导航菜单
登录 注册

应用安全检测报告

应用安全检测报告，支持文件搜索、内容检索和AI代码分析

移动应用安全检测报告

应用图标

远离手机 v4.9.11

Android APK 8f55b246...
48
安全评分

安全基线评分

48/100

中风险

综合风险等级

风险等级评定
  1. A
  2. B
  3. C
  4. F

应用存在一定安全风险，建议优化

漏洞与安全项分布

4 高危
78 中危
2 信息
1 安全

隐私风险评估

1
第三方跟踪器

中等隐私风险
检测到少量第三方跟踪器


检测结果分布

高危安全漏洞 4
中危安全漏洞 78
安全提示信息 2
已通过安全项 1
重点安全关注 0

高危安全漏洞 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
com/lijianqiang12/silent/component/activity/TheWebViewActivity.java, line(s) 262,13,14

高危安全漏洞 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/lijianqiang12/silent/ll11ll11II.java, line(s) 37,51,76,93

高危安全漏洞 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 

不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#webview-server-certificate-verification

Files:
com/lijianqiang12/silent/ll11l1lIl11lI.java, line(s) 89,85

高危安全漏洞 使用弱加密算法 

使用弱加密算法
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/lijianqiang12/silent/I111I1I1II1.java, line(s) 10

中危安全漏洞 应用已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用允许明文网络流量（如 HTTP、FTP 协议、DownloadManager、MediaPlayer 等）。API 级别 27 及以下默认启用，28 及以上默认禁用。明文流量缺乏机密性、完整性和真实性保护，攻击者可窃听或篡改传输数据。建议关闭明文流量，仅使用加密协议。

中危安全漏洞 Activity 设置了 TaskAffinity 属性 

(com.lijianqiang12.silent.component.activity.AppLimitUnlockActivity)
设置 taskAffinity 后，其他应用可读取发送至该 Activity 的 Intent。为防止敏感信息泄露，建议保持默认 affinity（包名）。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.AppLimitUnlockActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.invite_gift.InviteGiftActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.lock.setting.FastDenyPageSettingActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.lock.setting.DenyPageSettingActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.qa.QaActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.monitor.applimitcreate.AppLimitCreateActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.monitor.applimitsetting.AppLimitSettingActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.developer_unlock.DeveloperUnlockActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.room_request.VerifyRoomRequestActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.notice.MsgActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.vip.BuyHistoryActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.vip.VIP2Activity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.lock.punch.MyPunchCardActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.lock.punch.PunchCardActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.StartActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.theme.ThemeActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.analyze.appusage.AppUsageAnalyzeActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.analyze.todayusage.TodayAppUsageActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.analyze.todaytrend.TodayLockTrendActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.AboutActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.lock.ShareWordActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Service (com.lijianqiang12.silent.component.service.TheWallpaperService) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.BIND_WALLPAPER [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Activity 设置了 TaskAffinity 属性 

(com.lijianqiang12.silent.component.activity.PasswordUnlockActivity)
设置 taskAffinity 后，其他应用可读取发送至该 Activity 的 Intent。为防止敏感信息泄露，建议保持默认 affinity（包名）。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.PasswordUnlockActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity 设置了 TaskAffinity 属性 

(com.lijianqiang12.silent.component.activity.FriendUnlockActivity)
设置 taskAffinity 后，其他应用可读取发送至该 Activity 的 Intent。为防止敏感信息泄露，建议保持默认 affinity（包名）。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.FriendUnlockActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity 设置了 TaskAffinity 属性 

(com.lijianqiang12.silent.component.activity.PayUnlockActivity)
设置 taskAffinity 后，其他应用可读取发送至该 Activity 的 Intent。为防止敏感信息泄露，建议保持默认 affinity（包名）。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.PayUnlockActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.room.roomdetail.DetailRoomActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.UnlockFriendActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.room.createroom.CreateRoomActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.room.allroom.RoomAllActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.baozang.HutuiActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Service (com.lijianqiang12.silent.component.service.MyAccessibilityService) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.BIND_ACCESSIBILITY_SERVICE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Broadcast Receiver (com.lijianqiang12.silent.component.activity.widget.DenyUninstallAppWidget) 未受保护。 

