漏洞分析

0

高危漏洞

8

中危漏洞

8

低危漏洞

8

警告

文件名 TaiAn_DBANK_20180105_1537_fbyz.apk
上传者 huahua
文件大小 24.174774169922MB
MD5 1be17810548a24194bea776e8f63ea8c
包名 com.iss.dbank.taian
Main Activity com.iss.dbank.taian.SpalshActivity
Min SDK 10
Target SDK 19

权限列表

# 名称 说明 提示
0 android.permission.CALL_PHONE 允许应用程序在您不介入的情况下拨打电话。恶意应用程序可借此在您的话费单上产生意外通话费。请注意,此权限不允许应用程序拨打紧急呼救电话。 警告
1 android.permission.GET_TASKS 允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。 注意
2 android.permission.READ_CONTACTS 允许应用程序读取您手机上存储的所有联系人(地址)数据。恶意应用程序可借此将您的数据发送给其他人。 注意
3 android.permission.READ_PHONE_STATE 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。 注意
4 android.permission.RECEIVE_BOOT_COMPLETED 允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间,而且如果应用程序一直运行,会降低手机的整体速度。 注意
5 android.permission.SYSTEM_ALERT_WINDOW 允许应用程序显示系统警报窗口。恶意应用程序可借此掌控整个手机屏幕。 注意
6 android.permission.ACCESS_NETWORK_STATE 允许应用程序查看所有网络的状态。 提示
7 android.permission.ACCESS_WIFI_STATE 允许应用程序查看有关WLAN状态的信息。 提示
8 android.permission.CAMERA 允许应用程序使用相机拍照,这样应用程序可随时收集进入相机镜头的图像。 提示
9 android.permission.CHANGE_CONFIGURATION 允许应用程序更改当前配置,例如语言设置或整体的字体大小。 提示
10 android.permission.CHANGE_WIFI_STATE 允许应用程序连接到WLAN接入点以及与WLAN接入点断开连接,并对配置的WLAN网络进行更改。 提示
11 android.permission.FLASHLIGHT 允许应用程序控制闪光灯。 提示
12 android.permission.GET_ACCOUNTS 允许应用程序获取手机已知的帐户列表。 提示
13 android.permission.INTERNET 允许程序访问网络. 提示
14 android.permission.KILL_BACKGROUND_PROCESSES 无论内存资源是否紧张,都允许应用程序结束其他应用程序的后台进程。 提示
15 android.permission.MANAGE_ACCOUNTS 允许应用程序执行添加、删除帐户及删除其密码之类的操作。 提示
16 android.permission.MOUNT_UNMOUNT_FILESYSTEMS 允许应用程序装载和卸载可移动存储器的文件系统。 提示
17 android.permission.VIBRATE 允许应用程序控制振动器。 提示
18 android.permission.WAKE_LOCK 允许应用程序防止手机进入休眠状态。 提示
19 android.permission.WRITE_EXTERNAL_STORAGE 允许应用程序写入SD卡。 提示

四大组件

组件名称

com.iss.dbank.taian.GuideActivity
com.sccba.dbank.RelieveBlackListActivity
com.sccba.dbank.FaceRecognitionSet
com.sccba.dbank.LiveLoginActivity
com.sccba.dbank.FaceDetectGuideActivity
com.sccba.dbank.PdfViewActivity
com.sccba.dbank.IdentityAuthenticationActivity2
com.iss.dbank.taian.MainActivity
com.sccba.dbank.IdentityAuthenticationActivity
com.sccba.dbank.WebLinkActivity
com.iss.dbank.taian.LoginActivity
com.sccba.dbank.chat.ChatServiceActivity
com.sccba.dbank.DBankCordovaActivity
com.iss.dbank.taian.SpalshActivity
com.iss.loghandler.ErrorHandler
com.sccba.dbank.ResetLoginPswActivity
com.sccba.dbank.GestureActivity
com.sccba.dbank.GestureChangeActivity
com.sccba.dbank.ChangeofSuccessActivity
com.sccba.dbank.BaseCordovaActivity
com.sccba.dbank.ResetSelfActivity
com.sccba.dbank.GestureChangeCheckActivity
com.iss.sdpersonalbank.activity.UpdateAPKActivity
com.mob.tools.MobUIShell
cn.sharesdk.tencent.qq.ResultReceiver
com.iss.dbank.taian.wxapi.WXEntryActivity
com.sccba.dbank.NoLoginGestureActivity
com.sccba.dbank.NoLoginAccountActivity
com.sccba.dbank.SuccessToActivity
com.sccba.dbank.GestureChangeSuccActivity
com.sccba.dbank.SavePicActivity
cn.cloudwalk.libproject.LiveResultActivity
cn.cloudwalk.libproject.LiveActivity
cn.cloudwalk.libproject.LiveStartActivity
com.kernal.passportreader.sdk.CameraActivity
com.kernal.passportreader.sdk.ShowResultActivity
com.kernal.passport.sdk.utils.PermissionActivity
kernal.idcard.android.IDCardBean
com.tencent.tauth.AuthActivity
com.tencent.connect.common.AssistActivity
com.kernal.smartvision_bankCard.MainActivity
com.kernal.bankcard.camera.ScanCamera
com.kernal.smartvision_bankCard.ShowResult
com.kernal.bankcard.utils.PermissionActivity

com.sccba.dbank.receiver.ServerUpdateService
com.sccba.dbank.receiver.AppStatusService
kernal.idcard.android.AuthService
kernal.idcard.android.RecogService
kernal.idcard.android.TimeService
com.kernal.bankcard.AuthService
com.baidu.location.f

