导航菜单
平台声明

本平台专为移动应用安全风险研究与合规评估设计,严禁用于任何非法用途。 如有疑问或建议,欢迎加入微信群交流

应用基础信息

文件基本信息

文件名称 dsp_lite_7.1.0_250701_6 (1).apk
文件大小 30.57MB
MD5 c0b15e45c4d005648e5498db5a1334a5
SHA1 52fc9db281b8aed1ae0128539417bb775eeb2c40
SHA256 feae91137d0e244e877861e1cde7c176f40716c33b8189374867a666f4115ee3
病毒检测 无法判定

应用基础信息

应用名称 91短视频
包名 cn.jsyhd.uubmgk
主活动 com.dft.shot.android.ui.LaunchActivity
目标SDK 30
最小SDK 21
版本号 7.1.0
子版本号 710
加固信息 未加壳
开发框架 Java/Kotlin

反编译与源码导出

Manifest文件 查看
Java源代码 查看 -- 下载

文件结构与资源列表

    应用签名证书信息

    APK已签名
    v1 签名: True
    v2 签名: True
    v3 签名: False
    v4 签名: False
    主题: C=Singapore, ST=Singapore, L=Singapore, O=., OU=., CN=.
    签名算法: rsassa_pkcs1v15
    有效期自: 2025-07-01 23:08:12+00:00
    有效期至: 2026-07-01 23:08:12+00:00
    发行人: C=Singapore, ST=Singapore, L=Singapore, O=., OU=., CN=.
    序列号: 0x53eadf57
    哈希算法: sha256
    证书MD5: e8bfdd3934cfb6b429c69cc175a0fe98
    证书SHA1: adb919c60836d71d1e8f9b08a0101599c23d5c47
    证书SHA256: 5b1e52d58a2d315512b4e67c34c3a2262113fe707988904f485de146dbf2ae63
    证书SHA512: 9add4a6d797a923ca7b0920c4729b42d01a53bfaf5d8684477c574e714052110261f82f685577ef56152bcb5fe35132a46b6a5f55200208eab616e52f9082856
    公钥算法: rsa
    密钥长度: 2048
    指纹: 6595b65aa329a0b81767fe487057e63bb8222ba325d9d1abb98f16d831f73f23
    共检测到 1 个唯一证书

    权限声明与风险分级

    权限名称 安全等级 权限内容 权限描述 关联代码
    android.permission.REQUEST_INSTALL_PACKAGES 危险 允许安装应用程序 Android8.0 以上系统允许安装未知来源应用程序权限。
    android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
    android.permission.VIBRATE 普通 控制振动器 允许应用程序控制振动器,用于消息通知振动功能。
    android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
    android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
    android.permission.MANAGE_EXTERNAL_STORAGE 危险 文件列表访问权限 Android11新增权限,读取本地文件,如简历,聊天图片。
    android.permission.READ_PRIVILEGED_PHONE_STATE 签名(系统) 读取手机状态和标识 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。
    android.permission.MOUNT_UNMOUNT_FILESYSTEMS 危险 装载和卸载文件系统 允许应用程序装载和卸载可移动存储器的文件系统。
    android.permission.WRITE_MEDIA_STORAGE 签名(系统) 获取外置SD卡的写权限 允许应用程序在外置SD卡中进行写入操作。
    android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
    android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
    android.permission.ACCESS_COARSE_LOCATION 危险 获取粗略位置 通过WiFi或移动基站的方式获取用户粗略的经纬度信息,定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
    android.permission.RECEIVE_BOOT_COMPLETED 普通 开机自启 允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间,而且如果应用程序一直运行,会降低手机的整体速度。
    android.permission.ACCESS_DOWNLOAD_MANAGER 签名(系统) 访问下载管理器 这个权限是允许应用访问下载管理器,以便管理大型下载操作。
    android.permission.GET_TASKS 危险 检索当前运行的应用程序 允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。
    android.permission.CAMERA 危险 拍照和录制视频 允许应用程序拍摄照片和视频,且允许应用程序收集相机在任何时候拍到的图像。
    android.permission.FLASHLIGHT 普通 控制闪光灯 允许应用程序控制闪光灯。
    android.permission.RECORD_VIDEO 未知 未知权限 来自 android 引用的未知权限。
    android.permission.RECORD_AUDIO 危险 获取录音权限 允许应用程序获取录音权限。
    android.permission.CAPTURE_AUDIO_OUTPUT 签名(系统) 允许捕获音频输出 允许应用程序捕获音频输出。
    android.permission.CAPTURE_VIDEO_OUTPUT 普通 允许捕获视频输出 允许应用程序捕获视频输出。
    android.permission.SYSTEM_ALERT_WINDOW 危险 弹窗 允许应用程序弹窗。 恶意程序可以接管手机的整个屏幕。
    android.permission.WAKE_LOCK 危险 防止手机休眠 允许应用程序防止手机休眠,在手机屏幕关闭后后台进程仍然运行。
    android.permission.READ_PHONE_STATE 危险 读取手机状态和标识 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。
    android.permission.NETWORK_PROVIDER 未知 未知权限 来自 android 引用的未知权限。
    android.permission.ACCESS_FINE_LOCATION 危险 获取精确位置 通过GPS芯片接收卫星的定位信息,定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
    android.permission.READ_LOGS 危险 读取系统日志文件 允许应用程序从系统的各日志文件中读取信息。这样应用程序可以发现您的手机使用情况,这些信息还可能包含用户个人信息或保密信息,造成隐私数据泄露。
    android.permission.CHANGE_WIFI_STATE 危险 改变Wi-Fi状态 允许应用程序改变Wi-Fi状态。
    android.permission.MODIFY_AUDIO_SETTINGS 危险 允许应用修改全局音频设置 允许应用程序修改全局音频设置,如音量。多用于消息语音功能。
    android.permission.REORDER_TASKS 危险 对正在运行的应用程序重新排序 允许应用程序将任务移至前端和后台。恶意应用程序可借此强行进入前端,而不受您的控制。
    android.permission.CALL_PHONE 危险 直接拨打电话 允许应用程序直接拨打电话。恶意程序会在用户未知的情况下拨打电话造成损失。但不被允许拨打紧急电话。
    android.permission.CHANGE_NETWORK_STATE 危险 改变网络连通性 允许应用程序改变网络连通性。
    android.permission.GET_ACCOUNTS 普通 探索已知账号 允许应用程序访问帐户服务中的帐户列表。
    android.permission.MANAGE_ACCOUNTS 危险 管理帐户列表 允许应用程序执行添加、删除帐户及删除其密码之类的操作。
    android.permission.RECEIVE_USER_PRESENT 普通 允许程序唤醒机器 允许应用可以接收点亮屏幕或解锁广播。
    android.permission.WRITE_SETTINGS 危险 修改全局系统设置 允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。
    android.permission.ACCESS_LOCATION_EXTRA_COMMANDS 普通 访问定位额外命令 访问额外位置提供程序命令,恶意应用程序可能会使用它来干扰GPS或其他位置源的操作。
    android.permission.READ_PROFILE 危险 读取用户资料 允许应用程序读取用户个人信息。
    android.permission.DISABLE_KEYGUARD 危险 禁用键盘锁 允许应用程序停用键锁和任何关联的密码安全设置。例如,在手机上接听电话时停用键锁,在通话结束后重新启用键锁。
    android.permission.ACCESS_COARSE_UPDATES 未知 未知权限 来自 android 引用的未知权限。

    证书安全合规分析

    高危
    0
    警告
    1
    信息
    1
    标题 严重程度 描述信息
    已签名应用 信息 应用已使用代码签名证书进行签名。

    Manifest 配置安全分析

    高危
    0
    警告
    4
    信息
    0
    屏蔽
    0
    序号 问题 严重程度 描述信息 操作
    1 应用已启用明文网络流量
    [android:usesCleartextTraffic=true]
    警告 应用允许明文网络流量(如 HTTP、FTP 协议、DownloadManager、MediaPlayer 等)。API 级别 27 及以下默认启用,28 及以上默认禁用。明文流量缺乏机密性、完整性和真实性保护,攻击者可窃听或篡改传输数据。建议关闭明文流量,仅使用加密协议。
    2 应用已配置网络安全策略
    [android:networkSecurityConfig=@7F150001]
    信息 网络安全配置允许应用通过声明式配置文件自定义网络安全策略,无需修改代码。可针对特定域名或应用范围进行灵活配置。
    3 应用数据允许备份
    [android:allowBackup=true]
    警告 该标志允许通过 adb 工具备份应用数据。启用 USB 调试的用户可直接复制应用数据,存在数据泄露风险。
    4 Broadcast Receiver (com.dft.shot.android.im.websocket.NotificationReceiver) 未受保护。
    [android:exported=true]
    警告 检测到 Broadcast Receiver 已导出,未受任何权限保护,任意应用均可访问。
    5 高优先级 Intent(2147483647) - {1} 个命中
    [android:priority]
    警告 通过设置较高的 Intent 优先级,应用可覆盖其他请求,可能导致安全风险。