[android:exported=true]
检测到  Broadcast Receiver 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Broadcast Receiver (com.lijianqiang12.silent.component.activity.widget.DenyUninstallAppWidget2) 未受保护。 

[android:exported=true]
检测到  Broadcast Receiver 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Broadcast Receiver (com.lijianqiang12.silent.component.activity.widget.DenyUninstallAppWidget3) 未受保护。 

[android:exported=true]
检测到  Broadcast Receiver 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Broadcast Receiver (com.lijianqiang12.silent.component.activity.widget.DenyUninstallAppWidget4) 未受保护。 

[android:exported=true]
检测到  Broadcast Receiver 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.PermissionActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.IconSplashActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.TheMainActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.TheLoginActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.setting.SettingsActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.TheWebViewActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.lock.tomato.EditTomatoActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.lock.schedule.EditScheduleActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.lock.setting.LockSettingActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.utils.VibratorActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.userinfo.UserInfoActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.me.vip.VIPActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.wxapi.WXEntryActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.wxapi.WXPayEntryActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.yalantis.ucrop.UCropActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.tencent.tauth.AuthActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.ToastNoticeActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Activity (com.lijianqiang12.silent.component.activity.StartApp1PxActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Broadcast Receiver (com.lijianqiang12.silent.component.receiver.RebootReceiver) 未受保护。 

[android:exported=true]
检测到  Broadcast Receiver 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Broadcast Receiver (com.lijianqiang12.silent.component.receiver.DeviceManagerReceiver) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.BIND_DEVICE_ADMIN [android:exported=true]
检测到  Broadcast Receiver 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Service (com.lijianqiang12.silent.component.service.TheNotificationListenerService) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.BIND_NOTIFICATION_LISTENER_SERVICE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Service (com.lijianqiang12.silent.component.service.background_service.BackgroundService) 未受保护。 

[android:exported=true]
检测到  Service 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Service (com.lijianqiang12.silent.component.service.ScheduleWorkService) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.DUMP [android:exported=true]
检测到  Broadcast Receiver 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.DUMP [android:exported=true]
检测到  Broadcast Receiver 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 高优先级 Intent（2147483647） - {12} 个命中 

[android:priority]
通过设置较高的 Intent 优先级，应用可覆盖其他请求，可能导致安全风险。

中危安全漏洞 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/hjq/permissions/StartActivityManager.java, line(s) 11
com/jeremyliao/liveeventbus/ipc/IpcConst.java, line(s) 6
com/lijianqiang12/silent/I11I1l1IIIII.java, line(s) 79
com/lijianqiang12/silent/I1lIlIII1ll.java, line(s) 75
com/lijianqiang12/silent/Il1I11lIIll.java, line(s) 81
com/lijianqiang12/silent/data/model/net/pojos/LoginResponse.java, line(s) 161
com/lijianqiang12/silent/data/model/net/pojos/OffTimeDetail.java, line(s) 117
com/lijianqiang12/silent/data/model/net/pojos/QQTokenModel.java, line(s) 237
com/lijianqiang12/silent/data/model/net/pojos/RefreshStateResponse.java, line(s) 164
com/lijianqiang12/silent/data/model/net/pojos/ResultMyInviteHistory.java, line(s) 79
com/lijianqiang12/silent/data/model/net/pojos/RoomDetailBoard.java, line(s) 174
com/lijianqiang12/silent/data/model/net/pojos/RoomDetailMember.java, line(s) 161
com/lijianqiang12/silent/data/model/net/pojos/RoomRequestBean.java, line(s) 178
com/lijianqiang12/silent/data/model/net/pojos/ThePunchCard.java, line(s) 262
com/lijianqiang12/silent/data/model/net/pojos/UserInfo.java, line(s) 179
com/lijianqiang12/silent/ll11lllllII.java, line(s) 39
com/lijianqiang12/silent/llI11Il1l1.java, line(s) 90
com/lijianqiang12/silent/llIlI1IIIl1II.java, line(s) 85

