应用安全检测报告
应用安全检测报告，支持文件搜索、内容检索和AI代码分析
移动应用安全检测报告
ReposPartner v1.51
57
安全评分
安全基线评分
57/100
低风险
综合风险等级
风险等级评定
- A
- B
- C
- F
应用存在一定安全风险，建议优化
漏洞与安全项分布
0
高危
9
中危
2
信息
1
安全
隐私风险评估
3
第三方跟踪器
中等隐私风险
检测到少量第三方跟踪器
检测结果分布
高危安全漏洞
0
中危安全漏洞
9
安全提示信息
2
已通过安全项
1
重点安全关注
0
中危安全漏洞 应用数据允许备份
[android:allowBackup=true] 该标志允许通过 adb 工具备份应用数据。启用 USB 调试的用户可直接复制应用数据，存在数据泄露风险。
中危安全漏洞 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护，但应检查权限保护级别。
Permission: android.permission.DUMP [android:exported=true] 检测到 Broadcast Receiver 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。
中危安全漏洞 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10 Files: coil/decode/GifDecoder.java, line(s) 16,17,18,19 coil/memory/MemoryCache.java, line(s) 125 coil/memory/MemoryCacheService.java, line(s) 39 coil/request/Parameters.java, line(s) 160 com/maxkeppeker/sheets/core/utils/TestTags.java, line(s) 57 com/reposenergy/partner/data/entity/RemoteKeys.java, line(s) 84 com/reposenergy/partner/data/model/PartnerDetails.java, line(s) 117 com/reposenergy/partner/data/model/creditsetup/mycustomers/SingleCustomerDetail.java, line(s) 123 com/reposenergy/partner/data/remote/auth/AuthRepository.java, line(s) 42,33,39,44 com/reposenergy/partner/data/remote/changepassword/ChangePasswordRepositoryImpl.java, line(s) 17,18,19 com/reposenergy/partner/data/remote/pumps/PumpsRepositoryImpl.java, line(s) 70 com/reposenergy/partner/network/RequestHelper.java, line(s) 22 com/reposenergy/partner/ui/login/LoginScreenContract.java, line(s) 613,113 com/reposenergy/partner/ui/password/ChangePasswordContract.java, line(s) 99,201 com/reposenergy/partner/ui/pumps/PumpsContract.java, line(s) 3711
中危安全漏洞 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage Files: com/github/mikephil/charting/charts/Chart.java, line(s) 725,741 com/github/mikephil/charting/utils/FileUtils.java, line(s) 23,118
中危安全漏洞 应用程序创建临时文件。敏感信息永远不应该被写进临时文件
应用程序创建临时文件。敏感信息永远不应该被写进临时文件 Files: coil/decode/SourceImageSource.java, line(s) 73
中危安全漏洞 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2 Files: com/mixpanel/android/mpmetrics/MPDbAdapter.java, line(s) 7,8,9,142,150,269,341
中危安全漏洞 Firebase远程配置已启用
Firebase远程配置URL （ https://firebaseremoteconfig.googleapis.com/v1/projects/209167714498/namespaces/firebase:fetch?key=AIzaSyBhqsrQj9KpXuIY-HfFEMCIuj_Tbya_UCE ） 已启用。请确保这些配置不包含敏感信息。响应内容如下所示：
{
"entries": {
"app_block_alert_message": "Hello, We have launched our new mobile application with a fresh UI and UX. Please update with our new Repos Petrol Pump app to avoid uninterrupted diesel delivery. Thank you for choosing Repos.",
"app_block_alert_title": "Alert",
"ios_alert_title": "Alert",
"is_Delete_account_ios": "false",
"is_app_block": "true",
"is_ios_app_block": "false",
"is_repos_app_block": "false",
"new_app_url": "https://play.google.com/store/apps/details?id=com.reposenergy.partner&hl=en",
"new_ios_app_url": "https://apps.apple.com/us/app/repos-petrol-pump/id1503747830?ls=1",
"prod_latest_ed_partner_app_version": "39",
"prod_latest_ed_partner_ios_app_version": "36",
"prod_latest_ed_repos_partner_app_version": "34",
"prod_latest_ed_repos_pertrol_pump_ios_app_version": "3.0",
"prod_min_ed_partner_app_version": "39",
"prod_min_ed_partner_ios_app_version": "36",
"prod_min_ed_repos_partner_app_version": "34",
"prod_min_ed_repos_pertol_pump_ios_app_version": "1.09",
"update_message": "Hello, We have launched our new mobile application with a fresh UI and UX. Please update with our new Repos Petrol Pump app to avoid uninterrupted diesel delivery. Thank you for choosing Repos."