    可浏览 Activity 组件分析

    ACTIVITY INTENT

    网络通信安全风险分析

    序号 范围 严重级别 描述

    API调用分析

    API功能 源码文件
    一般功能-> 文件操作
    c/e/b/a.java
    c/e/b/c.java
    c/j/a.java
    com/amplitude/android/Configuration.java
    com/amplitude/android/migration/DatabaseStorage.java
    com/amplitude/android/migration/MigrationManager.java
    com/amplitude/android/storage/AndroidEventsStorageProviderV2.java
    com/amplitude/android/storage/AndroidIdentifyInterceptStorageProviderV2.java
    com/amplitude/android/storage/AndroidStorageContextV1.java
    com/amplitude/android/storage/AndroidStorageContextV2.java
    com/amplitude/android/storage/AndroidStorageContextV3.java
    com/amplitude/android/storage/AndroidStorageV2.java
    com/amplitude/android/utilities/AndroidStorage.java
    com/amplitude/common/android/AndroidContextProvider.java
    com/amplitude/core/Amplitude.java
    com/amplitude/core/network/NetworkTrackingPlugin.java
    com/amplitude/core/platform/EventPipeline.java
    com/amplitude/core/utilities/EventsFileManager.java
    com/amplitude/core/utilities/FileStorage.java
    com/amplitude/core/utilities/http/HttpClient.java
    com/amplitude/id/FileIdentityStorage.java
    com/amplitude/id/IdentityConfiguration.java
    com/amplitude/id/utilities/PropertiesFile.java
    com/amplitude/id/utilities/a.java
    com/chad/library/adapter/base/entity/SectionEntity.java
    com/danikula/videocache/a.java
    com/danikula/videocache/b.java
    com/danikula/videocache/d.java
    com/danikula/videocache/e.java
    com/danikula/videocache/f.java
    com/danikula/videocache/g.java
    com/danikula/videocache/i.java
    com/danikula/videocache/j.java
    com/danikula/videocache/k.java
    com/danikula/videocache/l.java
    com/danikula/videocache/m.java
    com/danikula/videocache/p.java
    com/danikula/videocache/s.java
    com/danikula/videocache/t/a.java
    com/danikula/videocache/t/b.java
    com/danikula/videocache/t/d.java
    com/danikula/videocache/t/e.java
    com/danikula/videocache/t/g.java
    com/danikula/videocache/t/h.java
    com/danikula/videocache/t/i.java
    com/davemorrissey/labs/subscaleview/ImageSource.java
    com/davemorrissey/labs/subscaleview/ImageViewState.java
    com/davemorrissey/labs/subscaleview/decoder/SkiaImageDecoder.java
    com/davemorrissey/labs/subscaleview/decoder/SkiaImageRegionDecoder.java
    com/davemorrissey/labs/subscaleview/decoder/SkiaPooledImageRegionDecoder.java
    com/dft/shot/android/TrafficStats/TrafficBean.java
    com/dft/shot/android/adapter/ShareBean.java
    com/dft/shot/android/adapter/k0.java
    com/dft/shot/android/adapter/q3/c.java
    com/dft/shot/android/adapter/v0.java
    com/dft/shot/android/adapter/w3/b.java
    com/dft/shot/android/adapter/z2.java
    com/dft/shot/android/base/BaseResponse.java
    com/dft/shot/android/base/BaseSendMessage.java
    com/dft/shot/android/base/ShopBean.java
    com/dft/shot/android/base/video/a.java
    com/dft/shot/android/bean/ActivityListBean.java
    com/dft/shot/android/bean/AddFriendBean.java
    com/dft/shot/android/bean/AnimeBdListBean.java
    com/dft/shot/android/bean/AppStartBean.java
    com/dft/shot/android/bean/BaseCodeBean.java
    com/dft/shot/android/bean/BindBean.java
    com/dft/shot/android/bean/BuyStatus.java
    com/dft/shot/android/bean/CanWatchBean.java
    com/dft/shot/android/bean/CentorData.java
    com/dft/shot/android/bean/ChangeCodeBean.java
    com/dft/shot/android/bean/ChatBean.java
    com/dft/shot/android/bean/ChatDataBean.java
    com/dft/shot/android/bean/ChatJubaoBean.java
    com/dft/shot/android/bean/ChatListBean.java
    com/dft/shot/android/bean/ChatSetBean.java
    com/dft/shot/android/bean/ChoiceCityBean.java
    com/dft/shot/android/bean/CityBean.java
    com/dft/shot/android/bean/CodeBean.java
    com/dft/shot/android/bean/CollectBean.java
    com/dft/shot/android/bean/CollectionBean.java
    com/dft/shot/android/bean/ComicHistoryBean.java
    com/dft/shot/android/bean/CommentChildBean.java
    com/dft/shot/android/bean/CommunityBean.java
    com/dft/shot/android/bean/CompliationDetailBean.java
    com/dft/shot/android/bean/CreatorBean.java
    com/dft/shot/android/bean/CustomBean.java
    com/dft/shot/android/bean/CustomCenterBean.java
    com/dft/shot/android/bean/DomainListBean.java
    com/dft/shot/android/bean/DownloadUrlBean.java
    com/dft/shot/android/bean/FanGroupDetailBean.java
    com/dft/shot/android/bean/FanMessageBean.java
    com/dft/shot/android/bean/FansGroupChatDataBean.java
    com/dft/shot/android/bean/FansGroupMYDataBean.java
    com/dft/shot/android/bean/FansGroupManBean.java
    com/dft/shot/android/bean/FansGroupManDataBean.java
    com/dft/shot/android/bean/FansGroupMessageBean.java
    com/dft/shot/android/bean/FansGroupMyBean.java
    com/dft/shot/android/bean/FansGroupRuleBean.java
    com/dft/shot/android/bean/FansGroupVideoBean.java
    com/dft/shot/android/bean/FeedBackBean.java
    com/dft/shot/android/bean/FindVIdeoData.java
    com/dft/shot/android/bean/FriendBean.java
    com/dft/shot/android/bean/HelpFeedDetailBean.java
    com/dft/shot/android/bean/HelpFeedbackBean.java
    com/dft/shot/android/bean/HotActivityBean.java
    com/dft/shot/android/bean/HotDataBean.java
    com/dft/shot/android/bean/ImagesBean.java
    com/dft/shot/android/bean/IndexAdsBean.java
    com/dft/shot/android/bean/InviteFriendBean.java
    com/dft/shot/android/bean/JbReasonBase.java
    com/dft/shot/android/bean/JubaoBean.java
    com/dft/shot/android/bean/LiveBaseInfoBean.java
    com/dft/shot/android/bean/LoginBean.java
    com/dft/shot/android/bean/LuckBean.java
    com/dft/shot/android/bean/MessageBean.java
    com/dft/shot/android/bean/MessageDataBean.java
    com/dft/shot/android/bean/MessageListBean.java
    com/dft/shot/android/bean/MineSignBean.java
    com/dft/shot/android/bean/MoneyCashBean.java
    com/dft/shot/android/bean/MoneyDetailBean.java
    com/dft/shot/android/bean/MoneyGetBean.java
    com/dft/shot/android/bean/MovieData2Bean.java
    com/dft/shot/android/bean/MovieDataBean.java
    com/dft/shot/android/bean/MovieDetailBean.java
    com/dft/shot/android/bean/MovieListData.java
    com/dft/shot/android/bean/MsgBody.java
    com/dft/shot/android/bean/MusicBean.java
    com/dft/shot/android/bean/MusicData.java
    com/dft/shot/android/bean/MusicDataBean.java
    com/dft/shot/android/bean/MyFansBean.java
    com/dft/shot/android/bean/MyFollowBean.java
    com/dft/shot/android/bean/MyWalletBean.java
    com/dft/shot/android/bean/MyinviteBean.java
    com/dft/shot/android/bean/NearBean.java
    com/dft/shot/android/bean/NearDataBean.java
    com/dft/shot/android/bean/NoticeBean.java
    com/dft/shot/android/bean/OtherBean.java
    com/dft/shot/android/bean/PayBean.java
    com/dft/shot/android/bean/PayFriendBean.java
    com/dft/shot/android/bean/PlayNumBean.java
    com/dft/shot/android/bean/PlayUrlBean.java
    com/dft/shot/android/bean/ProxyDataBean.java
    com/dft/shot/android/bean/ProxyStatusBean.java
    com/dft/shot/android/bean/RankItemBean.java
    com/dft/shot/android/bean/RankManData.java
    com/dft/shot/android/bean/RechargeBean.java
    com/dft/shot/android/bean/RechargeCentreBean.java
    com/dft/shot/android/bean/RechargeListBean.java
    com/dft/shot/android/bean/SearchTagsBean.java
    com/dft/shot/android/bean/SerachBean.java
    com/dft/shot/android/bean/SerachData.java
    com/dft/shot/android/bean/SerachKeyBean.java
    com/dft/shot/android/bean/SerachResultBean.java
    com/dft/shot/android/bean/SeriesListBean.java
    com/dft/shot/android/bean/ShopBean.java
    com/dft/shot/android/bean/Song.java
    com/dft/shot/android/bean/SpecialEffectsParentType.java
    com/dft/shot/android/bean/SpecialEffectsProgressBean.java
    com/dft/shot/android/bean/SpecialEffectsType.java
    com/dft/shot/android/bean/SystemNoticeBean.java
    com/dft/shot/android/bean/TaggNewVideoData.java
    com/dft/shot/android/bean/TagsBean.java
    com/dft/shot/android/bean/TidalPatRecordDraftBean.java
    com/dft/shot/android/bean/UpdateVideoBean.java
    com/dft/shot/android/bean/UploadImageBean.java
    com/dft/shot/android/bean/UserCenterBean.java
    com/dft/shot/android/bean/UserInfoBean.java
    com/dft/shot/android/bean/VersionAdsBean.java
    com/dft/shot/android/bean/VideoCommentBean.java
    com/dft/shot/android/bean/VideoEditInfo.java
    com/dft/shot/android/bean/VideoListBean.java
    com/dft/shot/android/bean/VideoListBundle.java
    com/dft/shot/android/bean/VideoMoneyBean.java
    com/dft/shot/android/bean/WorkDetailBean.java
    com/dft/shot/android/bean/WorkManagerData.java
    com/dft/shot/android/bean/appstore/StoreBaseBean.java
    com/dft/shot/android/bean/chat/ImOperBean.java
    com/dft/shot/android/bean/comic/ComicDetailBean.java
    com/dft/shot/android/bean/comic/ComicItemBean.java
    com/dft/shot/android/bean/comic/ComicListBean.java
    com/dft/shot/android/bean/comic/ComicReadBean.java
    com/dft/shot/android/bean/community/CommentDataBean.java
    com/dft/shot/android/bean/community/CommunityBaseBean.java
    com/dft/shot/android/bean/community/CommunityDataBean.java
    com/dft/shot/android/bean/community/CommunityDetailBean.java