中危安全漏洞 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/hjq/permissions/PermissionFragment.java, line(s) 17
com/lijianqiang12/silent/I11llIII1llIl.java, line(s) 7
com/lijianqiang12/silent/I1I111I11I1I.java, line(s) 6
com/lijianqiang12/silent/II1II1lIII1l.java, line(s) 8
com/lijianqiang12/silent/II1IllI1ll.java, line(s) 3
com/lijianqiang12/silent/III11l1II1l.java, line(s) 7
com/lijianqiang12/silent/IIlIllIIIl1ll.java, line(s) 5
com/lijianqiang12/silent/IIllIIII1I1.java, line(s) 7
com/lijianqiang12/silent/IIllIlI11l.java, line(s) 7
com/lijianqiang12/silent/IlIl1lIl1I1l.java, line(s) 4
com/lijianqiang12/silent/l1I11Il1II11I.java, line(s) 13
com/lijianqiang12/silent/l1I1I11llll1l.java, line(s) 11
com/lijianqiang12/silent/l1IlI1II1IIll.java, line(s) 3
com/lijianqiang12/silent/l1IlII1111.java, line(s) 3
com/lijianqiang12/silent/l1IlIlll1IlII.java, line(s) 3
com/lijianqiang12/silent/l1Ill111Il1I.java, line(s) 3
com/lijianqiang12/silent/l1l1I111l1ll1.java, line(s) 18
com/lijianqiang12/silent/l1l1Il1llII1.java, line(s) 8
com/lijianqiang12/silent/lI11111llII.java, line(s) 4
com/lijianqiang12/silent/lIIllIll1l1.java, line(s) 17
com/lijianqiang12/silent/lIl1Ill1l1II1.java, line(s) 6
com/lijianqiang12/silent/lIlIlII111III.java, line(s) 11
com/lijianqiang12/silent/lIllI1Il1lII.java, line(s) 14
com/lijianqiang12/silent/ll1II1IIl.java, line(s) 32
com/lijianqiang12/silent/llI1llI1l1ll.java, line(s) 3
com/lijianqiang12/silent/llIll11lIIIl.java, line(s) 9
com/lijianqiang12/silent/lllllI11ll11.java, line(s) 4

中危安全漏洞 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
bin/mt/signature/KillerApplication.java, line(s) 77
com/lijianqiang12/silent/I111ll11I1ll.java, line(s) 17,38
com/lijianqiang12/silent/II1I1l1I11Ill.java, line(s) 169,462
com/lijianqiang12/silent/IIlII1I11l1ll.java, line(s) 12,24,28
com/lijianqiang12/silent/Il1Il11II1.java, line(s) 535,706,707
com/lijianqiang12/silent/lI1II1lll1lI.java, line(s) 158
com/lijianqiang12/silent/lIIIllII1l1Il.java, line(s) 74,169
com/lijianqiang12/silent/lIlI11l1lIlII.java, line(s) 59
com/lijianqiang12/silent/lIllllI1I1Il.java, line(s) 58
com/lijianqiang12/silent/ll1lIIl1Il.java, line(s) 17
com/lijianqiang12/silent/llllI1l1I1.java, line(s) 132,135
com/yalantis/ucrop/util/FileUtils.java, line(s) 71
com/yl/lib/privacy_proxy/PrivacyProxyCall.java, line(s) 122,123

中危安全漏洞 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
com/lijianqiang12/silent/component/activity/TheWebViewActivity.java, line(s) 138,130

中危安全漏洞 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/lijianqiang12/silent/I111Ill1IIlIl.java, line(s) 11
com/lijianqiang12/silent/IIllllllIl1I.java, line(s) 39
com/lijianqiang12/silent/ll11ll11II.java, line(s) 50,75

中危安全漏洞 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/lijianqiang12/silent/IlIl11I11llII.java, line(s) 6,7,8,9,10,11,256,409
com/lijianqiang12/silent/l1I1lIl1.java, line(s) 5,6,24,53,74,156
com/lijianqiang12/silent/lll111IIlIIl1.java, line(s) 6,7,81