},
"state": "UPDATE",
"templateVersion": "126"
}
中危安全漏洞 应用程序包含隐私跟踪程序
此应用程序有多个3隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。
中危安全漏洞 此应用可能包含硬编码机密信息
从应用程序中识别出以下机密确保这些不是机密或私人信息 "com.google.firebase.crashlytics.mapping_file_id" : "00000000000000000000000000000000" "firebase_database_url" : "https://repospetrolpump.firebaseio.com" "google_api_key" : "AIzaSyBhqsrQj9KpXuIY-HfFEMCIuj_Tbya_UCE" "google_app_id" : "1:209167714498:android:7ea4c928ba03aa3efcd35b" "google_crash_reporting_api_key" : "AIzaSyBhqsrQj9KpXuIY-HfFEMCIuj_Tbya_UCE" "turkey" : "Turkije" "turkey" : "Turki" "turkey" : "Turquie" "turkey" : "Turchia" 7b7b5090880094dbff58b4ae1c224cf5 tvr9ilWoFNnKTkTZ9KuC54mEuIfon8rfpS2fqVys ccccc694ae9983c6c2252909d0a174d4 a3676a54bb335a2eeb4ef478b2fa8c9b m167GreyOutlinedTrailingIconTextFieldvs558To 023620d011a70c8114f9c9038dc68154 KxvxDpiasLtCa8hyWZtFBQuDTVnx4PR10z1oLTkxREGgkYQrfzZNIrGWujM9qDfVN4HgpxgoCOBpdjlBTdYTYWqpyiXZ432fqnDezIANbH6zPWROxkaWGp3AIcoCDInj
安全提示信息 应用程序记录日志信息,不得记录敏感信息
应用程序记录日志信息,不得记录敏感信息 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs Files: com/github/mikephil/charting/charts/BarChart.java, line(s) 69 com/github/mikephil/charting/charts/BarLineChartBase.java, line(s) 270,281,296,302,461,462 com/github/mikephil/charting/charts/Chart.java, line(s) 373,187,205,349,853,857,861 com/github/mikephil/charting/charts/CombinedChart.java, line(s) 80 com/github/mikephil/charting/charts/HorizontalBarChart.java, line(s) 147,91,92 com/github/mikephil/charting/components/AxisBase.java, line(s) 157 com/github/mikephil/charting/data/ChartData.java, line(s) 263 com/github/mikephil/charting/data/CombinedData.java, line(s) 205,212,219 com/github/mikephil/charting/data/LineDataSet.java, line(s) 106,119 com/github/mikephil/charting/data/PieEntry.java, line(s) 61,67 com/github/mikephil/charting/listener/BarLineChartTouchListener.java, line(s) 318 com/github/mikephil/charting/renderer/CombinedChartRenderer.java, line(s) 106 com/github/mikephil/charting/renderer/ScatterChartRenderer.java, line(s) 58 com/github/mikephil/charting/utils/FileUtils.java, line(s) 45,69,95,109,123,134,150,169,182 com/github/mikephil/charting/utils/Utils.java, line(s) 51,70,79 com/mixpanel/android/mpmetrics/AnalyticsMessages.java, line(s) 393,236,369,415,440,445,447,275,279,406 com/mixpanel/android/mpmetrics/ConfigurationChecker.java, line(s) 24,17,23 com/mixpanel/android/mpmetrics/MPConfig.java, line(s) 188 com/mixpanel/android/mpmetrics/MPDbAdapter.java, line(s) 255,301,330,364,416,419,433,447,84,97 com/mixpanel/android/mpmetrics/MixpanelAPI.java, line(s) 1276,1278,1280,1282,1292,1295,1298,1301,1305,156,302,316,323,334,456,485,552,752,768,792,804,814,832,844,856,870,894,908,922,936,961,975,1046,1066,1078,1088,1106,1118,1132,1146,1160,1170,1228,1247,1268,605,669,293,388,462,491,529,538,742,745,774,820,1094 