    com/dft/shot/android/bean/community/MediaBean.java
    com/dft/shot/android/bean/community/TagBean.java
    com/dft/shot/android/bean/community/TopicBean.java
    com/dft/shot/android/bean/community/TopicDataBean.java
    com/dft/shot/android/bean/community/TopicNavBean.java
    com/dft/shot/android/bean/community/UpdateBean.java
    com/dft/shot/android/bean/community/VideoImageBean.java
    com/dft/shot/android/bean/find/AuthorDataBean.java
    com/dft/shot/android/bean/find/AuthorListBean.java
    com/dft/shot/android/bean/find/FindBaseBean.java
    com/dft/shot/android/bean/home/ActorBean.java
    com/dft/shot/android/bean/home/ActorPhotoBean.java
    com/dft/shot/android/bean/home/HomeBean.java
    com/dft/shot/android/bean/home/IndexBean.java
    com/dft/shot/android/bean/home/IndexListBean.java
    com/dft/shot/android/bean/home/IndexMediaBean.java
    com/dft/shot/android/bean/home/NavBean.java
    com/dft/shot/android/bean/home/UserRandomBean.java
    com/dft/shot/android/bean/hot/HotBaseBean.java
    com/dft/shot/android/bean/hot/HotBean.java
    com/dft/shot/android/bean/hot/HotManBean.java
    com/dft/shot/android/bean/hot/HotManDataBean.java
    com/dft/shot/android/bean/hot/HotRankListBean.java
    com/dft/shot/android/bean/hot/RankTabBean.java
    com/dft/shot/android/bean/hot/RankTabListBean.java
    com/dft/shot/android/bean/hotTop/HotBaseBean.java
    com/dft/shot/android/bean/index/TagsBean.java
    com/dft/shot/android/bean/more/MoreBaseBean.java
    com/dft/shot/android/bean/more/MoreDataBean.java
    com/dft/shot/android/bean/more/MoreListBean.java
    com/dft/shot/android/bean/movie/MovieBaseBean.java
    com/dft/shot/android/bean/movie/MovieCommentBean.java
    com/dft/shot/android/bean/movie/MovieDownloadBean.java
    com/dft/shot/android/bean/movie/MovieListBean.java
    com/dft/shot/android/bean/movie/MoviecCommentsBean.java
    com/dft/shot/android/bean/recharge/PayWayBean.java
    com/dft/shot/android/bean/seed/SeedBean.java
    com/dft/shot/android/bean/seed/SeedComment2Bean.java
    com/dft/shot/android/bean/seed/SeedCommentBean.java
    com/dft/shot/android/bean/seed/SeedDataBean.java
    com/dft/shot/android/bean/seed/SeedDetailBean.java
    com/dft/shot/android/bean/seed/SeedListBean.java
    com/dft/shot/android/bean/seed/SeedMediaBean.java
    com/dft/shot/android/bean/sign/SignBean.java
    com/dft/shot/android/bean/sign/SignInBean.java
    com/dft/shot/android/bean/sign/SignScoreBean.java
    com/dft/shot/android/bean/sign/SignTaskBean.java
    com/dft/shot/android/bean/up/CollectData.java
    com/dft/shot/android/bean/up/DayCollectData.java
    com/dft/shot/android/bean/up/UpBaseBean.java
    com/dft/shot/android/bean/up/UpData.java
    com/dft/shot/android/bean/video/UploadUrlBean.java
    com/dft/shot/android/bean/video/VideoBaseBean.java
    com/dft/shot/android/bean/videodetail/PlayerBaseBean.java
    com/dft/shot/android/bean/videodetail/VideoPlayerDetailBean.java
    com/dft/shot/android/bean_new/AnimeBean.java
    com/dft/shot/android/bean_new/AnimeChapterBean.java
    com/dft/shot/android/bean_new/AnimeInfoBean.java
    com/dft/shot/android/bean_new/ChatGroupBean.java
    com/dft/shot/android/bean_new/CommentBean.java
    com/dft/shot/android/bean_new/ElementBean.java
    com/dft/shot/android/bean_new/NovelBean.java
    com/dft/shot/android/bean_new/NovelChapterBean.java
    com/dft/shot/android/bean_new/NovelInfoBean.java
    com/dft/shot/android/bean_new/RespJsonBean.java
    com/dft/shot/android/bean_new/UpdateAppBean.java
    com/dft/shot/android/camera/utils/b.java
    com/dft/shot/android/camera/widget/MagicCameraView.java
    com/dft/shot/android/d.java
    com/dft/shot/android/database/bean/ComicEpisodeBean.java
    com/dft/shot/android/g/a.java
    com/dft/shot/android/g/b/a.java
    com/dft/shot/android/g/c/a/b.java
    com/dft/shot/android/g/c/b/b.java
    com/dft/shot/android/g/c/b/c.java
    com/dft/shot/android/g/e/a.java
    com/dft/shot/android/helper/RecordTimeType.java
    com/dft/shot/android/im/data/WebUrlBean.java
    com/dft/shot/android/im/v2/NewChatAdapter.java
    com/dft/shot/android/j/s.java
    com/dft/shot/android/location/AlxLocationService.java
    com/dft/shot/android/network/f.java
    com/dft/shot/android/network/h/a.java
    com/dft/shot/android/network/h/e/a.java
    com/dft/shot/android/network/h/e/b.java
    com/dft/shot/android/network/h/f/b.java
    com/dft/shot/android/network/okserver/task/PriorityBlockingQueue.java
    com/dft/shot/android/p/a/a.java
    com/dft/shot/android/p/a/b.java
    com/dft/shot/android/u/m2.java
    com/dft/shot/android/u/s1.java
    com/dft/shot/android/ui/LaunchActivity.java
    com/dft/shot/android/ui/MusicVideoActivity.java
    com/dft/shot/android/ui/UploadVideoActivity.java
    com/dft/shot/android/ui/VideoPlayActivity.java
    com/dft/shot/android/ui/activity/movie/LocalPlayActivity.java
    com/dft/shot/android/ui/activity/movie/f.java
    com/dft/shot/android/ui/compilation/CreateCompilationActivity.java
    com/dft/shot/android/ui/game/BannerBean.java
    com/dft/shot/android/ui/game/CommonResultBean.java
    com/dft/shot/android/ui/w/f/b.java
    com/dft/shot/android/ui/w/f/d.java
    com/dft/shot/android/uitls/a0.java
    com/dft/shot/android/uitls/c1.java
    com/dft/shot/android/uitls/d0.java
    com/dft/shot/android/uitls/h0.java
    com/dft/shot/android/uitls/i1.java
    com/dft/shot/android/uitls/j.java
    com/dft/shot/android/uitls/l.java
    com/dft/shot/android/uitls/m.java
    com/dft/shot/android/uitls/m0.java
    com/dft/shot/android/uitls/r.java
    com/dft/shot/android/uitls/s.java
    com/dft/shot/android/uitls/t0.java
    com/dft/shot/android/uitls/u.java
    com/dft/shot/android/uitls/v0.java
    com/dft/shot/android/uitls/y.java
    com/dft/shot/android/uitls/z.java
    com/dft/shot/android/videoplayer/ContentVideoPlayer.java
    com/dft/shot/android/videoplayer/NormalVideoPlayer.java
    com/dft/shot/android/view/update/OkGoUpdateHttpUtil.java
    com/effective/android/panel/g/b.java
    com/fynnjason/utils/c.java
    com/fynnjason/utils/d.java
    com/fynnjason/utils/l.java
    com/fynnjason/utils/o.java
    com/heyhou/social/video/OpenGlUtils.java
    com/hjq/permissions/j.java
    com/hjq/permissions/t.java
    com/just/agentweb/ActionActivity.java
    com/just/agentweb/c.java
    com/just/agentweb/download/AgentWebDownloader.java
    com/just/agentweb/download/DefaultDownloadImpl.java
    com/just/agentweb/download/DownloadTask.java
    com/just/agentweb/download/f.java
    com/just/agentweb/download/g.java
    com/just/agentweb/filechooser/b.java
    com/just/agentweb/h.java
    com/king/image/imageviewer/c.java
    com/king/image/imageviewer/f/c.java
    com/lxj/xpopup/d/i.java
    com/lxj/xpopup/e/a.java
    com/lxj/xpopup/e/c.java
    com/lzy/okgo/cache/CacheEntity.java
    com/lzy/okgo/cache/policy/BaseCachePolicy.java
    com/lzy/okgo/callback/FileCallback.java
    com/lzy/okgo/convert/FileConvert.java
    com/lzy/okgo/cookie/SerializableCookie.java
    com/lzy/okgo/cookie/store/SPCookieStore.java
    com/lzy/okgo/https/HttpsUtils.java
    com/lzy/okgo/interceptor/HttpLoggingInterceptor.java
    com/lzy/okgo/model/HttpHeaders.java
    com/lzy/okgo/model/HttpParams.java
    com/lzy/okgo/model/Progress.java
    com/lzy/okgo/request/base/BodyRequest.java
    com/lzy/okgo/request/base/HasBody.java
    com/lzy/okgo/request/base/ProgressRequestBody.java
    com/lzy/okgo/request/base/Request.java
    com/lzy/okgo/utils/HttpUtils.java
    com/lzy/okgo/utils/IOUtils.java
    com/m3u8/download/HttpHeaders.java
    com/m3u8/download/Progress.java
    com/m3u8/download/b.java
    com/m3u8/download/d.java
    com/m3u8/download/e.java
    com/m3u8/download/f.java
    com/m3u8/download/h.java
    com/m3u8/download/j/a.java
    com/m3u8/download/j/b.java
    com/m3u8/download/l/b.java
    com/m3u8/download/l/c.java
    com/m3u8/download/l/e.java
    com/m3u8/download/l/h.java
    com/nineoldandroids/animation/AnimatorInflater.java
    com/scwang/smartrefresh/layout/header/ClassicsHeader.java
    com/sunfusheng/GlideAppMoudle.java
    com/sunfusheng/a.java
    com/sunfusheng/d.java
    com/sunfusheng/e.java
    com/sunfusheng/g.java
    com/sunfusheng/progress/e.java
    com/sunfusheng/progress/f.java
    com/sunfusheng/widget/ImageData.java
    com/szcx/lib/encrypt/c.java
    com/szcx/lib/encrypt/d.java
    com/szcx/lib/encrypt/f/a.java
    com/vanniktech/emoji/a0.java
    com/vanniktech/emoji/emoji/Emoji.java
    com/vanniktech/emoji/w.java
    com/vector/update_app/HttpManager.java
    com/vector/update_app/UpdateAppBean.java
    com/vector/update_app/b.java
    com/vector/update_app/d.java
    com/vector/update_app/f.java
    com/vector/update_app/h/a.java
    com/vector/update_app/service/DownloadService.java
    com/watermark/androidwm/utils/a.java
    com/xw/repo/b.java
    com/yalantis/ucrop/UCropMultipleActivity.java
    com/yalantis/ucrop/j/c.java
    com/yalantis/ucrop/k/a.java
    com/yalantis/ucrop/k/b.java
    com/yalantis/ucrop/l/a.java
    com/yalantis/ucrop/l/f.java
    com/yalantis/ucrop/l/g.java