kernal.idcard.android.DataChangeReceiver

第三方库

# 库名 介绍
0 com.tencent.smtt 腾讯X5浏览服务由QQ浏览器团队出品,致力于优化移动端webview体验的整套解决方案,使用QQ浏览器X5内核SDK和X5云端服务,解决移动端webview使用过程中出现的一切问题,优化用户的浏览体验,同时腾讯还将持续提供后续的更新和优化,为开发者提供最新最优秀的功能和服务。
1 com.alibaba.fastjson Fast JSON Processor https://github.com/alibaba/fastjson/wiki
2 com.alipay.share.sdk 分享给支付宝好友功能
3 com.tencent.map 腾讯地图Android SDK是一套基于Android2.3及以上设备的应用接口,通过该接口,您可以方便地访问腾讯地图为您提供的高质量地点数据和服务,构建丰富而实用的地图及位置服务类应用。腾讯地图Android SDK除提供创建底图、缩放、平滑移图等基础功能外,还提供定位、地址解析、反地址解析、周边搜索、路线方案等拓展服务,助你在应用开发中事半功倍。腾讯地图Android SDK的服务需要注册,免费的向第三方提供,任何非盈利性网站均可使用。
4 com.tencent.connect 腾讯开放平台
5 org.apache.cordova Mobile apps with HTML, CSS & JSTarget multiple platforms with one code base
6 com.squareup.okhttp An HTTP+HTTP/2 client for Android and Java applications. http://square.github.io/okhttp/.
7 com.sina.weibo 新浪微博开放平台(Weibo Open Platform)是基于新浪微博海量用户和强大的传播能力,接入第三方合作伙伴服务,向用户提供丰富应用和完善服务的开放平台。将你的服务接入微博平台,有助于推广产品,增加网站/应用的流量、拓展新用户,获得收益。
8 cn.sharesdk ShareSDK是中国最大的APP内分享服务提供商,ShareSDK社会化分享全面支持微信,微博,QQ空间,来往,易信,Facebook等国内外40个平台,帮助开发者轻松实现社会化分享、第三方登录、好友关系运用、一键分享、短链转换、评论和赞功能,还有强大的社会化统计分析管理后台,可以实时了解用户、信息流、回流率、传播效率等数据,有效地指导移动APP的日常运营与推广,同时为APP引入更多的社会化流量。
9 com.nostra13.universalimageloader Powerful and flexible library for loading, caching and displaying images on Android.
10 com.google.zxing Official ZXing ("Zebra Crossing") project home
11 com.tencent.tauth 腾讯QQ互联平台为广大开发者整理了SDK列表,辅助开发者快速接入QQ登录、分享等功能。QQ互联是腾讯旗下的开放平台,通过QQ互联,网站主和开发者可以申请接入QQ登录、用户可以使用QQ账号登录接入的站点,通过添加分享和赞组件,将站点内容分享到QQ空间和朋友网,通过获取API授权,网站主还可以将用户操作同步到QQ空间和朋友网。
12 org.apache.harmony Apache Harmony software is a modular Java runtime with class libraries and associated tools.
13 com.google.gson A Java serialization library that can convert Java Objects into JSON and back.
14 org.apache.http The Apache HttpComponents™ project is responsible for creating and maintaining a toolset of low level Java components focused on HTTP and associated protocols.
15 com.github.mikephil.charting A simple Android chart view / graph view library, supporting line- bar- pie- and candlestick charts as well as scaling, dragging and animations.

静态扫描发现风险点

风险等级 风险名称

中危

检测到4处证书弱校验漏洞。

位置: classes.dex
com.kepler.sdk.ae$b;
com.sccba.dbank.util.CommonUtils$9;
com.xindun.utils.SampleHttpClient$MyX509TrustManager;
m.framework.network.SSLSocketFactoryEx$1;

当移动App客户端使用https或ssl/tls进行通信时,如果不校验证书的可信性,将存在中间人攻击漏洞,可导致信息泄露,传输数据被篡改,甚至通过中间人劫持将原有信息替换成恶意链接或恶意代码程序,以达到远程控制等攻击意图。建议:
对SSL证书进行强校验,包括签名CA是否合法、证书是否是自签名、主机域名是否匹配、证书是否过期等。

参考案例:
www.wooyun.org/bugs/wooyun-2014-079358

参考资料:
http://drops.wooyun.org/tips/3296
http://wolfeye.baidu.com/blog/webview-ignore-ssl-error/
https://jaq.alibaba.com/blog.htm?id=60

中危

检测到3处中间人攻击漏洞。

位置: classes.dex
m.framework.network.NetworkHelper;->getSSLHttpClient()Lorg.apache.http.client.HttpClient;
cn.cloudwalk.libproject.net.ApacheHttpUtil;->getNewHttpClient()Lorg.apache.http.client.HttpClient;
com.sccba.keyboard.network.KBHttpClient;->getHttpsClient()Lorg.apache.http.impl.client.DefaultHttpClient;

setHostnameVerifier方法设置ALLOW_ALL_HOSTNAME_VERIFIER,直接接受任意域名,可能造成中间人攻击漏洞。建议:
对SSL证书进行强校验,包括签名CA是否合法、证书是否是自签名、主机域名是否匹配、证书是否过期等。

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-042710
http://www.wooyun.org/bugs/wooyun-2010-052339
http://www.wooyun.org/bugs/wooyun-2016-0190773

参考资料:
http://wolfeye.baidu.com/blog/webview-ignore-ssl-error/
https://jaq.alibaba.com/blog.htm?id=60

中危

该app需要移除大部分日志打印代码。
经扫描该包仍存在大量打日志代码,共发现210处打日志代码.(此处扫描的日志打印代码,是指调用android.util.Log.* 打印的.)
详情如下:

