com/faceunity/core/media/video/encoder/MediaAudioEncoder.java, line(s) 53,70
com/faceunity/core/media/video/encoder/MediaAudioFileEncoder.java, line(s) 47
com/faceunity/core/media/video/encoder/MediaEncoder.java, line(s) 46,56,64
com/faceunity/core/media/video/encoder/MediaVideoEncoder.java, line(s) 61,190,208
com/faceunity/core/model/facebeauty/FaceBeauty.java, line(s) 740,765,785,805,825,879,946,985,1010,1040,1055
com/faceunity/core/utils/CameraUtils.java, line(s) 127,321,355,458,459
com/faceunity/core/utils/FULogger.java, line(s) 38,55
com/faceunity/core/utils/GlUtil.java, line(s) 113,175,188,198,199,214,218
com/faceunity/core/utils/VideoDecoder.java, line(s) 67,131,265
com/fdapp/mylove/wxapi/WXEntryActivity.java, line(s) 36,64,70,75,80,85
com/github/yuweiguocn/library/greendao/MigrationHelper.java, line(s) 175,238
com/huijing/moonlove/wxapi/WXEntryActivity.java, line(s) 52,58,63,68,73
com/ishumei/dfp/SMSDK.java, line(s) 30
com/ishumei/l1111l111111Il/l1111l111111Il.java, line(s) 51
com/ishumei/l111l1111l1Il/l1111l111111Il/l11l1111Il.java, line(s) 97,132,10,83,101,105
com/ishumei/l111l1111llIl/l111l11111lIl.java, line(s) 54,66
com/ishumei/smantifraud/SmAntiFraud.java, line(s) 252,285,352,360,382
com/lxj/xpopup/util/XPermission.java, line(s) 110
com/lzf/easyfloat/permission/PermissionUtils.java, line(s) 88
com/lzf/easyfloat/permission/rom/HuaweiUtils.java, line(s) 33,39,42,57
com/lzf/easyfloat/permission/rom/MeizuUtils.java, line(s) 22,25,41
com/lzf/easyfloat/permission/rom/MiuiUtils.java, line(s) 31,44,45,57,68,86,108,118
com/lzf/easyfloat/permission/rom/OppoUtils.java, line(s) 37
com/lzf/easyfloat/permission/rom/QikuUtils.java, line(s) 30,45
com/lzf/easyfloat/utils/Logger.java, line(s) 55
com/netease/nmc/nertcsample/beauty/CameraRenderer.java, line(s) 62
com/nirvana/tools/core/EncryptUtils.java, line(s) 70,90
com/nirvana/tools/core/NetworkUtils.java, line(s) 21,49,67
com/nirvana/tools/logger/cache/db/AbstractDatabase.java, line(s) 374
com/nirvana/tools/logger/cache/db/DBHelper.java, line(s) 20,30
com/nirvana/tools/logger/utils/ConsoleLogUtils.java, line(s) 15
com/nlkfybqszm/oqewrsg/AboutUsActivity.java, line(s) 80
com/nlkfybqszm/oqewrsg/AccountSecurityActivity.java, line(s) 58
com/nlkfybqszm/oqewrsg/AlbumActivity.java, line(s) 168,172,190,194
com/nlkfybqszm/oqewrsg/AudioChatViewActivity.java, line(s) 408,488,1382,1801,1802,1805,1806,1957,498,504,521,1460
com/nlkfybqszm/oqewrsg/BeautySettingActivity.java, line(s) 116
com/nlkfybqszm/oqewrsg/BindPhoneActivity.java, line(s) 50
com/nlkfybqszm/oqewrsg/CallCoverActivity.java, line(s) 450,455,479,484,517,522
com/nlkfybqszm/oqewrsg/ChatActivityV1.java, line(s) 933,1158,1180,1319,1325,1353,1360,1364,1444,1448,1464,1650,2067,2116,2425,2429,2467,2475,2495,2497,3476,922,2794,3521,3522,1055
com/nlkfybqszm/oqewrsg/ChatLongTimeUnansweredActivity.java, line(s) 326
com/nlkfybqszm/oqewrsg/ChatManager.java, line(s) 292,772,890,901,1386,1463,149
com/nlkfybqszm/oqewrsg/ChatNoticeActivity.java, line(s) 225
com/nlkfybqszm/oqewrsg/DynamicDetailsActivity.java, line(s) 132