    com/youngfeng/snake/config/b.java
    g/a/b.java
    g/a/c.java
    g/a/d.java
    g/a/e.java
    g/a/i.java
    g/a/k.java
    g/a/l.java
    g/a/m/b.java
    g/a/o/e/a.java
    g/a/t/a.java
    g/a/t/b.java
    g/a/t/d.java
    g/a/t/e.java
    g/a/u/a.java
    g/a/u/c.java
    g/b/a/d.java
    i/a/b.java
    net/butterflytv/rtmp_client/RtmpClient.java
    org/greenrobot/greendao/e.java
    org/greenrobot/greendao/l/d.java
    org/greenrobot/greendao/l/i.java
    org/greenrobot/greendao/n/f.java
    org/java_websocket/exceptions/InvalidEncodingException.java
    org/java_websocket/exceptions/WrappedIOException.java
    org/nanohttpd/protocols/http/NanoHTTPD.java
    org/nanohttpd/protocols/http/a.java
    org/nanohttpd/protocols/http/b.java
    org/nanohttpd/protocols/http/c.java
    org/nanohttpd/protocols/http/d.java
    org/nanohttpd/protocols/http/f/a.java
    org/nanohttpd/protocols/http/f/b.java
    org/nanohttpd/protocols/http/g/a.java
    org/nanohttpd/protocols/http/g/b.java
    org/nanohttpd/protocols/http/g/d.java
    org/nanohttpd/protocols/http/response/a.java
    org/nanohttpd/protocols/http/response/c.java
    top/zibin/luban/Checker.java
    top/zibin/luban/c.java
    top/zibin/luban/d.java
    top/zibin/luban/e.java
    top/zibin/luban/f.java
    top/zibin/luban/h.java
    top/zibin/luban/i.java
    top/zibin/luban/k/c.java
    top/zibin/luban/k/e.java
    组件-> 启动 Service com/dft/shot/android/im/v2/ChatManager.java
    com/dft/shot/android/ui/w/e/c.java
    com/vector/update_app/service/DownloadService.java
    一般功能-> IPC通信
    c/i/b/a.java
    com/amplitude/android/plugins/AndroidLifecyclePlugin.java
    com/amplitude/android/utilities/DefaultEventUtils.java
    com/dft/shot/android/activity/AnimePlayerActivity.java
    com/dft/shot/android/activity/ChangeFaceActivity.java
    com/dft/shot/android/activity/ChangeFaceDetailActivity.java
    com/dft/shot/android/activity/ChangeFaceUploadActivity.java
    com/dft/shot/android/activity/ChatGroupActivity.java
    com/dft/shot/android/activity/FragmentInnerTitleActivity.java
    com/dft/shot/android/activity/NovelCategoryActivity.java
    com/dft/shot/android/activity/NovelDetailActivity.java
    com/dft/shot/android/activity/NovelReaderActivity.java
    com/dft/shot/android/activity/PlazaMoreActivity.java
    com/dft/shot/android/activity/TakeOffDetailActivity.java
    com/dft/shot/android/activity/VideoTagsActivity.java
    com/dft/shot/android/base/BaseActivity.java
    com/dft/shot/android/base/BaseCommunityActivity.java
    com/dft/shot/android/im/v2/ChatActivityV3.java
    com/dft/shot/android/im/v2/ChatManager.java
    com/dft/shot/android/im/websocket/NotificationReceiver.java
    com/dft/shot/android/im/websocket/WebSocketImReceiver.java
    com/dft/shot/android/j/s.java
    com/dft/shot/android/location/AlxLocationService.java
    com/dft/shot/android/m/z.java
    com/dft/shot/android/network/BatteryReceiver.java
    com/dft/shot/android/ui/AddFriendActivity.java
    com/dft/shot/android/ui/AppStoreActivity.java
    com/dft/shot/android/ui/ApplicationPorxyActivity.java
    com/dft/shot/android/ui/ChangeCodeActivity.java
    com/dft/shot/android/ui/ChangeNameActivity.java
    com/dft/shot/android/ui/ChatDetailActivity.java
    com/dft/shot/android/ui/ChatSetActivity.java
    com/dft/shot/android/ui/ChoiceSeeActivity.java
    com/dft/shot/android/ui/ChoiceTagsActivity.java
    com/dft/shot/android/ui/ChoiceUploadActivity.java
    com/dft/shot/android/ui/ChooseCodeActivity.java
    com/dft/shot/android/ui/CityChoiceActivity.java
    com/dft/shot/android/ui/CityVideoActivity.java
    com/dft/shot/android/ui/CommentDetailActivity.java
    com/dft/shot/android/ui/CommunityDetailActivity.java
    com/dft/shot/android/ui/CommunityOtherActivity.java
    com/dft/shot/android/ui/CommunityRuleActivity.java
    com/dft/shot/android/ui/CommunitySendActivity.java
    com/dft/shot/android/ui/CommunityUpdateActivity.java
    com/dft/shot/android/ui/CunstomDetailActivity.java
    com/dft/shot/android/ui/H5Activity.java
    com/dft/shot/android/ui/HelpFeedDetailActivity.java
    com/dft/shot/android/ui/HelpFeedbackActivity.java
    com/dft/shot/android/ui/HomeActivity.java
    com/dft/shot/android/ui/HotActivityActivity.java
    com/dft/shot/android/ui/HotDetailActivity.java
    com/dft/shot/android/ui/HotManListActivity.java
    com/dft/shot/android/ui/ImagesActivity.java
    com/dft/shot/android/ui/InviteCodeActivity.java
    com/dft/shot/android/ui/JubaoDetailActivity.java
    com/dft/shot/android/ui/JubaoReasonActivity.java
    com/dft/shot/android/ui/LaunchActivity.java
    com/dft/shot/android/ui/ListActivityActivity.java
    com/dft/shot/android/ui/LoginActivity.java
    com/dft/shot/android/ui/MessageDetailActivity.java
    com/dft/shot/android/ui/MessageListActivity.java
    com/dft/shot/android/ui/MoneyCashActivity.java
    com/dft/shot/android/ui/MoneyGetActivity.java
    com/dft/shot/android/ui/MovieContentActivity.java
    com/dft/shot/android/ui/MovieDetailActivity.java
    com/dft/shot/android/ui/MovieListActivity.java
    com/dft/shot/android/ui/MusicVideoActivity.java
    com/dft/shot/android/ui/MyAccountActivity.java
    com/dft/shot/android/ui/MyFansActivity.java
    com/dft/shot/android/ui/MyFollowActivity.java
    com/dft/shot/android/ui/MyUpdateActivity.java
    com/dft/shot/android/ui/MyinviteActivity.java
    com/dft/shot/android/ui/OrderUploadImgActivity.java
    com/dft/shot/android/ui/OtherInfoActivity.java
    com/dft/shot/android/ui/PorxyMoneyActivity.java
    com/dft/shot/android/ui/RankManActivity.java
    com/dft/shot/android/ui/RechargeCentreActivity.java
    com/dft/shot/android/ui/RechargeDetailActivity.java
    com/dft/shot/android/ui/RechargeListActivity.java
    com/dft/shot/android/ui/RechargeSuccessActivity.java
    com/dft/shot/android/ui/RecordVideoActivity.java
    com/dft/shot/android/ui/RedeCodeActivity.java
    com/dft/shot/android/ui/RedeShopActivity.java
    com/dft/shot/android/ui/RegisterActivity.java
    com/dft/shot/android/ui/ReplyActivity.java
    com/dft/shot/android/ui/ScanQrCodeActivity.java
    com/dft/shot/android/ui/SerachActivity.java
    com/dft/shot/android/ui/ShareActivity.java
    com/dft/shot/android/ui/TagsVideoActivity.java
    com/dft/shot/android/ui/TequanActivity.java
    com/dft/shot/android/ui/UpdataRuleActivity.java
    com/dft/shot/android/ui/UpdatePasswordActivity.java
    com/dft/shot/android/ui/UploadVideoActivity.java
    com/dft/shot/android/ui/VideoContentActivity.java
    com/dft/shot/android/ui/VideoImageActivity.java
    com/dft/shot/android/ui/VideoListActivity.java
    com/dft/shot/android/ui/VideoMoneyActivity.java
    com/dft/shot/android/ui/VideoPActivity.java
    com/dft/shot/android/ui/VideoPlayActivity.java
    com/dft/shot/android/ui/WorkManagerActivity.java
    com/dft/shot/android/ui/activity/CreatorActivity.java
    com/dft/shot/android/ui/activity/MsgActivity.java
    com/dft/shot/android/ui/activity/ProxyActivity.java
    com/dft/shot/android/ui/activity/comic/ComicDetailActivity.java
    com/dft/shot/android/ui/activity/comic/ComicReadActivity.java
    com/dft/shot/android/ui/activity/community/CreateTopicActivity.java
    com/dft/shot/android/ui/activity/community/MyComActivity.java
    com/dft/shot/android/ui/activity/game/GameDetailActivity.java
    com/dft/shot/android/ui/activity/hot/HotActivityRuleActivity.java
    com/dft/shot/android/ui/activity/hot/HotRankActivity.java
    com/dft/shot/android/ui/activity/main/MoreActivity.java
    com/dft/shot/android/ui/activity/main/NetYellowActivity.java
    com/dft/shot/android/ui/activity/main/SignInActivity.java
    com/dft/shot/android/ui/activity/main/SignScoreActivity.java
    com/dft/shot/android/ui/activity/movie/LocalPlayActivity.java
    com/dft/shot/android/ui/activity/movie/MoviePlayerActivity.java
    com/dft/shot/android/ui/activity/movie/MyDownloadActivity.java
    com/dft/shot/android/ui/activity/other/OtherVideoActivity.java
    com/dft/shot/android/ui/activity/zy/MySeedActivity.java
    com/dft/shot/android/ui/activity/zy/SeedCommentActivity.java
    com/dft/shot/android/ui/activity/zy/SeedCommentDetailActivity.java
    com/dft/shot/android/ui/activity/zy/SeedDetailActivity.java
    com/dft/shot/android/ui/community/AddTopicActivity.java
    com/dft/shot/android/ui/community/PublishActivity.java
    com/dft/shot/android/ui/community/TopicDetailActivity.java
    com/dft/shot/android/ui/compilation/CompilationAddActivity.java
    com/dft/shot/android/ui/compilation/CompilationDetailActivity.java
    com/dft/shot/android/ui/compilation/CompilationListActivity.java
    com/dft/shot/android/ui/compilation/CreateCompilationActivity.java
    com/dft/shot/android/ui/fangroup/CreateFanGroupActivity.java
    com/dft/shot/android/ui/fangroup/CreateFanGroupResultActivity.java
    com/dft/shot/android/ui/fangroup/FanGroupDetailActivity.java
    com/dft/shot/android/ui/fangroup/FanGroupRuleActivity.java
    com/dft/shot/android/ui/fangroup/MyFansGroupActivity.java
    com/dft/shot/android/ui/video/TagsNewVideoActivity.java
    com/dft/shot/android/ui/w/e/a.java
    com/dft/shot/android/ui/w/e/c.java