位置: classes.dex
com.xindun.utils.SmsUtil$1;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.sdk.j;->a(Ljava/lang/Object; Ljava/lang/Integer; Ljava/lang/Object; Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.qrcode.camera.CameraManager;->getFramingRect()Landroid/graphics/Rect;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.stat.common.StatLogger;->error(Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.mob.tools.utils.ResHelper;->getResId(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.export.external.libwebp;->decodeInto([B [I [I)[I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.CollectDataManager;->getAppkey(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
cn.tongdun.android.shell.utils.LogUtil;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.f;->onDestroy()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
cn.tongdun.android.shell.utils.LogUtil;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.CollectDataManager;->getChannel(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.sdk.j;->a(Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.sdk.j;->a(Ljava/lang/Object; Landroid/content/Context; Ljava/lang/String; Z)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.utils.Utils;->convertDpToPixel(F)F==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
cn.tongdun.android.shell.utils.LogUtil;->i(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.PieRadarChartBase;->calculateOffsets()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.sdk.j;->a(Ljava/lang/Object; Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.passport.sdk.utils.FrameCapture;->startParseXml(Ljava/lang/String;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.dbank.network.ZXHttpClient;->downPdf(I Ljava/lang/String; Ljava/util/List; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.jingdong.crash.inner.ae;->b()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.Log$1;->i(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.LocationInfo;->getLastLocation()Landroid/location/Location;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.utils.LogFileUtils;->encryptKey(Ljava/lang/String; Ljava/lang/String;)[B==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.CollectDataManager;->getExceptionLog(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APImageObject;->checkArgs()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APApiImlV1;->getZFBSupportAPI()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APApiImlV1;->registerApp(Ljava/lang/String;)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.sdk.TbsReaderView;->preOpen(Ljava/lang/String; Z)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xindun.utils.ToastUtils;->showShortToast(Landroid/content/Context; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.smartvision_bankCard.MainActivity;->findView()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.utils.FileUtils;->saveToSdCard(Ljava/util/List; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xindun.utils.SampleHttpClient$NullHostNameVerifier;->verify(Ljava/lang/String; Ljavax/net/ssl/SSLSession;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
cn.sharesdk.framework.b.d;->b(Lcn/sharesdk/framework/b/b/c;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.dbank.view.adapter.AbstractWheelTextAdapter;->getTextView(Landroid/view/View; I)Landroid/widget/TextView;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
kernal.idcard.android.AuthService$authBinder;->getIDCardAuth(Lkernal/idcard/android/AuthParameterMessage;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.sdk.j;->a(Ljava/lang/Object; I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.util.FileUtil;->createModelFile(Ljava/lang/String; Ljava/lang/String; Landroid/content/res/AssetManager;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APWebPageObject;->checkArgs()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.export.external.libwebp;->loadWepLibraryIfNeed(Landroid/content/Context; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.SendMessageToZFB$Req;->checkArgs()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.passportreader.sdk.CameraActivity;->closeCamera()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.b;->do(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.kepler.jd.login.KeplerApiManager;->openWebViewPage(Ljava/lang/String; Ljava/lang/String; Z Ljava/lang/String; Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.stat.common.StatLogger;->debug(Ljava/lang/Object;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xindun.utils.SampleHttpClient;->postServerData(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.iss.imageloader.core.download.BaseImageDownloader$MyTrustManager;->checkServerTrusted([Ljava/security/cert/X509Certificate; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.BarLineChartBase;->calculateOffsets()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iss.db.TableUtil;->getCreateStatments(Ljava/lang/Class;)Ljava/util/List;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.qrcode.camera.CameraConfigurationManager;->setZoom(Landroid/hardware/Camera$Parameters;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.HorizontalBarChart;->calculateOffsets()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.BarChart;->getHighlight(D D)Lcom/github/mikephil/charting/utils/Highlight;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.bankcard.camera.BankCardEditTextWatcher;->afterTextChanged(Landroid/text/Editable;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.f;->onCreate()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.CollectDataManager;->getDebugInfosToErrorMessage(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.qrcode.camera.CameraConfigurationManager;->getCameraResolution(Landroid/hardware/Camera$Parameters; Landroid/graphics/Point;)Landroid/graphics/Point;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.util.LogUtils;->LOGD(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.components.AxisBase;->addLimitLine(Lcom/github/mikephil/charting/components/LimitLine;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.bankcard.lisence.ProcedureAuthOperate;->getParameterAuthFileType(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xindun.utils.SmsUtil;->getLatestTrusfortEncryptedMessage(Landroid/content/Context;)Ljava/util/Map;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.lisence.ProcedureAuthOperate;->getWintoneAuth(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.service.PushServiceMode;->onDestroy()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.utils.TbsLogClient;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.HorizontalBarChart;->getHighlightByTouchPoint(F F)Lcom/github/mikephil/charting/utils/Highlight;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.service.PushServiceMode;->startSynchNote()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.dbank.view.BadgeView;->setTargetView(Landroid/view/View;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.dbank.BaseActivity;->onResume()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.keyboard.network.KBMySSLSocketFactory$MyX509TrustManager;->checkServerTrusted([Ljava/security/cert/X509Certificate; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.b;->if(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
cn.tongdun.android.shell.utils.LogUtil;->err(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kepler.sdk.b$a;->a(Ljava/lang/String; [Ljava/lang/String;)[Landroid/content/pm/Signature;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.CollectDataManager;->getDeviceInfo(Landroid/content/Context;)Lorg/json/JSONObject;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.ErrorLogSave;->cacheErrorLogToSDFile(Landroid/content/Context; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.utils.LogFileUtils;->encrypt(Ljava/lang/String; Ljava/lang/String;)[B==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xindun.utils.SmsUtil$2;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.kepler.sdk.d;->(Landroid/content/Context; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iss.db.IssContentProvider;->onCreate()Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.qrcode.decoding.DecodeHandler;->decode([B I I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.BarLineChartBase;->notifyDataSetChanged()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.utils.Utils;->convertPixelsToDp(F)F==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.Chart;->init()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.kepler.sdk.r$a;->getView(I Landroid/view/View; Landroid/view/ViewGroup;)Landroid/view/View;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.sdk.SBAAndroidJavaScript$1$1;->callback(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.utils.FileUtils;->loadEntriesFromFile(Ljava/lang/String;)Ljava/util/List;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.stat.common.StatLogger;->info(Ljava/lang/Object;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.BarLineChartBase;->prepareValuePxMatrix()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APTaobaoGoodsObject;->checkArgs()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.Log$1;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APApiImlV1;->registerApp(Ljava/lang/String;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APApiImlV1;->openZFBApp()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.util.FileUtil;->readRawFileToString(Ljava/lang/String; Landroid/content/res/AssetManager;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.Log$1;->w(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.sdk.TbsVideo;->openVideo(Landroid/content/Context; Ljava/lang/String; Landroid/os/Bundle;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.stat.common.StatLogger;->verbose(Ljava/lang/Object;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APApiImlV1;->handleIntent(Landroid/content/Intent; Lcom/alipay/share/sdk/openapi/IAPAPIEventHandler;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
kernal.idcard.android.HolderRecogService;->copyBigFile()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.smartvision_bankCard.ShowResult;->setBankInfo()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.b;->if(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.export.external.libwebp;->decodeBase_16bit([B Landroid/graphics/Bitmap$Config;)[I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APApiImlV1;->checkSumConsistent([B [B)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.jingdong.crash.inner.v;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iss.db.IssDBFactory$IssDBOpenHelper;->onUpgrade(Landroid/database/sqlite/SQLiteDatabase; I I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.CollectDataManager;->getDeviceInfo(Landroid/content/Context;)Lorg/json/JSONObject;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.util.LogUtils;->LOGE(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APTextObject;->checkArgs()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.view.photoview.PhotoViewAttacher;->onDrag(F F)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.sdk.j;->a(Ljava/lang/Object; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.ErrorLogSave;->cacheErrorLogToSDFile(Landroid/content/Context; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APMediaMessage;->checkArgs()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APMediaMessage$Builder;->fromBundle(Landroid/os/Bundle;)Lcom/alipay/share/sdk/openapi/APMediaMessage;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.dbank.util.FileUtils;->copyAssetFile(Ljava/lang/String; Ljava/lang/String; Landroid/content/Context;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.bankcard.utils.CameraSetting;->closeCamera(Landroid/hardware/Camera;)Landroid/hardware/Camera;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.channel.APMessageAct;->send(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