中危安全漏洞 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/lijianqiang12/silent/l1Il1111II1.java, line(s) 152,276
com/lijianqiang12/silent/l1Il1II1Il1.java, line(s) 15
com/lijianqiang12/silent/l1IllllIIl11I.java, line(s) 69,779,880,884
com/lijianqiang12/silent/lIll1ll1I1Il.java, line(s) 95

中危安全漏洞 IP地址泄露 

IP地址泄露


Files:
com/lijianqiang12/silent/I1Il1I11II.java, line(s) 45
com/lijianqiang12/silent/IlI1Il1llI1l.java, line(s) 20
com/lijianqiang12/silent/l1Il1lI11lI1.java, line(s) 14
com/lijianqiang12/silent/ll1II1IIl.java, line(s) 42,42

中危安全漏洞 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/lijianqiang12/silent/ll1II1lIlI1.java, line(s) 83

中危安全漏洞 应用程序包含隐私跟踪程序 

此应用程序有多个1隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危安全漏洞 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
nMAoGA1UEChMDdGNiMQwwCgYDVQQLEwM3MTIxFDASBgNVBAMTC2xpamlhbnFpYW5nMIIBIjANBgkq
43bd8d0f9097dfe9f230786e2ee23cbe
b1ca1d5722ae7d5aebed81cc422e2961
258EAFA5-E914-47DA-95CA-C5AB0DC85B11
-39280363481451541647
5a6898d3f29d98171200027e
nvY9KYLemVWXGuiBzlyceAChaFcNKw95ETGxfLa6WZXmFbD8csDd0WByTKGX5Rt70ftG68kr04WTh
nURjf2jGYg46GCVTm8zte25aKhDcDrUjunqFthrhBQ40cOlZ0KbwDzHbX9saNNzhWXTknAQIDAQAB
n2KrbUjFiasqbe/ElV82Kz9SmMyJir75QU2UQVVh4UVb9S8ikCLgzZ4fQfwCtEza5Po3z2xKNiIRh
2FDgvkGVlKtvyo6NX8HbSycCiDHWR2gaqJRI3JrAqT9lGxZAxTnmUE8MNnhRWfoNZJHX2
b6cbad6cbd5ed0d209afc69ad3b7a617efaae9b3c47eabe0be42d924936fa78c8001b1fd74b079e5ff9690061dacfa4768e981a526b9ca77156ca36251cf2f906d105481374998a7e6e6e18f75ca98b8ed2eaf86ff402c874cca0a263053f22237858206867d210020daa38c48b20cc9dfd82b44a51aeb5db459b22794e2d649
sign=DiO0tKxOCM6Zvvf1phKg79gLduabG
nA1UECBMHdGlhbmppbjEQMA4GA1UEBxMHdGlhbmppbjEMMAoGA1UEChMDdGNiMQwwCgYDVQQLEwM3
0808babf03197daf239e6e5f99d67149
naaPEmd5jY5aDExOQTG+o4rlB50pHuDQjU7U=
eca4bd609711e3c37f9e75aa4ea90618
nMTIxFDASBgNVBAMTC2xpamlhbnFpYW5nMCAXDTE3MDQxNjE0MDkzN1oYDzMwMTYwODE3MTQwOTM3
39280363481451541647
2FsPONw4QOqEQkzYvoiuVATWxbyQmsCJ
nA4D82/eFSQVBBo3budbDKOwptIugXHtFrRAkXJDOMDOBquzvJjXyXPOYGRIeZrYbaWa2N3fImojf
nXdRi1r4Q9E3p8KvIhsAty+N1ADxbuG2SU5cy+vxSnoTq+CEUH+tOTqHo6ZvNm3LXRRtdX16C5C+k
MIIDbTCCAlWgAwIBAgIEMEkg1DANBgkqhkiG9w0BAQsFADBmMQ4wDAYDVQQGEwUzMDAwMDEQMA4G
0040f26f7221342036ad7ebf59d7a087
nhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3m2Z6zyHpmWGV0mlSNawPCy4lccaqpSeSs22XWXodFa
noyEwHzAdBgNVHQ4EFgQUwYhPXgxju9Asn8bQSMHaJtr7uNEwDQYJKoZIhvcNAQELBQADggEBADYH