    com/dft/shot/android/uitls/a0.java
    com/dft/shot/android/uitls/f0.java
    com/dft/shot/android/uitls/g.java
    com/dft/shot/android/uitls/j.java
    com/dft/shot/android/uitls/p0.java
    com/dft/shot/android/uitls/v1.java
    com/dft/shot/android/uitls/z0.java
    com/fynnjason/utils/m.java
    com/fynnjason/utils/o.java
    com/hjq/permissions/PermissionFragment.java
    com/hjq/permissions/PermissionPageFragment.java
    com/hjq/permissions/i.java
    com/hjq/permissions/k.java
    com/hjq/permissions/l.java
    com/hjq/permissions/m.java
    com/hjq/permissions/n.java
    com/hjq/permissions/q.java
    com/hjq/permissions/r.java
    com/hjq/permissions/t.java
    com/hjq/permissions/v.java
    com/just/agentweb/ActionActivity.java
    com/just/agentweb/DefaultWebClient.java
    com/just/agentweb/download/DefaultDownloadImpl.java
    com/just/agentweb/download/NotificationCancelReceiver.java
    com/just/agentweb/download/f.java
    com/just/agentweb/download/g.java
    com/just/agentweb/filechooser/b.java
    com/just/agentweb/h.java
    com/just/agentweb/l.java
    com/karumi/dexter/Dexter.java
    com/karumi/dexter/DexterActivity.java
    com/karumi/dexter/DexterInstance.java
    com/karumi/dexter/IntentProvider.java
    com/karumi/dexter/listener/multi/SnackbarOnAnyDeniedMultiplePermissionsListener.java
    com/karumi/dexter/listener/single/SnackbarOnDeniedPermissionListener.java
    com/king/image/imageviewer/c.java
    com/lxj/xpermission/XPermission.java
    com/vector/update_app/HttpTextView.java
    com/vector/update_app/d.java
    com/vector/update_app/f.java
    com/vector/update_app/h/a.java
    com/vector/update_app/service/DownloadService.java
    com/websocket/NetworkChangedReceiver.java
    com/websocket/WebSocketService.java
    com/websocket/c.java
    com/websocket/d.java
    com/websocket/h.java
    com/yalantis/ucrop/UCropActivity.java
    com/yalantis/ucrop/UCropFragment.java
    com/yalantis/ucrop/UCropMultipleActivity.java
    com/yalantis/ucrop/c.java
    com/youngfeng/snake/e/l.java
    一般功能-> 获取系统服务(getSystemService)
    c/d/b/c.java
    c/j/a.java
    cn/bingoogolapple/qrcode/core/a.java
    cn/bingoogolapple/qrcode/core/c.java
    com/amplitude/android/utilities/AndroidNetworkConnectivityChecker.java
    com/amplitude/android/utilities/AndroidNetworkListener.java
    com/amplitude/common/android/AndroidContextProvider.java
    com/davemorrissey/labs/subscaleview/decoder/SkiaPooledImageRegionDecoder.java
    com/dft/shot/android/adapter/c2.java
    com/dft/shot/android/adapter/i2.java
    com/dft/shot/android/adapter/z2.java
    com/dft/shot/android/base/BaseActivity.java
    com/dft/shot/android/base/BaseCommunityActivity.java
    com/dft/shot/android/im/v2/ChatActivityV3.java
    com/dft/shot/android/im/v2/ChatManager.java
    com/dft/shot/android/location/AlxLocationService.java
    com/dft/shot/android/m/z.java
    com/dft/shot/android/ui/HomeActivity.java
    com/dft/shot/android/ui/InviteCodeActivity.java
    com/dft/shot/android/ui/ScanQrCodeActivity.java
    com/dft/shot/android/ui/ShareActivity.java
    com/dft/shot/android/ui/dialog/ComicSharePopup.java
    com/dft/shot/android/ui/dialog/RecoverAccountPopup.java
    com/dft/shot/android/ui/home/a0.java
    com/dft/shot/android/uitls/a1.java
    com/dft/shot/android/uitls/e0.java
    com/dft/shot/android/uitls/f1.java
    com/dft/shot/android/uitls/g1.java
    com/dft/shot/android/uitls/p1.java
    com/dft/shot/android/uitls/r0.java
    com/dft/shot/android/uitls/v.java
    com/dft/shot/android/uitls/z0.java
    com/dft/shot/android/view/HttpView.java
    com/effective/android/panel/g/a.java
    com/effective/android/panel/g/b.java
    com/fynnjason/utils/d.java
    com/fynnjason/utils/l.java
    com/fynnjason/utils/m.java
    com/fynnjason/utils/o.java
    com/hjq/permissions/l.java
    com/hjq/permissions/m.java
    com/hjq/permissions/n.java
    com/hjq/permissions/r.java
    com/hjq/toast/ToastUtils.java
    com/hjq/toast/WindowHelper.java
    com/just/agentweb/AgentWebView.java
    com/just/agentweb/download/f.java
    com/just/agentweb/h.java
    com/lxj/xpermission/XPermission.java
    com/lxj/xpopup/core/BasePopupView.java
    com/lxj/xpopup/e/b.java
    com/lxj/xpopup/e/c.java
    com/lxj/xpopup/impl/FullScreenPopupView.java
    com/lxj/xpopup/impl/PartShadowPopupView.java
    com/sunfusheng/j/b.java
    com/vanniktech/emoji/j.java
    com/vector/update_app/h/a.java
    com/vector/update_app/service/DownloadService.java
    com/websocket/NetworkChangedReceiver.java
    com/websocket/WebSocketService.java
    com/xw/repo/BubbleSeekBar.java
    com/yalantis/ucrop/l/a.java
    com/youngfeng/snake/e/i.java
    com/youngfeng/snake/e/l.java
    f/a/a/a/b.java
    me/jessyan/autosize/utils/ScreenUtils.java
    隐私数据-> 剪贴板数据读写操作
    调用java反射机制
    c/c/a/a/a.java
    c/c/a/a/c.java
    c/c/a/a/d.java
    c/c/a/a/f.java
    c/h/a/a.java
    c/k/b.java
    com/alexvasilkov/gestures/f/b.java
    com/amplitude/android/utilities/LoadClass.java
    com/amplitude/common/android/AndroidContextProvider.java
    com/dft/shot/android/uitls/b1.java
    com/dft/shot/android/uitls/p1.java
    com/dft/shot/android/uitls/s.java
    com/dft/shot/android/uitls/x1/c.java
    com/dft/shot/android/uitls/x1/h.java
    com/dft/shot/android/uitls/x1/i.java
    com/dft/shot/android/view/FixAppBarLayoutBehavior.java
    com/gyf/immersionbar/NotchUtils.java
    com/gyf/immersionbar/OSUtils.java
    com/gyf/immersionbar/SpecialBarFontUtils.java
    com/hjq/permissions/j.java
    com/hjq/permissions/t.java
    com/hjq/toast/SafeToast.java
    com/hjq/toast/ToastUtils.java
    com/just/agentweb/AgentWebView.java
    com/just/agentweb/DefaultWebClient.java
    com/just/agentweb/b.java
    com/just/agentweb/download/f.java
    com/just/agentweb/f.java
    com/just/agentweb/f0.java
    com/just/agentweb/g0.java
    com/just/agentweb/h.java
    com/lzy/okgo/model/HttpHeaders.java
    com/lzy/okgo/utils/IOUtils.java
    com/m3u8/download/HttpHeaders.java
    com/m3u8/download/l/c.java
    com/nineoldandroids/animation/PropertyValuesHolder.java
    com/nineoldandroids/util/a.java
    com/yalantis/ucrop/j/b.java
    com/youngfeng/snake/app/Fragment.java
    com/youngfeng/snake/b.java
    com/youngfeng/snake/d/a/a/a.java
    com/youngfeng/snake/e/b.java
    com/youngfeng/snake/e/e.java
    f/a/a/a/a.java
    me/imid/swipebacklayout/lib/b.java
    me/jessyan/autosize/AutoSizeConfig.java
    me/jessyan/autosize/utils/AutoSizeUtils.java
    org/greenrobot/eventbus/j.java
    org/greenrobot/eventbus/k.java
    org/greenrobot/greendao/j/b.java
    org/greenrobot/greendao/k/a.java
    组件-> 启动 Activity
    com/dft/shot/android/activity/ChangeFaceActivity.java
    com/dft/shot/android/activity/FragmentInnerTitleActivity.java
    com/dft/shot/android/activity/NovelReaderActivity.java
    com/dft/shot/android/im/v2/ChatActivityV3.java
    com/dft/shot/android/im/websocket/NotificationReceiver.java
    com/dft/shot/android/j/s.java
    com/dft/shot/android/m/z.java
    com/dft/shot/android/ui/AddFriendActivity.java
    com/dft/shot/android/ui/AppStoreActivity.java
    com/dft/shot/android/ui/ApplicationPorxyActivity.java
    com/dft/shot/android/ui/ChangeCodeActivity.java
    com/dft/shot/android/ui/ChangeNameActivity.java
    com/dft/shot/android/ui/ChatDetailActivity.java
    com/dft/shot/android/ui/ChatSetActivity.java
    com/dft/shot/android/ui/ChoiceSeeActivity.java
    com/dft/shot/android/ui/ChoiceTagsActivity.java
    com/dft/shot/android/ui/ChoiceUploadActivity.java
    com/dft/shot/android/ui/ChooseCodeActivity.java
    com/dft/shot/android/ui/CityChoiceActivity.java
    com/dft/shot/android/ui/CityVideoActivity.java
    com/dft/shot/android/ui/CommentDetailActivity.java
    com/dft/shot/android/ui/CommunityDetailActivity.java
    com/dft/shot/android/ui/CommunityOtherActivity.java
    com/dft/shot/android/ui/CommunityRuleActivity.java
    com/dft/shot/android/ui/CommunitySendActivity.java
    com/dft/shot/android/ui/CommunityUpdateActivity.java
    com/dft/shot/android/ui/CunstomDetailActivity.java
    com/dft/shot/android/ui/H5Activity.java
    com/dft/shot/android/ui/HelpFeedDetailActivity.java
    com/dft/shot/android/ui/HelpFeedbackActivity.java
    com/dft/shot/android/ui/HomeActivity.java
    com/dft/shot/android/ui/HotActivityActivity.java
    com/dft/shot/android/ui/HotDetailActivity.java
    com/dft/shot/android/ui/HotManListActivity.java
    com/dft/shot/android/ui/ImagesActivity.java
    com/dft/shot/android/ui/InviteCodeActivity.java
    com/dft/shot/android/ui/JubaoDetailActivity.java
    com/dft/shot/android/ui/JubaoReasonActivity.java
    com/dft/shot/android/ui/LaunchActivity.java
    com/dft/shot/android/ui/ListActivityActivity.java
    com/dft/shot/android/ui/LoginActivity.java
    com/dft/shot/android/ui/MessageDetailActivity.java
    com/dft/shot/android/ui/MessageListActivity.java
    com/dft/shot/android/ui/MoneyCashActivity.java
    com/dft/shot/android/ui/MoneyGetActivity.java
    com/dft/shot/android/ui/MovieContentActivity.java
    com/dft/shot/android/ui/MovieDetailActivity.java
    com/dft/shot/android/ui/MovieListActivity.java