cn.tongdun.android.shell.utils.LogUtil;->info(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.jingdong.crash.inner.v;->b(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.BarLineChartBase;->onDraw(Landroid/graphics/Canvas;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.kepler.sdk.y;->b(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.qrcode.camera.PreviewCallback;->onPreviewFrame([B Landroid/hardware/Camera;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.channel.APMessageAct;->send(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.utils.FileUtils;->loadBarEntriesFromAssets(Landroid/content/res/AssetManager; Ljava/lang/String;)Ljava/util/List;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.util.Util;->getFilePath(Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kepler.jd.login.KeplerApiManager;->a(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String; Z Ljava/lang/String; Z Lcom/kepler/jd/Listener/OpenAppAction; I)Lcom/kepler/jd/sdk/bean/KelperTask;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.export.external.libwebp;->decodeBase([B [I [I)[I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.db.IssDBFactory$IssDBOpenHelper;->onUpgrade(Landroid/database/sqlite/SQLiteDatabase; I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.qrcode.camera.CameraConfigurationManager;->findBestPreviewSizeValue(Ljava/lang/CharSequence; Landroid/graphics/Point;)Landroid/graphics/Point;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
cn.tongdun.android.shell.utils.LogUtil;->e(Ljava/lang/String; Ljava/lang/Throwable;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.bankcard.AuthService$authBinder;->getIDCardAuth(Lcom/kernal/bankcard/AuthParameterMessage;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.util.FileUtil;->readRawFileToByteArray(Ljava/lang/String; Landroid/content/res/AssetManager;)[B==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kepler.sdk.a;->a(Ljava/lang/Throwable; Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.lisence.ProcedureAuthOperate;->getParameterAuthFileType(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.view.RoundProgressBar;->onDraw(Landroid/graphics/Canvas;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.jingdong.crash.inner.x;->a(Lcom/jingdong/crash/inner/y; Ljava/util/HashMap; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.data.ChartData;->addEntry(Lcom/github/mikephil/charting/data/Entry; I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.camera.CameraConfigurationManager;->setCameraParametersForPreviewCallBack(Landroid/hardware/Camera; I I I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.data.BarEntry;->getClosestIndexAbove(F)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iss.db.IssDBFactory$IssDBOpenHelper;->onCreate(Landroid/database/sqlite/SQLiteDatabase;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xindun.sdk.ApiV1$1;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.util.LogUtils;->LOGV(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.iss.view.photoview.PhotoViewAttacher;->onScale(F F F)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.dbank.network.ZXHttpClient;->downCustomTestZips(I Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.LocationInfo;->updateWithNewLocation(Landroid/location/Location; Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iss.view.photoview.PhotoViewAttacher$FlingRunnable;->fling(I I I I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.BarLineChartBase;->getHighlightByTouchPoint(F F)Lcom/github/mikephil/charting/utils/Highlight;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.o$1;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.util.LogUtils;->LOGI(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.passportreader.sdk.CameraActivity;->surfaceDestroyed(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.export.external.libwebp;->loadWepLibraryIfNeed(Landroid/content/Context;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.qrcode.camera.FlashlightManager;->()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.LocationClient$1;->onServiceConnected(Landroid/content/ComponentName; Landroid/os/IBinder;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.sdk.MyHttpEventCallBack;->onHttpSuccess(I Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.Chart;->setData(Lcom/github/mikephil/charting/data/ChartData;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.Log$1;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APApiImlV1;->sendReq(Lcom/alipay/share/sdk/openapi/BaseReq;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kepler.sdk.y;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.utils.MResource;->getIdByName(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.utils.Utils;->init(Landroid/content/Context;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.Chart;->setHardwareAccelerationEnabled(Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.view.wheel.AbstractWheelTextAdapter;->getTextView(Landroid/view/View; I)Landroid/widget/TextView;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APApiImlV1;->checkSumConsistent(Ljava/lang/String;)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iss.view.photoview.PhotoViewAttacher$FlingRunnable;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.ErrorHandler;->uncaughtException(Ljava/lang/Thread; Ljava/lang/Throwable;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.qrcode.camera.CameraConfigurationManager;->setDesiredCameraParameters(Landroid/hardware/Camera;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.util.FileUtil;->createModelFileAll(Ljava/lang/String; Landroid/content/res/AssetManager;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kepler.sdk.e;->a(Landroid/view/View; Ljava/lang/String; Landroid/content/Context; Landroid/util/AttributeSet;)Landroid/view/View;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.Log$1;->print(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.channel.APMessage;->send(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APApiImlV1;->unregisterApp()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iss.service.PushServiceMode;->onCreate()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kepler.jd.sdk.JdView;->init(Landroid/content/Context; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.Chart;->highlightTouch(Lcom/github/mikephil/charting/utils/Highlight;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.sdk.TbsReaderView;->a()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.bankcard.lisence.ProcedureAuthOperate;->getWintoneAuth(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.export.external.libwebp;->incDecode([B [I [I)[I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
kernal.idcard.android.HolderRecogService$recogBinder;->IDCardLoadNoLineationImage(Lkernal/idcard/android/RecogParameterMessage;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.util.FileUtil;->copyRawFileToSdcard(Ljava/lang/String; Landroid/content/res/AssetManager; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.sdk.j;->a(Ljava/lang/Object; Landroid/content/Context; Landroid/os/Bundle; Landroid/widget/FrameLayout;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.Chart;->setData(Lcom/github/mikephil/charting/data/ChartData;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xindun.utils.SmsUtil;->getSmsInPhone(Landroid/content/Context;)Ljava/util/List;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APApiImlV1;->checkSumConsistent([Landroid/content/pm/Signature;)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iss.utils.LogUtil;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.channel.APMessage$Receiver;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.sdk.SBAAndroidJavaScript$1$2;->callback(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.sdk.TbsReaderView;->openFile(Landroid/os/Bundle;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.view.photoview.PhotoViewAttacher;->onFling(F F F F)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.stat.common.StatLogger;->error(Ljava/lang/Exception;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.sdk.SBAWebFragment$WebViewClientWrapper;->onReceivedSslError(Landroid/webkit/WebView; Landroid/webkit/SslErrorHandler; Landroid/net/http/SslError;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.db.IssDBFactory$IssDBOpenHelper;->onCreate(Landroid/database/sqlite/SQLiteDatabase;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xindun.utils.SmsUtil;->getLatestTrusfortEncryptedMessage(Landroid/content/Context;)Ljava/util/Map;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.Log$1;->v(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.Chart;->onSizeChanged(I I I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iss.utils.LogUtil;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.jingdong.crash.inner.ae;->a()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.qrcode.camera.AutoFocusCallback;->onAutoFocus(Z Landroid/hardware/Camera;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.BarChart;->getHighlightByTouchPoint(F F)Lcom/github/mikephil/charting/utils/Highlight;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.kernal.bankcard.BankCardRecogUtils;->intiCopyrightLogo(Ljava/lang/String; Ljava/lang/String;)Landroid/widget/ImageView;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.LocationInfo;->getLastLocation()Landroid/location/Location;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
cn.cloudwalk.libproject.util.LogUtils;->LOGW(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
kernal.idcard.android.HolderRecogService$recogBinder;->IDCardLoadAndRecogMRZ(Lkernal/idcard/android/RecogParameterMessage;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.utils.u;->a(Ljava/lang/Object; Ljava/lang/String; [Ljava/lang/Class; [Ljava/lang/Object;)Ljava/lang/Object;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sccba.qrcode.decoding.CaptureActivityHandler;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
kernal.idcard.android.IDCardBean;->ReturnResultToActivity(Lkernal/idcard/android/ResultMessage;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.listener.BarLineChartTouchListener;->onDoubleTap(Landroid/view/MotionEvent;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iss.view.photoview.PhotoViewAttacher$FlingRunnable;->cancelFling()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.stat.common.StatLogger;->warn(Ljava/lang/Object;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.utils.FileUtils;->loadEntriesFromAssets(Landroid/content/res/AssetManager; Ljava/lang/String;)Ljava/util/List;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APApiImlV1;->unregisterApp()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.github.mikephil.charting.charts.BarLineChartBase;->calcModulus()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.alipay.share.sdk.openapi.APMediaMessage;->setThumbImage(Landroid/graphics/Bitmap;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.smtt.sdk.TbsReaderView;->downloadPlugin(Ljava/lang/String;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iss.loghandler.ErrorLogSave;->getExceptionLog(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.jingdong.jdma.entrance.MaCommonUtil;->MaCommonUtilLog(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

