导航菜单
登录 注册

应用安全检测报告

应用安全检测报告，支持文件搜索、内容检索和AI代码分析

移动应用安全检测报告

应用图标

Calculator v12.2.00.4

Android APK 8fa66fb9...
73
安全评分

安全基线评分

73/100

安全

综合风险等级

风险等级评定
  1. A
  2. B
  3. C
  4. F

应用安全状况良好，可正常使用

漏洞与安全项分布

0 高危
4 中危
2 信息
2 安全

隐私风险评估

0
第三方跟踪器

隐私安全
未检测到第三方跟踪器


检测结果分布

高危安全漏洞 0
中危安全漏洞 4
安全提示信息 2
已通过安全项 2
重点安全关注 0

中危安全漏洞 应用已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用允许明文网络流量（如 HTTP、FTP 协议、DownloadManager、MediaPlayer 等）。API 级别 27 及以下默认启用，28 及以上默认禁用。明文流量缺乏机密性、完整性和真实性保护，攻击者可窃听或篡改传输数据。建议关闭明文流量，仅使用加密协议。

中危安全漏洞 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/sec/android/app/popupcalculator/common/utils/CommonUtils.java, line(s) 59,60,61

中危安全漏洞 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
i1/a.java, line(s) 6,34
i1/b.java, line(s) 4,5,25

中危安全漏洞 IP地址泄露 

IP地址泄露


Files:
com/sec/android/app/popupcalculator/BuildConfig.java, line(s) 8

安全提示信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
a0/a.java, line(s) 419
com/sec/android/app/popupcalculator/Calculator.java, line(s) 352,353,587
com/sec/android/app/popupcalculator/CalculatorBroadcastReceiver.java, line(s) 16,51
com/sec/android/app/popupcalculator/calc/controller/CalculatorUtils.java, line(s) 316,325,340
com/sec/android/app/popupcalculator/calc/controller/HandleButtonsController.java, line(s) 56
com/sec/android/app/popupcalculator/calc/controller/HistoryController.java, line(s) 299
com/sec/android/app/popupcalculator/calc/controller/KeypadController.java, line(s) 453,505
com/sec/android/app/popupcalculator/calc/controller/MultiWindowLayoutController.java, line(s) 323,328,440
com/sec/android/app/popupcalculator/calc/model/HistoriesData.java, line(s) 96,107,118,133,144,155,165,172,182,224,234,245,337,383,393,404,419,430,441,456,467,478,488,495,505
com/sec/android/app/popupcalculator/calc/view/HandleButtonsLayout.java, line(s) 123
com/sec/android/app/popupcalculator/calc/view/KeyboardLayout.java, line(s) 77
com/sec/android/app/popupcalculator/common/logic/CalculateTool.java, line(s) 125,761,520
com/sec/android/app/popupcalculator/common/logic/CalculatorLogic.java, line(s) 887
com/sec/android/app/popupcalculator/common/utils/AccessibilityUtils.java, line(s) 150
com/sec/android/app/popupcalculator/common/utils/AnalystUtils.java, line(s) 194,634,642,653,660,667,674,177,196,685
com/sec/android/app/popupcalculator/common/utils/CommonUtils.java, line(s) 241,594,207,418,422
com/sec/android/app/popupcalculator/converter/controller/BaseUnitConverterFragment.java, line(s) 80,99,105,126,136,168,195
com/sec/android/app/popupcalculator/converter/controller/ConverterKeyboardLayout.java, line(s) 74
com/sec/android/app/popupcalculator/converter/controller/ConverterKeypadController.java, line(s) 176
com/sec/android/app/popupcalculator/converter/controller/ConverterPagerController.java, line(s) 106,192,197,201,220,303,326,334,343,355,406,467,586,594,596,621,644,704,771,803
com/sec/android/app/popupcalculator/converter/controller/ConverterPagerItemController.java, line(s) 198,440,754,798,824,895,933,977,986,998,1018,1024
com/sec/android/app/popupcalculator/converter/controller/NewUnitConverterActivity.java, line(s) 240,264,478
com/sec/android/app/popupcalculator/converter/model/UnitManager.java, line(s) 71,85,152,173,79,131
com/sec/android/app/popupcalculator/converter/mortgage/controller/BaseConverterFragment.java, line(s) 49
com/sec/android/app/popupcalculator/converter/mortgage/controller/MortgageConverterFragment.java, line(s) 60,74,212,239,245,319
com/sec/android/app/popupcalculator/converter/mortgage/controller/MortgageDetailActivity.java, line(s) 44
com/sec/android/app/popupcalculator/converter/mortgage/controller/MortgageEditText.java, line(s) 156,209
com/sec/android/app/popupcalculator/converter/mortgage/controller/MortgageInputFragment.java, line(s) 783,927,993
com/sec/android/app/popupcalculator/converter/mortgage/controller/MortgageResultActivity.java, line(s) 121
com/sec/android/app/popupcalculator/converter/mortgage/controller/MortgageResultFragment.java, line(s) 154
com/sec/android/app/popupcalculator/converter/mortgage/logic/MortgageComputer.java, line(s) 136,138,160,167,196,198,204,206,232,263,315,317,323,325,331,333,339,341,347,349,355,357,363,365,371,373,379,381,388,389,391,397,399,405,407,428,430,469,471,477,479,505,512
com/sec/android/app/popupcalculator/converter/mortgage/svc/http/Connection.java, line(s) 47,137,141,150,159,188,56,61,81,95,193,198,213,229
com/sec/android/app/popupcalculator/converter/mortgage/svc/util/MortgageLastStateUtil.java, line(s) 35,55
com/sec/android/app/popupcalculator/converter/utils/ConverterUtils.java, line(s) 65,68,83,84,570,574,643,101,113,123,131,136,147,156,166
e/g.java, line(s) 152,188,265
e0/a0.java, line(s) 30,44
e0/b0.java, line(s) 31,45
e0/c0.java, line(s) 29
e0/w.java, line(s) 23,38,42
e0/z.java, line(s) 67
f/d.java, line(s) 234
i0/h.java, line(s) 38
m1/b.java, line(s) 7,20,15,31,26,35
n/b.java, line(s) 124,135,146
o1/a.java, line(s) 13,18
v/c.java, line(s) 18
w/c.java, line(s) 142

安全提示信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/sec/android/app/popupcalculator/calc/controller/HistoryController.java, line(s) 6,110

已通过安全项 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
d1/a.java, line(s) 44,41,44,37,40,40

已通过安全项 此应用程序没有隐私跟踪程序 

此应用程序不包括任何用户或设备跟踪器。在静态分析期间没有找到任何跟踪器。

综合安全基线评分总结

应用图标

Calculator v12.2.00.4

Android APK
73
综合安全评分
低风险