    com/dft/shot/android/ui/MusicVideoActivity.java
    com/dft/shot/android/ui/MyAccountActivity.java
    com/dft/shot/android/ui/MyFansActivity.java
    com/dft/shot/android/ui/MyFollowActivity.java
    com/dft/shot/android/ui/MyUpdateActivity.java
    com/dft/shot/android/ui/MyinviteActivity.java
    com/dft/shot/android/ui/OrderUploadImgActivity.java
    com/dft/shot/android/ui/OtherInfoActivity.java
    com/dft/shot/android/ui/PorxyMoneyActivity.java
    com/dft/shot/android/ui/RankManActivity.java
    com/dft/shot/android/ui/RechargeCentreActivity.java
    com/dft/shot/android/ui/RechargeDetailActivity.java
    com/dft/shot/android/ui/RechargeListActivity.java
    com/dft/shot/android/ui/RechargeSuccessActivity.java
    com/dft/shot/android/ui/RecordVideoActivity.java
    com/dft/shot/android/ui/RedeCodeActivity.java
    com/dft/shot/android/ui/RedeShopActivity.java
    com/dft/shot/android/ui/RegisterActivity.java
    com/dft/shot/android/ui/ReplyActivity.java
    com/dft/shot/android/ui/ScanQrCodeActivity.java
    com/dft/shot/android/ui/SerachActivity.java
    com/dft/shot/android/ui/ShareActivity.java
    com/dft/shot/android/ui/TagsVideoActivity.java
    com/dft/shot/android/ui/TequanActivity.java
    com/dft/shot/android/ui/UpdataRuleActivity.java
    com/dft/shot/android/ui/UpdatePasswordActivity.java
    com/dft/shot/android/ui/UploadVideoActivity.java
    com/dft/shot/android/ui/VideoContentActivity.java
    com/dft/shot/android/ui/VideoImageActivity.java
    com/dft/shot/android/ui/VideoListActivity.java
    com/dft/shot/android/ui/VideoMoneyActivity.java
    com/dft/shot/android/ui/VideoPActivity.java
    com/dft/shot/android/ui/WorkManagerActivity.java
    com/dft/shot/android/ui/activity/CreatorActivity.java
    com/dft/shot/android/ui/activity/MsgActivity.java
    com/dft/shot/android/ui/activity/ProxyActivity.java
    com/dft/shot/android/ui/activity/comic/ComicDetailActivity.java
    com/dft/shot/android/ui/activity/comic/ComicReadActivity.java
    com/dft/shot/android/ui/activity/community/CreateTopicActivity.java
    com/dft/shot/android/ui/activity/community/MyComActivity.java
    com/dft/shot/android/ui/activity/game/GameDetailActivity.java
    com/dft/shot/android/ui/activity/hot/HotActivityRuleActivity.java
    com/dft/shot/android/ui/activity/hot/HotRankActivity.java
    com/dft/shot/android/ui/activity/main/MoreActivity.java
    com/dft/shot/android/ui/activity/main/NetYellowActivity.java
    com/dft/shot/android/ui/activity/main/SignInActivity.java
    com/dft/shot/android/ui/activity/main/SignScoreActivity.java
    com/dft/shot/android/ui/activity/movie/LocalPlayActivity.java
    com/dft/shot/android/ui/activity/movie/MoviePlayerActivity.java
    com/dft/shot/android/ui/activity/movie/MyDownloadActivity.java
    com/dft/shot/android/ui/activity/other/OtherVideoActivity.java
    com/dft/shot/android/ui/activity/zy/MySeedActivity.java
    com/dft/shot/android/ui/activity/zy/SeedCommentActivity.java
    com/dft/shot/android/ui/activity/zy/SeedCommentDetailActivity.java
    com/dft/shot/android/ui/activity/zy/SeedDetailActivity.java
    com/dft/shot/android/ui/community/AddTopicActivity.java
    com/dft/shot/android/ui/community/PublishActivity.java
    com/dft/shot/android/ui/community/TopicDetailActivity.java
    com/dft/shot/android/ui/compilation/CompilationAddActivity.java
    com/dft/shot/android/ui/compilation/CompilationDetailActivity.java
    com/dft/shot/android/ui/compilation/CompilationListActivity.java
    com/dft/shot/android/ui/compilation/CreateCompilationActivity.java
    com/dft/shot/android/ui/fangroup/CreateFanGroupActivity.java
    com/dft/shot/android/ui/fangroup/CreateFanGroupResultActivity.java
    com/dft/shot/android/ui/fangroup/FanGroupDetailActivity.java
    com/dft/shot/android/ui/fangroup/FanGroupRuleActivity.java
    com/dft/shot/android/ui/fangroup/MyFansGroupActivity.java
    com/dft/shot/android/ui/video/TagsNewVideoActivity.java
    com/dft/shot/android/uitls/f0.java
    com/dft/shot/android/uitls/g.java
    com/dft/shot/android/uitls/p0.java
    com/dft/shot/android/uitls/v1.java
    com/fynnjason/utils/m.java
    com/fynnjason/utils/o.java
    com/hjq/permissions/PermissionFragment.java
    com/hjq/permissions/PermissionPageFragment.java
    com/hjq/permissions/v.java
    com/just/agentweb/ActionActivity.java
    com/just/agentweb/DefaultWebClient.java
    com/just/agentweb/download/DefaultDownloadImpl.java
    com/just/agentweb/download/g.java
    com/just/agentweb/filechooser/b.java
    com/karumi/dexter/DexterInstance.java
    com/karumi/dexter/listener/multi/SnackbarOnAnyDeniedMultiplePermissionsListener.java
    com/karumi/dexter/listener/single/SnackbarOnDeniedPermissionListener.java
    com/king/image/imageviewer/c.java
    com/lxj/xpermission/XPermission.java
    com/vector/update_app/HttpTextView.java
    com/vector/update_app/f.java
    com/vector/update_app/h/a.java
    com/yalantis/ucrop/c.java
    com/youngfeng/snake/e/l.java
    隐私数据-> 获取已安装的应用程序
    网络通信-> WebView 相关
    网络通信-> WebView JavaScript接口
    网络通信-> WebView使用File协议 com/dft/shot/android/m/z.java
    com/just/agentweb/a.java
    进程操作-> 获取运行的进程\服务
    一般功能-> 获取活动网路信息
    加密解密-> 信息摘要算法
    com/danikula/videocache/p.java
    com/dft/shot/android/ui/LaunchActivity.java
    com/dft/shot/android/uitls/p1.java
    com/dft/shot/android/uitls/v0.java
    com/dft/shot/android/view/k/a.java
    com/dft/shot/android/view/k/b.java
    com/fynnjason/utils/d.java
    com/just/agentweb/h.java
    com/m3u8/download/l/b.java
    com/m3u8/download/l/h.java
    com/sunfusheng/g.java
    com/sunfusheng/i/a.java
    com/sunfusheng/i/b.java
    com/sunfusheng/i/c.java
    com/szcx/lib/encrypt/c.java
    com/szcx/lib/encrypt/f/a.java
    com/szcx/lib/encrypt/f/b.java
    com/szcx/lib/encrypt/f/c.java
    g/a/n/b.java
    jp/wasabeef/glide/transformations/BitmapTransformation.java
    jp/wasabeef/glide/transformations/BlurTransformation.java
    jp/wasabeef/glide/transformations/ColorFilterTransformation.java
    jp/wasabeef/glide/transformations/CropCircleTransformation.java
    jp/wasabeef/glide/transformations/CropSquareTransformation.java
    jp/wasabeef/glide/transformations/CropTransformation.java
    jp/wasabeef/glide/transformations/GrayscaleTransformation.java
    jp/wasabeef/glide/transformations/MaskTransformation.java
    jp/wasabeef/glide/transformations/RoundedCornersTransformation.java
    jp/wasabeef/glide/transformations/SupportRSBlurTransformation.java
    jp/wasabeef/glide/transformations/gpu/BrightnessFilterTransformation.java
    jp/wasabeef/glide/transformations/gpu/ContrastFilterTransformation.java
    jp/wasabeef/glide/transformations/gpu/GPUFilterTransformation.java
    jp/wasabeef/glide/transformations/gpu/InvertFilterTransformation.java
    jp/wasabeef/glide/transformations/gpu/KuwaharaFilterTransformation.java
    jp/wasabeef/glide/transformations/gpu/PixelationFilterTransformation.java
    jp/wasabeef/glide/transformations/gpu/SepiaFilterTransformation.java
    jp/wasabeef/glide/transformations/gpu/SketchFilterTransformation.java
    jp/wasabeef/glide/transformations/gpu/SwirlFilterTransformation.java
    jp/wasabeef/glide/transformations/gpu/ToonFilterTransformation.java
    jp/wasabeef/glide/transformations/gpu/VignetteFilterTransformation.java
    DEX-> 动态加载
    隐私数据-> 获取GPS位置信息 com/amplitude/android/plugins/AndroidContextPlugin.java
    com/amplitude/common/android/AndroidContextProvider.java
    com/dft/shot/android/location/AlxLocationService.java
    网络通信-> OkHttpClient Connection
    加密解密-> Crypto加解密组件
    网络通信-> TCP套接字
    隐私数据-> 屏幕截图,截取自己应用内部界面
    网络通信-> HTTP建立连接
    网络通信-> HTTPS建立连接 com/danikula/videocache/k.java
    命令执行-> getRuntime.exec() com/fynnjason/utils/l.java
    com/yalantis/ucrop/j/c.java
    一般功能-> 查询数据库(短信、联系人、通话记录、浏览器历史等) com/dft/shot/android/uitls/m0.java
    网络通信-> WebView GET请求 com/just/agentweb/q0.java
    网络通信-> WebView POST请求 com/just/agentweb/q0.java
    一般功能-> 加载so文件
    进程操作-> 杀死进程 com/m3u8/download/j/b.java
    g/b/a/d.java
    网络通信-> TCP服务器套接字
    组件-> 发送广播 com/dft/shot/android/im/v2/ChatManager.java
    com/dft/shot/android/uitls/a0.java
    com/dft/shot/android/uitls/j.java
    加密解密-> Base64 加密 com/dft/shot/android/uitls/j.java
    com/szcx/lib/encrypt/a.java
    com/watermark/androidwm/utils/a.java
    加密解密-> Base64 解密 com/dft/shot/android/uitls/j.java
    com/szcx/lib/encrypt/a.java
    com/watermark/androidwm/utils/a.java
    一般功能-> 查看\修改Android系统属性 com/dft/shot/android/uitls/x1/h.java
    com/gyf/immersionbar/NotchUtils.java
    com/gyf/immersionbar/OSUtils.java
    一般功能-> Android通知
    隐私数据-> 拍照摄像 cn/bingoogolapple/qrcode/core/CameraPreview.java
    com/dft/shot/android/g/b/a.java
    网络通信-> SSL证书处理 com/lzy/okgo/https/HttpsUtils.java
    com/m3u8/download/h.java
    组件-> ContentProvider me/jessyan/autosize/InitProvider.java
    一般功能-> PowerManager操作 com/dft/shot/android/im/v2/ChatManager.java
    隐私数据-> 录制音频行为 com/dft/shot/android/s/a.java
    com/dft/shot/android/uitls/o.java
    JavaScript 接口方法 com/just/agentweb/d.java
    网络通信-> URLConnection com/amplitude/core/utilities/http/HttpClient.java