com/mixpanel/android/mpmetrics/PersistentIdentity.java, line(s) 77,101,115,139,172,175,324,326,338,341,369,372,404,406,441,449,455,479,481,488,498,500,518,520,530,532,540,543,558,560,438,492,95 com/mixpanel/android/mpmetrics/ResourceReader.java, line(s) 93,98,111,110 com/mixpanel/android/mpmetrics/SessionMetadata.java, line(s) 48 com/mixpanel/android/util/HttpService.java, line(s) 36,39,43,55 com/mixpanel/android/util/MPLog.java, line(s) 36,42,72,78,48,54,24,30,60,66 com/reposenergy/partner/MainActivity.java, line(s) 595,621,639,807 com/reposenergy/partner/PartnerAppKt.java, line(s) 50 com/reposenergy/partner/data/remote/auth/AuthRepository$checkExistingUser$3.java, line(s) 45 com/reposenergy/partner/data/remote/auth/AuthRepository.java, line(s) 67,90 com/reposenergy/partner/data/remote/fuelRate/FuelRateDensityRepositoryImpl.java, line(s) 46,62 com/reposenergy/partner/data/remote/orders/OrdersRepositoryImpl.java, line(s) 156 com/reposenergy/partner/data/remote/pumps/PumpsRepositoryImpl.java, line(s) 239,110,122 com/reposenergy/partner/ds/session/SessionSerializer.java, line(s) 44,57 com/reposenergy/partner/navigation/ComposableSingletons$PartnerNavGraphKt.java, line(s) 669 com/reposenergy/partner/navigation/ReposPartnerNavigationActions.java, line(s) 942 com/reposenergy/partner/network/TokenAuthentication.java, line(s) 51 com/reposenergy/partner/network/interceptors/HttpRequestInterceptor.java, line(s) 18 com/reposenergy/partner/ui/bankaccount/BankAccountViewModel$getBankAccountDetails$1.java, line(s) 89,96,100 com/reposenergy/partner/ui/creditsetup/creditsetupform/CreditSetupKt$CreditSetupFormRoute$12.java, line(s) 50 com/reposenergy/partner/ui/creditsetup/creditsetupform/CreditSetupKt.java, line(s) 630 com/reposenergy/partner/ui/creditsetup/mycustomers/MyCustomersKt.java, line(s) 363,366,369 com/reposenergy/partner/ui/customers/AddTransacationKt$AddTransactionRoute$4.java, line(s) 43 com/reposenergy/partner/ui/customers/customerdetails/CustomerDetailsKt$CustomerDetailsRoute$11$1.java, line(s) 49 com/reposenergy/partner/ui/customers/customerdetails/CustomerDetailsViewModel$getSingleDirectCreditCustomer$1.java, line(s) 70,73,78 com/reposenergy/partner/ui/customers/customerdetails/CustomerDetailsViewModel$sendLedgerMailToPartner$1.java, line(s) 74,80 com/reposenergy/partner/ui/customers/customerdetails/CustomerDetailsViewModel$sendPaymentReminder$1.java, line(s) 91 com/reposenergy/partner/ui/customers/customerdetails/CustomerDetailsViewModel.java, line(s) 219,276,392 com/reposenergy/partner/ui/customers/customerdetails/bottomsheets/MailLedgerBottomSheetKt.java, line(s) 1845,1855,1871 com/reposenergy/partner/ui/help/ComplaintDetailsKt$ComplaintDetailsRoute$4$1.java, line(s) 46 com/reposenergy/partner/ui/help/HelpKt.java, line(s) 278,281,284 com/reposenergy/partner/ui/help/HelpViewModel$getComplaintDetails$1.java, line(s) 87,90 