中危

检测到3个WebView远程执行漏洞。

位置: classes.dex
com.tencent.smtt.sdk.WebView;->addJavascriptInterface(Ljava.lang.Object; Ljava.lang.String;)V
com.kepler.sdk.q;->a(Ljava.lang.Object; Ljava.lang.String;)V
com.tencent.smtt.sdk.WebView;->addJavascriptInterface(Ljava.lang.Object; Ljava.lang.String;)V

Android API < 17之前版本存在远程代码执行安全漏洞,该漏洞源于程序没有正确限制使用addJavaScriptInterface方法,攻击者可以通过Java反射利用该漏洞执行任意Java对象的方法,导致远程代码执行安全漏洞。
(1)API等于高于17的Android系统。出于安全考虑,为了防止Java层的函数被随意调用,Google在4.2版本之后,规定允许被调用的函数必须以@JavascriptInterface进行注解。
(2)API等于高于17的Android系统。建议不要使用addJavascriptInterface接口,以免带来不必要的安全隐患,如果一定要使用该接口,建议使用证书校验。
(3)使用removeJavascriptInterface移除Android系统内部的默认内置接口:searchBoxJavaBridge_、accessibility、accessibilityTraversal。

参考案例:
www.wooyun.org/bugs/wooyun-2015-0140708
www.wooyun.org/bugs/wooyun-2016-0188252
http://drops.wooyun.org/papers/548

参考资料:
http://jaq.alibaba.com/blog.htm?id=48
http://blog.nsfocus.net/android-webview-remote-code-execution-vulnerability-analysis
https://developer.android.com/reference/android/webkit/WebView.html