com/nlkfybqszm/oqewrsg/DynamicsPushActivity.java, line(s) 196,240,244,258,262,278,282,297,301,471
com/nlkfybqszm/oqewrsg/FaceComparisonActivity.java, line(s) 178
com/nlkfybqszm/oqewrsg/GreetingSettingsActivity.java, line(s) 148,237,252,308,312,327,331,413,464,475,479,497,505,522,540,542
com/nlkfybqszm/oqewrsg/InvitationSupplementActivity.java, line(s) 407,414,441,449
com/nlkfybqszm/oqewrsg/MainActivity.java, line(s) 1025,1280,1390,1426,1432,1686,2634,2846,2852,303,1022,2839
com/nlkfybqszm/oqewrsg/MainVideoActivity.java, line(s) 441,514
com/nlkfybqszm/oqewrsg/MatchingActivity.java, line(s) 258,378,413,429,434
com/nlkfybqszm/oqewrsg/MineTopicActivity.java, line(s) 162
com/nlkfybqszm/oqewrsg/MyCertificationActivity.java, line(s) 64
com/nlkfybqszm/oqewrsg/MyUserDetailsActivity.java, line(s) 581
com/nlkfybqszm/oqewrsg/NavActivityNew.java, line(s) 375
com/nlkfybqszm/oqewrsg/PayActivity.java, line(s) 57,140
com/nlkfybqszm/oqewrsg/PaymentActivity.java, line(s) 90
com/nlkfybqszm/oqewrsg/PerfectInformationActivity.java, line(s) 115,119,206
com/nlkfybqszm/oqewrsg/PersonalActivityV1.java, line(s) 269,474,728
com/nlkfybqszm/oqewrsg/PostPhotoActivity.java, line(s) 59
com/nlkfybqszm/oqewrsg/PostVideoActivity.java, line(s) 100,104,120,124,285,304
com/nlkfybqszm/oqewrsg/PrivacySettingActivity.java, line(s) 339
com/nlkfybqszm/oqewrsg/ReceivedGiftActivity.java, line(s) 50
com/nlkfybqszm/oqewrsg/ReportAnchorActivity.java, line(s) 145,153,157,172,176
com/nlkfybqszm/oqewrsg/RingRingActivity.java, line(s) 304
com/nlkfybqszm/oqewrsg/RingRingAudioActivity.java, line(s) 286
com/nlkfybqszm/oqewrsg/RingRingAudioHeartMatchingActivity.java, line(s) 286
com/nlkfybqszm/oqewrsg/RingRingHeartMatchingActivity.java, line(s) 306
com/nlkfybqszm/oqewrsg/SearchActivity.java, line(s) 294
com/nlkfybqszm/oqewrsg/SettingActivity.java, line(s) 87
com/nlkfybqszm/oqewrsg/SignatureActivity.java, line(s) 41
com/nlkfybqszm/oqewrsg/SplashActivity.java, line(s) 79,140,144,232,238,281,309,333,405,260,467
com/nlkfybqszm/oqewrsg/TeenModeShowActivity.java, line(s) 120,166
com/nlkfybqszm/oqewrsg/UserDetailGalleryActivity.java, line(s) 50,57,115
com/nlkfybqszm/oqewrsg/UserDetailsActivityV1.java, line(s) 408
com/nlkfybqszm/oqewrsg/VerifyActivity.java, line(s) 42,149,162
com/nlkfybqszm/oqewrsg/VideoChatViewActivity.java, line(s) 390,521,617,693,901,1645,2115,2116,2119,2120,2275,531,537,703,1724
com/nlkfybqszm/oqewrsg/VideoManageActivity.java, line(s) 138,142,158,162
com/nlkfybqszm/oqewrsg/VideoSelectPhotoActivity.java, line(s) 48,52,69,73
com/nlkfybqszm/oqewrsg/WechatAuthActivity.java, line(s) 80,84
com/nlkfybqszm/oqewrsg/WithdrawNewActivity.java, line(s) 82
com/nlkfybqszm/oqewrsg/adatper/MainIndexOptionAdapter.java, line(s) 31
com/nlkfybqszm/oqewrsg/adatper/MyTopicListV1Adapter.java, line(s) 55,84
com/nlkfybqszm/oqewrsg/adatper/MyUserInfoAdapter.java, line(s) 184
com/nlkfybqszm/oqewrsg/adatper/TopicAttentionAdapter.java, line(s) 117
com/nlkfybqszm/oqewrsg/adatper/TopicListAdapter.java, line(s) 87
com/nlkfybqszm/oqewrsg/adatper/UserChatNewAdapter.java, line(s) 206,456,463,469,685
com/nlkfybqszm/oqewrsg/adatper/UserInfoAdapter.java, line(s) 98,282