com/reposenergy/partner/ui/help/HelpViewModel$getPartnerIssueList$1.java, line(s) 89 com/reposenergy/partner/ui/help/HelpViewModel$getPartnerRPPNameList$1.java, line(s) 89,94 com/reposenergy/partner/ui/help/HelpViewModel$getPartnerSubIssueList$1.java, line(s) 90 com/reposenergy/partner/ui/help/HelpViewModel$raiseComplaint$1.java, line(s) 83,87,89 com/reposenergy/partner/ui/home/HomeKt$HomeRoute$20.java, line(s) 52 com/reposenergy/partner/ui/home/HomeViewModel$getRefreshDetails$1.java, line(s) 79,83,84,88 com/reposenergy/partner/ui/insights/FuelConsumersInsightsKt$TopFuelConsumersRoute$6.java, line(s) 51 com/reposenergy/partner/ui/insights/FuelConsumersInsightsKt$TopFuelConsumersRoute$7.java, line(s) 48 com/reposenergy/partner/ui/insights/FuelConsumersInsightsKt.java, line(s) 309,312,315,787 com/reposenergy/partner/ui/insights/FuelSaleInsightsKt$FuelSaleInsightsRoute$10.java, line(s) 47 com/reposenergy/partner/ui/insights/FuelSaleInsightsKt$FuelSaleInsightsRoute$11.java, line(s) 47,49 com/reposenergy/partner/ui/insights/FuelSaleInsightsKt$FuelSaleInsightsRoute$12.java, line(s) 48 com/reposenergy/partner/ui/insights/FuelSaleInsightsKt$FuelSaleInsightsRoute$9$1.java, line(s) 44 com/reposenergy/partner/ui/insights/FuelSaleInsightsKt.java, line(s) 1705 com/reposenergy/partner/ui/insights/InsightsKt.java, line(s) 380,383,386 com/reposenergy/partner/ui/insights/InsightsViewModel$getDeliveredQuantityInsights$1.java, line(s) 111,114 com/reposenergy/partner/ui/insights/InsightsViewModel$getPartnerIdFromDb$1.java, line(s) 49 com/reposenergy/partner/ui/insights/InsightsViewModel.java, line(s) 203 com/reposenergy/partner/ui/login/LoginPasswordKt$LoginPasswordRoute$5.java, line(s) 51,53,57,58 com/reposenergy/partner/ui/login/LoginScreenViewModel$sendOTP$1.java, line(s) 127,141,131 com/reposenergy/partner/ui/login/LoginScreenViewModel$testCheckDataStore$1.java, line(s) 53 com/reposenergy/partner/ui/orders/closed/ClosedOrderViewModel$editDirectOrder$1.java, line(s) 89,95 com/reposenergy/partner/ui/orders/closed/ClosedOrderViewModel$getDirectModeCustomerDetails$1.java, line(s) 90,93 com/reposenergy/partner/ui/orders/closed/ClosedOrderViewModel$getDirectModeCustomerList$1.java, line(s) 89,92 com/reposenergy/partner/ui/orders/closed/ClosedOrderViewModel$mailTaxInvoice$1.java, line(s) 86,91 com/reposenergy/partner/ui/orders/closed/ClosedOrdersKt.java, line(s) 113,116,119 com/reposenergy/partner/ui/orders/ongoing/OngoingOrdersKt.java, line(s) 160,163,166 com/reposenergy/partner/ui/orders/orderdetails/OrderDetailsUiKt$OrderDetailsRoute$13$1.java, line(s) 49 com/reposenergy/partner/ui/orders/orderdetails/OrderDetailsUiKt.java, line(s) 490 com/reposenergy/partner/ui/orders/orderdetails/OrderDetailsViewModel$changeRfs$1.java, line(s) 177,60,129,141 com/reposenergy/partner/ui/orders/orderdetails/OrderDetailsViewModel$getRfsList$1.java, line(s) 