安全提示信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
bin/mt/signature/KillerApplication.java, line(s) 116,126,161
cn/jzvd/IIllIl1llII.java, line(s) 963
com/jeremyliao/liveeventbus/logger/DefaultLogger.java, line(s) 12,24
com/lijianqiang12/silent/I1111111IllI.java, line(s) 300
com/lijianqiang12/silent/I111Il111I1l.java, line(s) 19
com/lijianqiang12/silent/I111Ill1ll.java, line(s) 67,110
com/lijianqiang12/silent/I11I1IlII1ll.java, line(s) 390,386
com/lijianqiang12/silent/I11III1II.java, line(s) 21,31,44
com/lijianqiang12/silent/I11IlIllll.java, line(s) 342,354,408,444,465,473,526,536
com/lijianqiang12/silent/I11lllI11IIl.java, line(s) 77,79
com/lijianqiang12/silent/I1I111IllI1.java, line(s) 61
com/lijianqiang12/silent/I1I11lI1I1I.java, line(s) 41
com/lijianqiang12/silent/I1I11lIIlI.java, line(s) 37,187
com/lijianqiang12/silent/I1I1II11.java, line(s) 339,359,424,934,1033
com/lijianqiang12/silent/I1I1II1lII.java, line(s) 83,85
com/lijianqiang12/silent/I1II11II111l.java, line(s) 723,723
com/lijianqiang12/silent/I1II1I111IIl.java, line(s) 581,598
com/lijianqiang12/silent/I1IIIII11l.java, line(s) 23
com/lijianqiang12/silent/I1IIl11ll1I1.java, line(s) 97
com/lijianqiang12/silent/I1Il1I11II.java, line(s) 49,54,24,39,68
com/lijianqiang12/silent/I1Il1l11I.java, line(s) 49
com/lijianqiang12/silent/I1IlIIlIII1I1.java, line(s) 93,90
com/lijianqiang12/silent/I1IllI1lII1.java, line(s) 44,104,133
com/lijianqiang12/silent/I1l11Illl1.java, line(s) 13,46
com/lijianqiang12/silent/I1l1I1I1Il111.java, line(s) 15
com/lijianqiang12/silent/I1l1IlIIII1lI.java, line(s) 58,72,76,151,205,208,246
com/lijianqiang12/silent/I1l1IllIII11.java, line(s) 69
com/lijianqiang12/silent/I1l1lI1Il.java, line(s) 24,75
com/lijianqiang12/silent/I1l1ll111IlI.java, line(s) 295,216,294,414
com/lijianqiang12/silent/I1lIIl111IIl1.java, line(s) 49,58
com/lijianqiang12/silent/I1lIlIl11111I.java, line(s) 680,928
com/lijianqiang12/silent/I1ll1lI1l1IlI.java, line(s) 250
com/lijianqiang12/silent/I1lllI111llIl.java, line(s) 223
com/lijianqiang12/silent/II11I11l1IlI.java, line(s) 654
com/lijianqiang12/silent/II11IIIIl1I.java, line(s) 37
com/lijianqiang12/silent/II1I1Illl11I.java, line(s) 28,32
com/lijianqiang12/silent/II1I1l1I11Ill.java, line(s) 631
com/lijianqiang12/silent/II1I1l1ll1lI.java, line(s) 45
com/lijianqiang12/silent/II1IlllI11I.java, line(s) 425,429,432
com/lijianqiang12/silent/II1l1111Il11.java, line(s) 487
com/lijianqiang12/silent/II1l11IlIlII1.java, line(s) 109
com/lijianqiang12/silent/II1lll1111111.java, line(s) 71
com/lijianqiang12/silent/III111Ill1lI.java, line(s) 187
com/lijianqiang12/silent/III11Il111l1.java, line(s) 391
com/lijianqiang12/silent/III11lI11lI1.java, line(s) 81,393,397,400
com/lijianqiang12/silent/III1I1llI11.java, line(s) 198,200
com/lijianqiang12/silent/III1IIIIll1l.java, line(s) 75,83,92,103