com/nlkfybqszm/oqewrsg/adatper/UserMessageChatAdapter.java, line(s) 195,370,377,383,446
com/nlkfybqszm/oqewrsg/adatper/UserTopicListAdapter.java, line(s) 85
com/nlkfybqszm/oqewrsg/application/LokApp.java, line(s) 344,595,614,619,630,634,941
com/nlkfybqszm/oqewrsg/cloud/alicloud/AliCloudUpload.java, line(s) 77,82,98,118,122,127,143,52
com/nlkfybqszm/oqewrsg/db/manager/BaseManager.java, line(s) 25,46,58,72,81,89,102,126,137,164
com/nlkfybqszm/oqewrsg/db/manager/ChatMessageManager.java, line(s) 83,87,111,115,124,133,140,144
com/nlkfybqszm/oqewrsg/db/manager/ChatTargetManager.java, line(s) 142
com/nlkfybqszm/oqewrsg/dialog/CropImageDialog.java, line(s) 94,99
com/nlkfybqszm/oqewrsg/dialog/GuardHerDialog.java, line(s) 86,91
com/nlkfybqszm/oqewrsg/dialog/SetQrCodeDialog.java, line(s) 254,258,273,277
com/nlkfybqszm/oqewrsg/fragment/AttentionFragment.java, line(s) 66,182,205
com/nlkfybqszm/oqewrsg/fragment/CallDetailsFragment.java, line(s) 41
com/nlkfybqszm/oqewrsg/fragment/DynamicOneFragment.java, line(s) 259,438,488
com/nlkfybqszm/oqewrsg/fragment/HPNewestFragmentV1.java, line(s) 209,286
com/nlkfybqszm/oqewrsg/fragment/HomeFragmentNew.java, line(s) 182,193
com/nlkfybqszm/oqewrsg/fragment/MainVideoFragment.java, line(s) 140
com/nlkfybqszm/oqewrsg/fragment/MsgListFragment.java, line(s) 131,146,484,581,698,865
com/nlkfybqszm/oqewrsg/fragment/MyOthersTopicFragment.java, line(s) 60,152,168
com/nlkfybqszm/oqewrsg/fragment/MyUserInfoFragment.java, line(s) 95,119,120,183,190
com/nlkfybqszm/oqewrsg/fragment/MyVideoFragment.java, line(s) 68
com/nlkfybqszm/oqewrsg/fragment/NewQianInDialog.java, line(s) 81
com/nlkfybqszm/oqewrsg/fragment/OthersTopicFragmentV2.java, line(s) 61,135,151
com/nlkfybqszm/oqewrsg/fragment/PhotoListFragment.java, line(s) 88,202
com/nlkfybqszm/oqewrsg/fragment/ShouBangFragment.java, line(s) 66
com/nlkfybqszm/oqewrsg/fragment/ShouSheFragment.java, line(s) 53,77
com/nlkfybqszm/oqewrsg/fragment/TieListFragment.java, line(s) 69,166,191
com/nlkfybqszm/oqewrsg/fragment/UserInfoFragment.java, line(s) 54,93,117,118,201,208,323
com/nlkfybqszm/oqewrsg/fragment/VidFragmentV1.java, line(s) 111
com/nlkfybqszm/oqewrsg/fragment/VideoPlayerOneFragment.java, line(s) 140
com/nlkfybqszm/oqewrsg/fragment/WithdrawalDetailsBaseFragment.java, line(s) 42
com/nlkfybqszm/oqewrsg/fragment/permissionsettings/MyPhotoListFragment.java, line(s) 155
com/nlkfybqszm/oqewrsg/identity/IdentityModel.java, line(s) 110,114,132,136,158,167,168,179,197,207,214,250
com/nlkfybqszm/oqewrsg/im/nim/CustomAttachParser.java, line(s) 18,21,31
com/nlkfybqszm/oqewrsg/im/nim/ImCustomMessageAttachment.java, line(s) 15,21
com/nlkfybqszm/oqewrsg/im/nim/NeteaseIm.java, line(s) 71,80,132,149,150,151,156,157,176,187,221,226,231,239,248,258,263,268,279,293,306,307,309,310,311,313,315
com/nlkfybqszm/oqewrsg/im/nim/event/OnlineStateEventManager.java, line(s) 98,109,111
com/nlkfybqszm/oqewrsg/im/nim/event/OnlineStateEventSubscribe.java, line(s) 70,72,75,91
com/nlkfybqszm/oqewrsg/model/UserDataModel.java, line(s) 57
com/nlkfybqszm/oqewrsg/model/UserInfoModel.java, line(s) 57