83,90,94 com/reposenergy/partner/ui/orders/orderdetails/OrderDetailsViewModel$orderDetails$1.java, line(s) 82,87,91 com/reposenergy/partner/ui/orders/orderdetails/bottomsheet/ChooseRfstochangeBottomSheetKt.java, line(s) 487,499,576 com/reposenergy/partner/ui/payments/dashboard/DashboardViewModel$getDirectCustomerPaymentTransactionDetails$1.java, line(s) 74,79 com/reposenergy/partner/ui/payments/transactions/TransactionsKt.java, line(s) 140,143,146 com/reposenergy/partner/ui/payments/transactions/TransactionsViewModel$sendLedgerMailToPartner$1.java, line(s) 72,78 com/reposenergy/partner/ui/payments/transactions/TransactionsViewModel.java, line(s) 57 com/reposenergy/partner/ui/profile/ProfileViewModel$getPartnerProfileDetails$2.java, line(s) 124,131 com/reposenergy/partner/ui/pumps/PumpsViewModel$getFuelStationGraphDispense$1.java, line(s) 88,98,99,103 com/reposenergy/partner/ui/pumps/PumpsViewModel$getListOfNonOnboardedRefueler$1.java, line(s) 80,84,85,89 com/reposenergy/partner/ui/pumps/PumpsViewModel$getRPPGraphDispense$1.java, line(s) 88,98,99,103 com/reposenergy/partner/ui/pumps/PumpsViewModel$getRefuelerDetailsForPartner$1.java, line(s) 81,85,86,90 com/reposenergy/partner/ui/pumps/PumpsViewModel$mailOnlineSalesReport$1.java, line(s) 147,61 com/reposenergy/partner/ui/pumps/PumpsViewModel$placeDirectOrder$1.java, line(s) 100 com/reposenergy/partner/ui/pumps/PumpsViewModel$updateFuelRateDensity$1.java, line(s) 84,96 com/reposenergy/partner/ui/pumps/PumpsViewModel.java, line(s) 762,789,816 com/reposenergy/partner/ui/pumps/dispenseReport/DispenseReportKt.java, line(s) 160,163,166 com/reposenergy/partner/ui/pumps/overview/OverviewRFSKt$OverviewRFSRoute$23.java, line(s) 48 com/reposenergy/partner/ui/pumps/overview/OverviewRFSKt.java, line(s) 1619,1620,2568,2569 com/reposenergy/partner/ui/pumps/pumpMain/PumpDetailsKt$PumpsDetailsRoute$7.java, line(s) 43 com/reposenergy/partner/ui/pumps/pumpMain/PumpOldRFSKt.java, line(s) 282,293,297 com/reposenergy/partner/ui/pumps/pumpMain/bottomsheets/MailSalesReportBottomSheetKt.java, line(s) 1167,1170,1225,1228 com/reposenergy/partner/ui/rate/FuelRateDensityViewModel$getPartnerRPPList$1.java, line(s) 85,92,93,97 com/reposenergy/partner/ui/rate/FuelRateDensityViewModel$updateFuelRateDensity$1.java, line(s) 174,61,128,138 com/reposenergy/partner/ui/referral/ReferralKt.java, line(s) 284,287,290 com/reposenergy/partner/utils/FirebaseUtil.java, line(s) 90 com/reposenergy/partner/utils/mixpanel/Log.java, line(s) 33,32 com/togitech/ccp/component/TogiCountryCodePickerKt.java, line(s) 80,110
安全提示信息 应用与Firebase数据库通信
该应用与位于 https://repospetrolpump.firebaseio.com 的 Firebase 数据库进行通信
已通过安全项 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4 Files: com/reposenergy/partner/di/modules/NetworkModule.java, line(s) 75,75
综合安全基线评分总结
ReposPartner v1.51
Android APK
57
综合安全评分
中风险