com/lijianqiang12/silent/III1Il1Ill11.java, line(s) 58,72,102,126,141,165,182
com/lijianqiang12/silent/IIII1lI1IlI.java, line(s) 31,63,69,74,81,86,91,132,135,143
com/lijianqiang12/silent/IIIIl111I.java, line(s) 41
com/lijianqiang12/silent/IIIIl11llIlII.java, line(s) 69
com/lijianqiang12/silent/IIIIlII1I11Il.java, line(s) 97
com/lijianqiang12/silent/IIIIlllI1l1I.java, line(s) 48,57
com/lijianqiang12/silent/IIIl1IlIlII.java, line(s) 62
com/lijianqiang12/silent/IIIllIl1I1I1.java, line(s) 96,99
com/lijianqiang12/silent/IIIllllll1.java, line(s) 99
com/lijianqiang12/silent/IIl11lI1lIIl.java, line(s) 21
com/lijianqiang12/silent/IIl1IlllIIII.java, line(s) 65
com/lijianqiang12/silent/IIlIIII1l1II1.java, line(s) 62
com/lijianqiang12/silent/IIlIIlI1llII.java, line(s) 60
com/lijianqiang12/silent/IIlIlll11Il1.java, line(s) 34
com/lijianqiang12/silent/IIll111Il.java, line(s) 87
com/lijianqiang12/silent/Il11I1Il11l.java, line(s) 20
com/lijianqiang12/silent/Il11l11I1l1.java, line(s) 75
com/lijianqiang12/silent/Il1IIIl11llI.java, line(s) 136
com/lijianqiang12/silent/Il1IlII11l.java, line(s) 74
com/lijianqiang12/silent/Il1lII11IIlI.java, line(s) 43
com/lijianqiang12/silent/Il1lIIIl.java, line(s) 71
com/lijianqiang12/silent/Il1llIl1111.java, line(s) 27
com/lijianqiang12/silent/IlI1ll111ll1.java, line(s) 76
com/lijianqiang12/silent/IlII1lIl1I.java, line(s) 139,188,194,200
com/lijianqiang12/silent/IlIIl1llI1.java, line(s) 292,621
com/lijianqiang12/silent/IlIIlIIllI.java, line(s) 29
com/lijianqiang12/silent/IlIl1II111l.java, line(s) 10,15,20,25,30,36,41,56,61,66,71,76,81,86,91,96,111,116,121,127,132
com/lijianqiang12/silent/IlIlIIl11l.java, line(s) 110
com/lijianqiang12/silent/IlIlIllI.java, line(s) 89
com/lijianqiang12/silent/IlIll1l111I11.java, line(s) 43,123,203
com/lijianqiang12/silent/Ill11IIl.java, line(s) 51
com/lijianqiang12/silent/Ill1II1lllI1.java, line(s) 311
com/lijianqiang12/silent/Ill1IIl11ll.java, line(s) 156
com/lijianqiang12/silent/IllI1l1l1lII.java, line(s) 56,66
com/lijianqiang12/silent/IllI1lI11lI.java, line(s) 172
com/lijianqiang12/silent/IllIIIIlI11l.java, line(s) 76
com/lijianqiang12/silent/Illl11I1l1I.java, line(s) 37
com/lijianqiang12/silent/IlllIlIl1lIll.java, line(s) 33,43,56,76,96,108,120,121
com/lijianqiang12/silent/Illll1lllI.java, line(s) 33,38,52,57,68,78,83,88
com/lijianqiang12/silent/IllllIl1llI.java, line(s) 35,43
com/lijianqiang12/silent/component/service/MyAccessibilityService.java, line(s) 724,730,757
com/lijianqiang12/silent/l111I111ll1I.java, line(s) 72
com/lijianqiang12/silent/l111lIlll1l.java, line(s) 32,38,41,52
com/lijianqiang12/silent/l11I11llIII.java, line(s) 50,50,65
com/lijianqiang12/silent/l11III1II1I.java, line(s) 38
com/lijianqiang12/silent/l11Il1llI.java, line(s) 66,257
com/lijianqiang12/silent/l11IlI1111I11.java, line(s) 304
com/lijianqiang12/silent/l11l1lll1I1l.java, line(s) 32
com/lijianqiang12/silent/l11lIlIIllII.java, line(s) 65