com/nlkfybqszm/oqewrsg/network/HttpModule.java, line(s) 31
com/nlkfybqszm/oqewrsg/permiss/SelfStartingManageUtil.java, line(s) 40,58,60
com/nlkfybqszm/oqewrsg/present/widget/ComboView.java, line(s) 57,67,70,71,204
com/nlkfybqszm/oqewrsg/present/widget/ComposeView.java, line(s) 171
com/nlkfybqszm/oqewrsg/presenter/HeaderImagePresenter.java, line(s) 59,214,218,234,238
com/nlkfybqszm/oqewrsg/receiver/PresentReceiver.java, line(s) 29
com/nlkfybqszm/oqewrsg/receiver/SmsReceiver.java, line(s) 38
com/nlkfybqszm/oqewrsg/room/widget/dialog/ChatDialog.java, line(s) 502
com/nlkfybqszm/oqewrsg/testActivity.java, line(s) 13,16
com/nlkfybqszm/oqewrsg/util/ActivityTaskHelper.java, line(s) 128,149,176
com/nlkfybqszm/oqewrsg/util/ApplicationUtil.java, line(s) 374,407,458
com/nlkfybqszm/oqewrsg/util/AsyncHttpHelper.java, line(s) 214,238,239,279,430,431,620,340,525,535,559
com/nlkfybqszm/oqewrsg/util/DaemonService.java, line(s) 46,87
com/nlkfybqszm/oqewrsg/util/DeviceIdUtil.java, line(s) 87,88,89,105,113
com/nlkfybqszm/oqewrsg/util/DownloadUtil.java, line(s) 68
com/nlkfybqszm/oqewrsg/util/DynamicResource.java, line(s) 89
com/nlkfybqszm/oqewrsg/util/GsonUtil.java, line(s) 285
com/nlkfybqszm/oqewrsg/util/ITelnetEngine.java, line(s) 309,366,406,458,531,586
com/nlkfybqszm/oqewrsg/util/ImageUtil.java, line(s) 47
com/nlkfybqszm/oqewrsg/util/LoginUtil.java, line(s) 104,168,251,273,281,306,343,411,258,350
com/nlkfybqszm/oqewrsg/util/MainProcessUtil.java, line(s) 36,45,59,77
com/nlkfybqszm/oqewrsg/util/PayUtil.java, line(s) 42,46,61,72,179
com/nlkfybqszm/oqewrsg/util/PushHelper.java, line(s) 65,89,93,97,109,114
com/nlkfybqszm/oqewrsg/util/QQShareUtil.java, line(s) 80,171,175,179,183,206,210,214,218
com/nlkfybqszm/oqewrsg/util/StatusBarUtil.java, line(s) 124
com/nlkfybqszm/oqewrsg/util/StorageUtil.java, line(s) 35,70
com/nlkfybqszm/oqewrsg/util/UmengUtils.java, line(s) 122
com/nlkfybqszm/oqewrsg/util/UpgradeUtil.java, line(s) 34
com/nlkfybqszm/oqewrsg/util/WXShareUtil.java, line(s) 84,92,159,163,184
com/nlkfybqszm/oqewrsg/util/WebSocketUtil.java, line(s) 60,62,64,66,68,70,72,74,76,78,80,82,84,86,90,97,109,128,132
com/nlkfybqszm/oqewrsg/video/netease/NeteaseVideoModel.java, line(s) 142,162,169,173,177,181,185,201,309,404,93,230,328,334,350
com/nlkfybqszm/oqewrsg/webview/WebViewActivity.java, line(s) 283
com/nlkfybqszm/oqewrsg/webview/WebViewFullScreenActivity.java, line(s) 319
com/nlkfybqszm/oqewrsg/widget/CircleSurfaceView.java, line(s) 50,60,77,78
com/nlkfybqszm/oqewrsg/widget/DragVideoView.java, line(s) 67
com/nlkfybqszm/oqewrsg/widget/ImageGridView.java, line(s) 114
com/nlkfybqszm/oqewrsg/widget/MsgGridView.java, line(s) 80
com/nlkfybqszm/oqewrsg/widget/MyInfoGridView.java, line(s) 72
com/nlkfybqszm/oqewrsg/widget/MyScrollView.java, line(s) 48
com/nlkfybqszm/oqewrsg/widget/ToastCompat.java, line(s) 90
com/nlkfybqszm/oqewrsg/widget/WrapTextView.java, line(s) 84
com/nlkfybqszm/oqewrsg/widget/recyclerpage/DefaultVideoController.java, line(s) 66,76,82,85,91
com/nlkfybqszm/oqewrsg/widget/swipelayout/SwipeLayout.java, line(s) 1235,1246,1161,1190