    安全漏洞检测

    高危
    3
    警告
    9
    信息
    3
    安全
    1
    屏蔽
    0
    序号 问题 等级 参考标准 文件位置 操作
    1 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它 信息
    OWASP MASVS: MSTG-STORAGE-10
    升级会员:解锁高级权限
    2 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
    OWASP Top 10: M9: Reverse Engineering
    OWASP MASVS: MSTG-STORAGE-14
    升级会员:解锁高级权限
    3 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
    OWASP MASVS: MSTG-STORAGE-3
    升级会员:解锁高级权限
    4 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 警告 CWE: CWE-200: 信息泄露
    OWASP Top 10: M1: Improper Platform Usage
    OWASP MASVS: MSTG-PLATFORM-7
    升级会员:解锁高级权限
    5 应用程序使用不安全的随机数生成器 警告 CWE: CWE-330: 使用不充分的随机数
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-6
    升级会员:解锁高级权限
    6 MD5是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4
    升级会员:解锁高级权限
    7 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
    OWASP Top 10: M2: Insecure Data Storage
    OWASP MASVS: MSTG-STORAGE-2
    升级会员:解锁高级权限
    8 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 安全
    OWASP MASVS: MSTG-NETWORK-4
    升级会员:解锁高级权限
    9 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击 高危 CWE: CWE-79: 在Web页面生成时对输入的转义处理不恰当('跨站脚本')
    OWASP Top 10: M1: Improper Platform Usage
    OWASP MASVS: MSTG-PLATFORM-6
    升级会员:解锁高级权限
    10 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 警告 CWE: CWE-276: 默认权限不正确
    OWASP Top 10: M2: Insecure Data Storage
    OWASP MASVS: MSTG-STORAGE-2
    升级会员:解锁高级权限
    11 SHA-1是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4
    升级会员:解锁高级权限
    12 此应用程序使用SQL Cipher。SQLCipher为sqlite数据库文件提供256位AES加密 信息
    OWASP MASVS: MSTG-CRYPTO-1
    升级会员:解锁高级权限
    13 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 警告 CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当('SQL 注入')
    OWASP Top 10: M7: Client Code Quality
    升级会员:解锁高级权限
    14 默认情况下,调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知,ECB模式很弱,因为它导致相同明文块的密文相同 高危 CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-2
    升级会员:解锁高级权限
    15 IP地址泄露 警告 CWE: CWE-200: 信息泄露
    OWASP MASVS: MSTG-CODE-2
    升级会员:解锁高级权限
    16 已启用远程WebView调试 高危 CWE: CWE-919: 移动应用程序中的弱点
    OWASP Top 10: M1: Improper Platform Usage
    OWASP MASVS: MSTG-RESILIENCE-2
    升级会员:解锁高级权限

    Native库安全分析

    序号 动态库 NX(堆栈禁止执行) PIE STACK CANARY(栈保护) RELRO RPATH(指定SO搜索路径) RUNPATH(指定SO搜索路径) FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)
    1 arm64-v8a/librtmp-jni.so True
    info
    二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
    动态共享对象 (DSO)
    info
    共享库是使用 -fPIC 标志构建的,该标志启用与地址无关的代码。这使得面向返回的编程 (ROP) 攻击更难可靠地执行。
    True
    info
    这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
    Full RELRO
    info
    此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
    None
    info
    二进制文件没有设置运行时搜索路径或RPATH
    None
    info
    二进制文件没有设置 RUNPATH
    False
    warning
    二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
    True
    info
    符号被剥离
    2 arm64-v8a/libsojm.so True
    info
    二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
    动态共享对象 (DSO)
    info
    共享库是使用 -fPIC 标志构建的,该标志启用与地址无关的代码。这使得面向返回的编程 (ROP) 攻击更难可靠地执行。
    False
    high
    这个二进制文件没有在栈上添加栈哨兵值。栈哨兵是用于检测和防止攻击者覆盖返回地址的一种技术。使用选项-fstack-protector-all来启用栈哨兵。这对于Dart/Flutter库不适用,除非使用了Dart FFI
    Full RELRO
    info
    此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
    None
    info
    二进制文件没有设置运行时搜索路径或RPATH
    None
    info
    二进制文件没有设置 RUNPATH
    False
    warning
    二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
    True
    info
    符号被剥离
    3 arm64-v8a/libWatermark.so True
    info
    二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
    动态共享对象 (DSO)
    info
    共享库是使用 -fPIC 标志构建的,该标志启用与地址无关的代码。这使得面向返回的编程 (ROP) 攻击更难可靠地执行。
    True
    info
    这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
    Full RELRO
    info
    此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
    None
    info
    二进制文件没有设置运行时搜索路径或RPATH
    None
    info
    二进制文件没有设置 RUNPATH
    False
    warning
    二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
    True
    info
    符号被剥离

    文件分析

    序号 问题 文件

    行为分析

    编号 行为 标签 文件
    00004 获取文件名并将其放入 JSON 对象 文件
    信息收集
    升级会员:解锁高级权限
    00202 打电话 控制
    升级会员:解锁高级权限
    00203 将电话号码放入意图中 控制
    升级会员:解锁高级权限
    00063 隐式意图(查看网页、拨打电话等) 控制
    升级会员:解锁高级权限
    00051 通过setData隐式意图(查看网页、拨打电话等) 控制
    升级会员:解锁高级权限
    00054 从文件安装其他APK 反射
    升级会员:解锁高级权限
    00022 从给定的文件绝对路径打开文件 文件
    升级会员:解锁高级权限
    00121 创建目录 文件
    命令
    升级会员:解锁高级权限
    00125 检查给定的文件路径是否存在 文件
    升级会员:解锁高级权限
    00005 获取文件的绝对路径并将其放入 JSON 对象 文件
    升级会员:解锁高级权限
    00078 获取网络运营商名称 信息收集
    电话服务
    升级会员:解锁高级权限
    00132 查询ISO国家代码 电话服务
    信息收集
    升级会员:解锁高级权限
    00192 获取短信收件箱中的消息 短信
    升级会员:解锁高级权限
    00191 获取短信收件箱中的消息 短信
    升级会员:解锁高级权限
    00036 从 res/raw 目录获取资源文件 反射
    升级会员:解锁高级权限
    00163 创建新的 Socket 并连接到它 socket
    升级会员:解锁高级权限
    00183 获取当前相机参数并更改设置 相机
    升级会员:解锁高级权限
    00089 连接到 URL 并接收来自服务器的输入流 命令
    网络
    升级会员:解锁高级权限
    00109 连接到 URL 并获取响应代码 网络
    命令
    升级会员:解锁高级权限
    00094 连接到 URL 并从中读取数据 命令
    网络
    升级会员:解锁高级权限
    00108 从给定的 URL 读取输入流 网络
    命令
    升级会员:解锁高级权限
    00011 从 URI 查询数据(SMS、CALLLOGS) 短信
    通话记录
    信息收集
    升级会员:解锁高级权限
    00187 查询 URI 并检查结果 信息收集
    短信
    通话记录
    日历
    升级会员:解锁高级权限
    00077 读取敏感数据(短信、通话记录等) 信息收集
    短信
    通话记录
    日历
    升级会员:解锁高级权限
    00014 将文件读入流并将其放入 JSON 对象中 文件
    升级会员:解锁高级权限
    00013 读取文件并将其放入流中 文件
    升级会员:解锁高级权限
    00091 从广播中检索数据 信息收集
    升级会员:解锁高级权限
    00096 连接到 URL 并设置请求方法 命令
    网络
    升级会员:解锁高级权限
    00030 通过给定的 URL 连接到远程服务器 网络
    升级会员:解锁高级权限
    00072 将 HTTP 输入流写入文件 命令
    网络
    文件
    升级会员:解锁高级权限
    00001 初始化位图对象并将数据(例如JPEG)压缩为位图对象 相机
    升级会员:解锁高级权限
    00115 获取设备的最后已知位置 信息收集
    位置
    升级会员:解锁高级权限
    00033 查询IMEI号 信息收集
    升级会员:解锁高级权限
    00119 将IMEI号写入文件 信息收集
    文件
    电话服务
    命令
    升级会员:解锁高级权限
    00012 读取数据并放入缓冲流 文件
    升级会员:解锁高级权限
    00002 打开相机并拍照 相机
    升级会员:解锁高级权限
    00104 检查给定路径是否是目录 文件
    升级会员:解锁高级权限
    00031 检查当前正在运行的应用程序列表 反射
    信息收集
    升级会员:解锁高级权限
    00112 获取日历事件的日期 信息收集
    日历
    升级会员:解锁高级权限

    敏感权限分析

    恶意软件常用权限 15/30
    android.permission.REQUEST_INSTALL_PACKAGES
    android.permission.VIBRATE
    android.permission.ACCESS_COARSE_LOCATION
    android.permission.RECEIVE_BOOT_COMPLETED
    android.permission.GET_TASKS
    android.permission.CAMERA
    android.permission.RECORD_AUDIO
    android.permission.SYSTEM_ALERT_WINDOW
    android.permission.WAKE_LOCK
    android.permission.READ_PHONE_STATE
    android.permission.ACCESS_FINE_LOCATION
    android.permission.MODIFY_AUDIO_SETTINGS
    android.permission.CALL_PHONE
    android.permission.GET_ACCOUNTS
    android.permission.WRITE_SETTINGS
    其它常用权限 10/46
    android.permission.INTERNET
    android.permission.WRITE_EXTERNAL_STORAGE
    android.permission.READ_EXTERNAL_STORAGE
    android.permission.ACCESS_NETWORK_STATE
    android.permission.ACCESS_WIFI_STATE
    android.permission.FLASHLIGHT
    android.permission.CHANGE_WIFI_STATE
    android.permission.REORDER_TASKS
    android.permission.CHANGE_NETWORK_STATE
    android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

    恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
    其它常用权限 是已知恶意软件经常滥用的权限。

    IP地理位置

    恶意域名检测

    域名 状态 中国境内 位置信息 解析
    video.7k.cn 安全
    没有可用的地理位置信息。
    pfzpnj.lhyiyqr.xyz 安全
    IP地址: 106.63.15.10
    国家: 中国
    地区: 江苏
    城市: 无锡
    查看: 高德地图

    www.weiju.ba 安全
    没有可用的地理位置信息。
    img.miseyl.com 安全
    没有可用的地理位置信息。
    api.eu.amplitude.com 安全
    IP地址: 3.64.52.0
    国家: 德国
    地区: 黑森
    城市: 美因河畔法兰克福
    查看: Google 地图

    api.t.sina.com.cn 安全
    IP地址: 49.67.73.135
    国家: 中国
    地区: 云南
    城市: 昆明
    查看: 高德地图

    jvtijg.lcjsujyb.xyz 安全
    IP地址: 106.63.15.10
    国家: 中国
    地区: 江苏
    城市: 无锡
    查看: 高德地图

    xx.125.com 安全
    没有可用的地理位置信息。
    static.meiqia.com 安全
    IP地址: 49.67.73.135
    国家: 中国
    地区: 江苏
    城市: 南通
    查看: 高德地图

    api2.amplitude.com 安全
    IP地址: 50.112.233.80
    国家: 美国
    地区: 俄勒冈
    城市: 波特兰
    查看: Google 地图

    jp-kao.aass4.top 安全
    没有可用的地理位置信息。
    4399.com多发生部位 安全
    没有可用的地理位置信息。
    imgpublic.ycomesc.com 安全
    没有可用的地理位置信息。
    pfzpnj.lhyiyqr.xyzhttps 安全
    没有可用的地理位置信息。
    www.docs.developers.amplitude.com 安全
    IP地址: 76.76.21.142
    国家: 美国
    地区: 加利福尼亚
    城市: 核桃
    查看: Google 地图

    greenrobot.org 安全
    IP地址: 85.13.163.69
    国家: 德国
    地区: 图林根
    城市: 弗里德斯多夫
    查看: Google 地图

    jvtijg.lfdgilu.xyz 安全
    IP地址: 221.228.32.13
    国家: 中国
    地区: 江苏
    城市: 无锡
    查看: 高德地图

    raw.githubusercontent.com 安全
    IP地址: 185.199.109.133
    国家: 美国
    地区: 宾夕法尼亚
    城市: 加利福尼亚
    查看: Google 地图

    手机号提取

    URL链接分析

    URL信息 源码文件
    127.0.0.1
    http://%s:%d/%s
    com/danikula/videocache/i.java
    127.0.0.1
    org/nanohttpd/protocols/http/b.java
    http://%s:%d/%s
    com/danikula/videocache/m.java
    http://jp-kao.aass4.top:8086/src2
    http://192.168.1.8/avweb
    https://static.meiqia.com/dist/standalone.html?_=t&eid=121277
    com/dft/shot/android/d.java
    https://pfzpnj.lhyiyqr.xyz,https://jvtijg.lfdgilu.xyz,https://jvtijg.lcjsujyb.xyz
    com/dft/shot/android/uitls/h1.java
    http://imgpublic.ycomesc.com/
    com/dft/shot/android/im/v2/ChatActivityV3.java
    https://raw.githubusercontent.com/little-5/backup/master/91.txt
    com/dft/shot/android/network/a.java
    http://api.t.sina.com.cn/short_url/shorten.json?source=3271760578&url_long=
    com/dft/shot/android/q/l.java
    https://www.docs.developers.amplitude.com/data/sdks/android-kotlin/#offline-mode
    com/amplitude/android/utilities/AndroidNetworkConnectivityChecker.java
    http://img.miseyl.com/imgupload.php
    com/dft/shot/android/network/f.java
    https://api.eu.amplitude.com/2/httpapi
    https://api.eu.amplitude.com/batch
    https://api2.amplitude.com/2/httpapi
    https://api2.amplitude.com/batch
    com/amplitude/core/Constants.java
    http://imgpublic.ycomesc.com/img.xiao/04c9fb02a8c30ae84aa2f943e873af2d.jpg
    com/dft/shot/android/bean/home/HomeBean.java
    https://greenrobot.org/greendao/documentation/database-encryption/
    org/greenrobot/greendao/j/b.java
    1.0.0.1
    com/szcx/lib/encrypt/e.java
    http://api.t.sina.com.cn/short_url/shorten.json?source=3271760578&url_long=
    com/dft/shot/android/base/l.java
    http://www.baidu.com,这是测试哟
    ftp://4399.com多发生部位
    https://xx.125.com
    www.weiju.ba/xx2/b54
    www.baidu.com/img/xxxx.jpg
    www.baidu.com/?html=12354bhb35&ask=dasoiubao
    www.baidu.com哈哈哈www.google.com垃圾都是泪放假啊是的佛i
    com/vector/update_app/HttpTextView.java
    http://www.baidu.com,这是测试哟
    ftp://4399.com多发生部位
    https://xx.125.com
    www.weiju.ba/xx2/b54
    www.baidu.com/img/xxxx.jpg
    www.baidu.com/?html=12354bhb35&ask=dasoiubao
    www.baidu.com哈哈哈www.google.com垃圾都是泪放假啊是的佛i
    com/dft/shot/android/view/HttpView.java
    https://jvtijg.lfdgilu.xyz
    https://pfzpnj.lhyiyqr.xyz
    https://jvtijg.lcjsujyb.xyz
    com/dft/shot/android/a.java
    http://127.0.0.1:%d%s
    com/m3u8/download/j/b.java
    https://github.com/tootallnate/java-websocket/wiki/lost-connection-detection
    g/a/a.java
    http://video.7k.cn/app_video/20171202/6c8cf3ea/v.m3u8.mp4
    com/dft/shot/android/base/BaseVideoActivity.java
    https://github.com/vinc3m1
    https://github.com/vinc3m1/roundedimageview.git
    https://github.com/vinc3m1/roundedimageview
    https://github.com/vanniktech/emoji
    自研引擎-S

    Firebase配置检测

    邮箱地址提取

    第三方追踪器

    名称 类别 网址
    Amplitude Profiling, Analytics https://reports.exodus-privacy.eu.org/trackers/125

    敏感凭证泄露

    已显示 20 个secrets
    1、 "library_roundedimageview_authorWebsite" : "https://github.com/vinc3m1"
    2、 c713c7f928203caedebcfbc98e3cc1d1
    3、 ef8f996997308cb294c89cdea1798a6a
    4、 caf36d4f5cbfb1229a0005f1df54426a
    5、 193154da93e7506ee4c91257f1931ddf
    6、 CA327CBA8080BEDB919A1BAA3713E018
    7、 b39372dfb1d739e9dffc919c44854fbe
    8、 c400bc1739f7c30b0c794b9b5a5070f5
    9、 b429ecf619c69bc650fccc18b86ae9fa
    10、 1046af6c7a9ca06a922b79d3b842e804
    11、 OTkZOVoPAAkIWAgICl1bDFgOXAkBSFwOAF8KDgBDX0oPDVhfAiQVNCE2AAkLKw==
    12、 04c9fb02a8c30ae84aa2f943e873af2d
    13、 22f1fdbcf448886ab9c1bff03d89656a
    14、 1566c6c800765625933d81df50b0892f
    15、 d20ba3fd602306a593cf8f56e9d91726
    16、 6BBBBAAD-3430-406E-A937-F47917E51112
    17、 258EAFA5-E914-47DA-95CA-C5AB0DC85B11
    18、 DQ0dDWk4aT5rOzs4OD00Pms/OjoyCjAhITEJKjIl
    19、 ca3a2848d4e4417eb6ebfbffdc1f3212
    20、 1ed3b6ec19a32188da0d0e851bbe2ac1

    字符串信息

    建议导出为TXT,方便查看。

    活动列表

    显示所有 138 个 activities

    第三方SDK

    SDK名称 开发者 描述信息
    IJKPlayer Bilibili IJKPlayer 是一款基于 FFmpeg 的轻量级 Android/iOS 视频播放器,具有 API 易于集成、编译配置可裁剪、支持硬件加速解码、DanmakuFlameMaster 架构清晰、简单易用等优势。
    RenderScript Android RenderScript 是用于在 Android 上以高性能运行计算密集型任务的框架。RenderScript 主要用于数据并行计算,不过串行工作负载也可以从中受益。RenderScript 运行时可在设备上提供的多个处理器(如多核 CPU 和 GPU)间并行调度工作。这样您就能够专注于表达算法而不是调度工作。RenderScript 对于执行图像处理、计算摄影或计算机视觉的应用来说尤其有用。
    AgentWeb Justson AgentWeb 是一个基于的 Android WebView ,极度容易使用以及功能强大的库,提供了 Android WebView 一系列的问题解决方案 ,并且轻量和极度灵活。
    Dexter Karumi Dexter 是一个 Android 库,它简化了运行时请求权限的过程。
    PictureSelector LuckSiege 一款针对 Android 平台下的图片选择器,支持从相册获取图片、视频、音频 & 拍照,支持裁剪(单图 or 多图裁剪)、压缩、主题自定义配置等功能,支持动态获取权限&适配 Android 5.0+ 系统的开源图片选择框架。
    File Provider Android FileProvider 是 ContentProvider 的特殊子类,它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
    AndroidAutoSize JessYanCoding 今日头条屏幕适配方案终极版,一个极低成本的 Android 屏幕适配方案。
    Jetpack Media Google 与其他应用共享媒体内容和控件。已被 media2 取代。

    污点分析

    当apk较大时,代码量会很大,造成数据流图(ICFG)呈现爆炸式增长,所以该功能比较耗时,请先喝杯咖啡,耐心等待……
    规则名称 描述信息 操作
    病毒分析 使用安卓恶意软件常用的API进行污点分析 开始分析  
    漏洞挖掘 漏洞挖掘场景下的污点分析 开始分析  
    隐私合规 隐私合规场景下的污点分析:组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 开始分析  
    密码分析 分析加密算法是否使用常量密钥、静态初始化的向量(IV)、加密模式是否使用ECB等 开始分析  
    Callback 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用,所以如果需要分析Callback方法需要在声明文件中将其声明,这里提供一份AndroidCallbacks.txt文件,里面是一些常见的原生回调接口或类,如果有特殊接口需求,可以联系管理员 开始分析