com/lijianqiang12/silent/l11lIlll1.java, line(s) 67
com/lijianqiang12/silent/l1I111I11lI.java, line(s) 351,370,421
com/lijianqiang12/silent/l1I111lIIlIl.java, line(s) 171
com/lijianqiang12/silent/l1I1IIlllll1.java, line(s) 57
com/lijianqiang12/silent/l1I1IllIl.java, line(s) 38
com/lijianqiang12/silent/l1I1l111Ill1.java, line(s) 221,224
com/lijianqiang12/silent/l1I1llIIlI11.java, line(s) 276,280,288,290
com/lijianqiang12/silent/l1II1ll1IIIl.java, line(s) 241
com/lijianqiang12/silent/l1Il1I1I1I1.java, line(s) 85,97,150,160,169,241,250,272
com/lijianqiang12/silent/l1Il1l1111l1.java, line(s) 134,193,243,331
com/lijianqiang12/silent/l1IlI1111lII.java, line(s) 24
com/lijianqiang12/silent/l1l111Il1l1.java, line(s) 28,242
com/lijianqiang12/silent/l1lIII1Il1.java, line(s) 244
com/lijianqiang12/silent/l1ll1I1lIl.java, line(s) 52
com/lijianqiang12/silent/l1llI11II11II.java, line(s) 420,423
com/lijianqiang12/silent/l1llI1ll1I1l.java, line(s) 49
com/lijianqiang12/silent/l1llIII11l.java, line(s) 981
com/lijianqiang12/silent/l1lll1I111l.java, line(s) 97,99,101
com/lijianqiang12/silent/l1lll1l1lll.java, line(s) 166
com/lijianqiang12/silent/l1llllIIIlII1.java, line(s) 36,172,174
com/lijianqiang12/silent/lI1111IIlII.java, line(s) 128,171
com/lijianqiang12/silent/lI11llI11.java, line(s) 738
com/lijianqiang12/silent/lI1I111lII.java, line(s) 37,60
com/lijianqiang12/silent/lI1I1l111l1I.java, line(s) 69
com/lijianqiang12/silent/lI1I1l1Il1I11.java, line(s) 55,67
com/lijianqiang12/silent/lI1II111I1l.java, line(s) 44,62,51,54,57
com/lijianqiang12/silent/lI1II1l11lI.java, line(s) 240
com/lijianqiang12/silent/lI1Il11lI1.java, line(s) 287,291
com/lijianqiang12/silent/lI1Il1l1Illll.java, line(s) 123,126,144,517,519,531,647,707,1525,1555
com/lijianqiang12/silent/lI1IllIIIIl1I.java, line(s) 26,37
com/lijianqiang12/silent/lI1Illl1II1ll.java, line(s) 289,296
com/lijianqiang12/silent/lI1l1lI111Il.java, line(s) 22
com/lijianqiang12/silent/lI1lIlIIl1l.java, line(s) 104
com/lijianqiang12/silent/lII1111III.java, line(s) 15
com/lijianqiang12/silent/lII1lI1l1I11.java, line(s) 106,237,244
com/lijianqiang12/silent/lII1llI1I11I1.java, line(s) 146
com/lijianqiang12/silent/lIII11IlI1II.java, line(s) 63,80
com/lijianqiang12/silent/lIIII11l1I1l.java, line(s) 268,580,1008,1281,1104
com/lijianqiang12/silent/lIIIl1lI1l.java, line(s) 1240,1248,1277,1289,1301,1313,1325,1337,1349,1361,1373,1380,1389,1400,1960,501
com/lijianqiang12/silent/lIIIllII1l1Il.java, line(s) 33,52,65,96,120,146,160,174,185
com/lijianqiang12/silent/lIIl1lI1IIll.java, line(s) 198
com/lijianqiang12/silent/lIIlI11l1l1.java, line(s) 15
com/lijianqiang12/silent/lIIlIlIl111II.java, line(s) 393
com/lijianqiang12/silent/lIl11Il1l1I1.java, line(s) 33
com/lijianqiang12/silent/lIl11IlllIl.java, line(s) 406
com/lijianqiang12/silent/lIl1II1lIl1l1.java, line(s) 278,275,295