中危

检测到559条敏感明文信息,建议移除。

位置: classes.dex
'10.0.0.172' used in: Lcom/baidu/location/o;->T()I
'10.0.0.172' used in: Lcom/baidu/location/o;->()V
'10.0.0.172' used in: Lcom/tencent/stat/common/k;->a(Landroid/content/Context;)Lorg/apache/http/HttpHost;
'10.0.0.172' used in: Lcom/baidu/location/o;->if(Landroid/content/Context; Landroid/net/NetworkInfo;)I
'10.0.0.200' used in: Lcom/baidu/location/o;->T()I
'10.0.0.200' used in: Lcom/tencent/stat/common/k;->a(Landroid/content/Context;)Lorg/apache/http/HttpHost;
'10.0.0.200' used in: Lcom/baidu/location/o;->if(Landroid/content/Context; Landroid/net/NetworkInfo;)I
'data:*' used in: Lorg/apache/cordova/ConfigXmlParser;->parse(Landroid/content/res/XmlResourceParser;)V
'feedback-crypto@bouncycastle.org' used in: Lorg/bouncycastle/x509/examples/AttrCertExample;->createClientCert(Ljava/security/PublicKey; Ljava/security/PrivateKey; Ljava/security/PublicKey;)Ljava/security/cert/X509Certificate;
'feedback-crypto@bouncycastle.org' used in: Lorg/bouncycastle/jce/examples/PKCS12Example;->createIntermediateCert(Ljava/security/PublicKey; Ljava/security/PrivateKey; Ljava/security/cert/X509Certificate;)Ljava/security/cert/Certificate;
'feedback-crypto@bouncycastle.org' used in: Lorg/bouncycastle/jce/examples/PKCS12Example;->createCert(Ljava/security/PublicKey; Ljava/security/PrivateKey; Ljava/security/PublicKey;)Ljava/security/cert/Certificate;
'file:///' used in: Lorg/apache/cordova/file/FileUtils;->remapUri(Landroid/net/Uri;)Landroid/net/Uri;
'file:///' used in: Lorg/apache/cordova/file/FileUtils;->resolveLocalFileSystemURI(Ljava/lang/String;)Lorg/json/JSONObject;
'file:///*' used in: Lorg/apache/cordova/ConfigXmlParser;->parse(Landroid/content/res/XmlResourceParser;)V
'file:///android_asset/' used in: Lorg/apache/cordova/file/FileUtils;->requestAllPaths()Lorg/json/JSONObject;
'file:///android_asset/' used in: Lorg/apache/cordova/file/FileHelper;->getInputStreamFromUriString(Ljava/lang/String; Lorg/apache/cordova/CordovaInterface;)Ljava/io/InputStream;
'file:///android_asset/' used in: Lorg/apache/cordova/FileHelper;->getInputStreamFromUriString(Ljava/lang/String; Lorg/apache/cordova/CordovaInterface;)Ljava/io/InputStream;
'file:///android_asset/web' used in: Lcom/sccba/dbank/network/BaseUrl;->()V
'file:///android_asset/web/' used in: Lcom/sccba/dbank/DBankCordovaActivity;->loadH5Url()V
'file:///android_asset/web/' used in: Lcom/sccba/dbank/DBankCordovaDialog;->loadH5Url()V
'file:///android_asset/www/' used in: Lorg/apache/cordova/ConfigXmlParser;->setStartUrl(Ljava/lang/String;)V
'file:///android_asset/www/index.html' used in: Lorg/apache/cordova/Config;->getStartUrl()Ljava/lang/String;
'file:///android_asset/www/index.html' used in: Lorg/apache/cordova/ConfigXmlParser;->()V
'ftp://anonymous:anonymous@' used in: Lcom/google/zxing/client/result/optional/NDEFURIResultParser;->()V
'ftp://ftp.' used in: Lcom/google/zxing/client/result/optional/NDEFURIResultParser;->()V
'http://*/*' used in: Lorg/apache/cordova/ConfigXmlParser;->parse(Landroid/content/res/XmlResourceParser;)V
'http://123.56.102.63:80/emailServer/servlet/UploadFileTxt?fileName=' used in: Lcom/kernal/passport/sdk/utils/WriteToPCTask;->()V
'http://172.18.251.33:9081/app/base/homepage.do?gotolink=goHomePage&authData=' used in: Lcom/sccba/dbank/fragment/BaseAccountFragment$1;->handleMessage(Landroid/os/Message;)V
'http://192.168.0.100:8080/trusfort_jar_test' used in: Lcom/xindun/sdk/ApiConfig;->()V
'http://36.0.6.190:19091/directbank' used in: Lcom/sccba/dbank/util/CommonUtils;->getUrl(Landroid/content/Context;)Ljava/lang/String;
'http://36.0.6.190:19091/directbank' used in: Lcom/sccba/dbank/DBankCordovaDialog;->getUrl()Ljava/lang/String;
'http://36.0.6.196:8091' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_IT()V
'http://36.0.6.196:8091/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_IT()V
'http://analy.qq.com/cgi-bin/mapp_apptrace' used in: Lcom/tencent/open/yyb/a$b;->a([Landroid/os/Bundle;)Ljava/lang/Void;
'http://api.exc.mob.com:80' used in: Lcom/mob/commons/logcollector/c;->()V
'http://api.share.mob.com:80' used in: Lcn/sharesdk/framework/b/c;->g()V
'http://appact.qzone.qq.com/appstore_activity_task_pcpush_sdk' used in: Lcom/tencent/open/TaskGuide;->e(I)V
'http://appact.qzone.qq.com/appstore_activity_task_pcpush_sdk' used in: Lcom/tencent/open/TaskGuide;->showTaskGuideWindow(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://appsupport.qq.com/cgi-bin/appstage/mstats_batch_report' used in: Lcom/tencent/open/b/g$5;->run()V
'http://appsupport.qq.com/cgi-bin/qzapps/mapp_addapp.cgi' used in: Lcom/tencent/connect/auth/AuthAgent$FeedConfirmListener;->a()V
'http://appsupport.qq.com/cgi-bin/qzapps/mapp_addapp.cgi' used in: Lcom/tencent/connect/auth/AuthAgent$FeedConfirmListener;->(Lcom/tencent/connect/auth/AuthAgent; Lcom/tencent/tauth/IUiListener;)V