com/nlkfybqszm/oqewrsg/widget/videoplayer/VideoPlayerController.java, line(s) 47
com/nlkfybqszm/oqewrsg/widget/viewpager/AnimatBanner.java, line(s) 253
com/opensource/svgaplayer/utils/log/DefaultLogCat.java, line(s) 22
com/pay/paytypelibrary/activity/AliPayActivity.java, line(s) 25
com/test/commentdialog/util/LibraryLoader.java, line(s) 77,90,93,97,102,105,129,137,144,154,161,164,171,195,100
com/test/commentdialog/util/RSAUtil.java, line(s) 46
com/test/commentdialog/util/RecyclerViewUtil.java, line(s) 28
com/uyumao/c.java, line(s) 22
com/uyumao/e.java, line(s) 267,315,721
com/yalantis/ucrop/task/BitmapCropTask.java, line(s) 158
com/yalantis/ucrop/task/BitmapLoadTask.java, line(s) 116,123,160,163
com/yalantis/ucrop/util/BitmapLoadUtils.java, line(s) 49,59,177,179
com/yalantis/ucrop/util/ImageHeaderParser.java, line(s) 148,151,188,200,210,229,232,293,311,313,326,337,342,351
com/yalantis/ucrop/view/TransformImageView.java, line(s) 247
eightbitlab/com/blurview/BlurView.java, line(s) 98
eightbitlab/com/blurview/PreDrawBlurController.java, line(s) 100
eightbitlab/com/blurview/RenderNodeBlurController.java, line(s) 109
eightbitlab/com/blurview/RenderScriptBlur.java, line(s) 53
java2jni_do_not_delete_this/java2jni_do_not_delete_this_library_APSE_1J.java, line(s) 11
java2jni_do_not_delete_this/java2jni_do_not_delete_this_library_zkfv_1tj.java, line(s) 11
me/jessyan/autosize/AutoSize.java, line(s) 133
me/jessyan/autosize/AutoSizeConfig.java, line(s) 331,344,357,378
me/jessyan/autosize/DefaultAutoAdaptStrategy.java, line(s) 21,31,34,15,28
me/jessyan/autosize/utils/AutoSizeLog.java, line(s) 11
org/android/spdy/ProtectedPointerTest.java, line(s) 11,16,46
org/android/spdy/spduLog.java, line(s) 22
org/greenrobot/eventbus/Logger.java, line(s) 31
org/greenrobot/greendao/AbstractDao.java, line(s) 142,503
org/greenrobot/greendao/DaoException.java, line(s) 24,25
org/greenrobot/greendao/DaoLog.java, line(s) 15,35,39,23,43,47,27,55,19,31,59,67
org/greenrobot/greendao/DbUtils.java, line(s) 33,55
org/greenrobot/greendao/async/AsyncOperationExecutor.java, line(s) 233,250,84
org/greenrobot/greendao/internal/LongHashMap.java, line(s) 67
org/greenrobot/greendao/query/QueryBuilder.java, line(s) 120,123
org/greenrobot/greendao/test/AbstractDaoTest.java, line(s) 29,32,48
org/greenrobot/greendao/test/AbstractDaoTestLongPk.java, line(s) 15,20
org/greenrobot/greendao/test/AbstractDaoTestSinglePk.java, line(s) 25
org/greenrobot/greendao/test/DbTest.java, line(s) 63
top/zibin/luban/Luban.java, line(s) 275,274
top/zibin/luban/io/LruArrayPool.java, line(s) 115,216

安全提示信息 此应用程序使用SQL Cipher。SQLCipher为sqlite数据库文件提供256位AES加密

此应用程序使用SQL Cipher。SQLCipher为sqlite数据库文件提供256位AES加密


Files:
org/greenrobot/greendao/database/DatabaseOpenHelper.java, line(s) 19,6,15

安全提示信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/nlkfybqszm/oqewrsg/util/ApplicationUtil.java, line(s) 5,67,141,501
com/pay/paytypelibrary/activity/SandWebActivity.java, line(s) 5,127

已通过安全项 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/uyumao/k.java, line(s) 28,26

综合安全基线评分总结

应用图标

沐爱 v1.0.0

Android APK
49
综合安全评分
中风险