com/lijianqiang12/silent/lIl1l1111I1I.java, line(s) 145
com/lijianqiang12/silent/lIlI11l1lIlII.java, line(s) 121
com/lijianqiang12/silent/lIlIlllI1I.java, line(s) 388
com/lijianqiang12/silent/lIll1Il1llIll.java, line(s) 179
com/lijianqiang12/silent/lIll1lIII11.java, line(s) 148,175
com/lijianqiang12/silent/lIllII1111lII.java, line(s) 149
com/lijianqiang12/silent/ll11I11llII.java, line(s) 2050,2231,2238,2240,2242,2293,1232
com/lijianqiang12/silent/ll1I1l1IlIlll.java, line(s) 1205,1223,1226,1231,1234,1459,1534,1726,1904,3020
com/lijianqiang12/silent/ll1IlI1IlII.java, line(s) 44
com/lijianqiang12/silent/ll1Illl1I11.java, line(s) 193,213,231,236,243,251,269,287,350,431
com/lijianqiang12/silent/ll1IlllII1IIl.java, line(s) 141,146,326
com/lijianqiang12/silent/ll1l1I1I111II.java, line(s) 40
com/lijianqiang12/silent/ll1lI1III1.java, line(s) 44,61,178,229,244
com/lijianqiang12/silent/llI11ll1I11.java, line(s) 46
com/lijianqiang12/silent/llII1IlI1ll1.java, line(s) 71
com/lijianqiang12/silent/llII1llIIlI1I.java, line(s) 277
com/lijianqiang12/silent/llIl1lI1IlI.java, line(s) 181
com/lijianqiang12/silent/llIlI111IlI1I.java, line(s) 139,191,308
com/lijianqiang12/silent/llIlIl1l11lI.java, line(s) 168,195
com/lijianqiang12/silent/lll111IIlll1I.java, line(s) 466,469
com/lijianqiang12/silent/lll111l1I.java, line(s) 437,555
com/lijianqiang12/silent/lll11lIIllll1.java, line(s) 241,340,642
com/lijianqiang12/silent/lllI11Ill11.java, line(s) 520
com/lijianqiang12/silent/llllIlIIlIIl.java, line(s) 42,41
com/wang/avi/AVLoadingIndicatorView.java, line(s) 361
com/yalantis/ucrop/task/BitmapCropTask.java, line(s) 158
com/yalantis/ucrop/task/BitmapLoadTask.java, line(s) 134,141,173,176
com/yalantis/ucrop/util/BitmapLoadUtils.java, line(s) 106,120
com/yalantis/ucrop/util/ImageHeaderParser.java, line(s) 179,197,217,236,286,304,317,328,333,344
com/yalantis/ucrop/view/TransformImageView.java, line(s) 230
org/lsposed/hiddenapibypass/HiddenApiBypass.java, line(s) 74,313

安全提示信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/lijianqiang12/silent/component/activity/FriendUnlockActivity.java, line(s) 5,257,258
com/lijianqiang12/silent/component/activity/lock/setting/LockSettingActivity.java, line(s) 5,428,429
com/lijianqiang12/silent/component/activity/me/UnlockFriendActivity.java, line(s) 5,190,191
com/lijianqiang12/silent/l11II11I1l.java, line(s) 7,1699,1700
com/yl/lib/privacy_proxy/PrivacyProxyCall.java, line(s) 8,710,716

已通过安全项 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/lijianqiang12/silent/Il11lIlIl111.java, line(s) 98,97,96,96
com/lijianqiang12/silent/IlII11ll11lll.java, line(s) 39,39
com/lijianqiang12/silent/Ill11I1l1.java, line(s) 99,98,97
com/lijianqiang12/silent/l1lII1llII1.java, line(s) 241,173,240,239,239
com/lijianqiang12/silent/lIllIIllll1ll.java, line(s) 140,107,139,147,138,138

综合安全基线评分总结

应用图标

远离手机 v4.9.11

Android APK
48
综合安全评分
中风险