'http://c-nfa.jd.com' used in: Lcom/kepler/jd/sdk/JdView$InJavaScriptLocalObj$1;->run()V
'http://c.data.mob.com/v2/cdata' used in: Lcom/mob/commons/b;->d()Ljava/lang/String;
'http://c.isdspeed.qq.com/code.cgi' used in: Lcom/tencent/open/b/d;->a(I Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/Long; I I Ljava/lang/String;)V
'http://ccc.x.jd.com' used in: Lcom/kepler/jd/sdk/JdView$InJavaScriptLocalObj$1;->run()V
'http://cfg.imtt.qq.com/tbs?v=2&mk=' used in: Lcom/tencent/smtt/utils/w;->(Landroid/content/Context;)V
'http://cgi.connect.qq.com/qqconnectopen/openapi/policy_conf' used in: Lcom/tencent/open/utils/OpenConfig$1;->run()V
'http://cgi.qplus.com/report/report' used in: Lcom/tencent/open/utils/Util$1;->run()V
'http://cipa.jp/exif/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://debugtbs.qq.com' used in: Lcom/tencent/smtt/sdk/WebView;->showDebugView(Ljava/lang/String;)Z
'http://debugx5.qq.com' used in: Lcom/tencent/smtt/sdk/WebView;->showDebugView(Ljava/lang/String;)Z
'http://devs.data.mob.com:80/dinfo' used in: Lcom/mob/commons/authorize/a;->c(Lcom/mob/commons/MobProduct;)Ljava/util/HashMap;
'http://devs.data.mob.com:80/dinfo' used in: Lcom/mob/commons/authorize/a;->a(Lcom/mob/commons/MobProduct; Ljava/util/HashMap; Z)Ljava/lang/String;
'http://devs.data.mob.com:80/dsign' used in: Lcom/mob/commons/authorize/a;->a(Lcom/mob/commons/MobProduct; Ljava/util/HashMap;)V
'http://du.jd.com/m/log/v1' used in: Lcom/jingdong/jdma/entrance/MaCommonUtil;->()V
'http://du.jd.com/m/sys/v1' used in: Lcom/jingdong/jdma/entrance/MaCommonUtil;->()V
'http://fusion.qq.com/cgi-bin/prize_sharing/exchange_prize.cgi' used in: Lcom/tencent/open/GameAppOperation$3;->run()V
'http://fusion.qq.com/cgi-bin/prize_sharing/get_activity_state.cgi' used in: Lcom/tencent/open/GameAppOperation$4;->run()V
'http://fusion.qq.com/cgi-bin/prize_sharing/make_share_url.cgi' used in: Lcom/tencent/open/GameAppOperation$1;->run()V
'http://fusion.qq.com/cgi-bin/prize_sharing/query_unexchange_prize.cgi' used in: Lcom/tencent/open/GameAppOperation$2;->run()V
'http://fusion.qq.com/cgi-bin/qzapps/mapp_lbs_delete.cgi' used in: Lcom/tencent/open/LocationApi;->deleteLocation(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://fusion.qq.com/cgi-bin/qzapps/mapp_lbs_getnear.cgi' used in: Lcom/tencent/open/LocationApi;->a(Landroid/location/Location;)V
'http://fusion.qq.com/cgi-bin/qzapps/unified_jump?appid=%1$s&from=%2$s&isOpenAppID=1' used in: Lcom/tencent/connect/share/QzoneShare;->shareToQzone(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://fusion.qq.com/cgi-bin/qzapps/unified_jump?appid=%1$s&from=%2$s&isOpenAppID=1' used in: Lcom/tencent/connect/share/QQShare;->shareToQQ(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://ip.taobao.com/service/getIpInfo.php?ip=' used in: Lcom/sccba/dbank/network/ZXHttpClient$8;->run()V
'http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://iptc.org/std/Iptc4xmpExt/2008-02-29/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://javax.xml.XMLConstants/feature/secure-processing' used in: Lcom/adobe/xmp/impl/XMPMetaParser;->createDocumentBuilderFactory()Ljavax/xml/parsers/DocumentBuilderFactory;
'http://kepler.jd.com/category_q/jump?' used in: Lcom/kepler/sdk/am;->()V
'http://kepler.jd.com/category_q/n?areaid=' used in: Lcom/kepler/sdk/am;->()V
'http://kepler.jd.com/freelogin/view' used in: Lcom/kepler/sdk/am;->()V
'http://kepler.jd.com/oauth/code.do' used in: Lcom/kepler/sdk/am;->()V
'http://kploauth.jd.com/oauth/token?' used in: Lcom/kepler/sdk/am;->()V
'http://kploauth.jd.com/oauth/wuxian/authorize?client_id=' used in: Lcom/kepler/sdk/n;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;
'http://l.mob.com/url/ShareSdkMapping.do' used in: Lcn/sharesdk/framework/b/c;->m()Ljava/lang/String;
'http://lbs.map.qq.com/loc?c=1' used in: Lcom/tencent/map/b/f$b;->(Lcom/tencent/map/b/f; Ljava/lang/String;)V
'http://loc.map.baidu.com/fence' used in: Lcom/baidu/location/aq$a;->V()V
'http://loc.map.baidu.com/fence' used in: Lcom/baidu/location/al$b;->V()V
'http://loc.map.baidu.com/sdk.php' used in: Lcom/baidu/location/b;->()V
'http://loc.map.baidu.com/sdk_ep.php' used in: Lcom/baidu/location/b;->()V
'http://loc.map.baidu.com/user_err.php' used in: Lcom/baidu/location/b;->()V
'http://log.tbs.qq.com/ajax?c=dl&k=' used in: Lcom/tencent/smtt/utils/w;->(Landroid/content/Context;)V
'http://log.tbs.qq.com/ajax?c=pu&tk=' used in: Lcom/tencent/smtt/utils/w;->(Landroid/content/Context;)V
'http://log.tbs.qq.com/ajax?c=pu&v=2&k=' used in: Lcom/tencent/smtt/utils/w;->(Landroid/content/Context;)V
'http://log.tbs.qq.com/ajax?c=ucfu&k=' used in: Lcom/tencent/smtt/utils/w;->(Landroid/content/Context;)V
'http://log.tbs.qq.com/ajax?c=ul&v=2&k=' used in: Lcom/tencent/smtt/utils/w;->(Landroid/content/Context;)V
'http://ls.map.soso.com/deflect?c=1' used in: Lcom/tencent/map/b/b$b;->run()V
'http://ls.map.soso.com/monitor/monitor.html' used in: Lcom/tencent/map/b/q;->a(Ljava/lang/String; Z)Ljava/net/HttpURLConnection;
'http://lstest.map.soso.com/loc?c=1' used in: Lcom/tencent/map/b/f$b;->(Lcom/tencent/map/b/f; Ljava/lang/String;)V
'http://m.data.mob.com/v3/cconf' used in: Lcom/mob/commons/a;->y()Ljava/lang/String;
'http://m.wsq.qq.com/direct?' used in: Lcom/tencent/open/yyb/AppbarAgent;->c(Ljava/lang/String;)Ljava/lang/String;
'http://mapi.m.jd.com/js/ksdk/getUnpl.js' used in: Lcom/kepler/sdk/am;->()V
'http://mapi.m.jd.com/js/ksdk/jdkeplerjsbridge.js' used in: Lcom/kepler/sdk/am;->()V
'http://mapi.m.jd.com/js/ksdk/m.keepalive.js' used in: Lcom/kepler/sdk/am;->()V
'http://mapi.m.jd.com/ksdk/mid-page.html' used in: Lcom/kepler/sdk/am;->()V
'http://mdc.html5.qq.com/mh?channel_id=50079&u=' used in: Lcom/tencent/smtt/sdk/a/d;->a(Landroid/content/Context;)Lcom/tencent/smtt/sdk/a/d$a;
'http://mqqad.html5.qq.com/adjs' used in: Lcom/tencent/smtt/utils/w;->(Landroid/content/Context;)V
'http://ns.adobe.com/DICOM/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/StockPhoto/1.0/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/StockPhoto/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/TransformXMP/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/album/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/asf/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/bwf/bext/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/camera-raw-settings/1.0/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/camera-raw-settings/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/creatorAtom/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/exif/1.0/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/exif/1.0/' used in: Lcom/adobe/xmp/impl/XMPNormalizer;->touchUpDataModel(Lcom/adobe/xmp/impl/XMPMetaImpl;)V
'http://ns.adobe.com/exif/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/exif/1.0/' used in: Lcom/drew/metadata/xmp/XmpDirectory;->()V
'http://ns.adobe.com/exif/1.0/aux/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/exif/1.0/aux/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/exif/1.0/aux/' used in: Lcom/drew/metadata/xmp/XmpDirectory;->()V
'http://ns.adobe.com/iX/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/jp2k/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/jpeg/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/pdf/1.3/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/pdf/1.3/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardAliases()V
'http://ns.adobe.com/pdf/1.3/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/pdfx/1.3/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/photoshop/1.0/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/photoshop/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardAliases()V
'http://ns.adobe.com/photoshop/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/png/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardAliases()V
'http://ns.adobe.com/png/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/riff/info/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/swf/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/tiff/1.0/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/tiff/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardAliases()V
'http://ns.adobe.com/tiff/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/tiff/1.0/' used in: Lcom/drew/metadata/xmp/XmpDirectory;->()V
'http://ns.adobe.com/xap/1.0/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/xap/1.0/' used in: Lcom/drew/metadata/xmp/XmpDirectory;->()V
'http://ns.adobe.com/xap/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardAliases()V
'http://ns.adobe.com/xap/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/' used in: Lcom/adobe/xmp/impl/XMPSerializerRDF;->checkOptionsConsistence()V
'http://ns.adobe.com/xap/1.0/\x00' used in: Lcom/drew/metadata/xmp/XmpReader;->readJpegSegments(Ljava/lang/Iterable; Lcom/drew/metadata/Metadata; Lcom/drew/imaging/jpeg/JpegSegmentType;)V
'http://ns.adobe.com/xap/1.0/bj/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/g/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/xap/1.0/g/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/g/img/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/xap/1.0/g/img/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/mm/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/xap/1.0/mm/' used in: Lcom/adobe/xmp/impl/XMPNormalizer;->tweakOldXMP(Lcom/adobe/xmp/impl/XMPNode;)V
'http://ns.adobe.com/xap/1.0/mm/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/rights/' used in: Lcom/adobe/xmp/impl/XMPNormalizer;->touchUpDataModel(Lcom/adobe/xmp/impl/XMPMetaImpl;)V
'http://ns.adobe.com/xap/1.0/rights/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardAliases()V
'http://ns.adobe.com/xap/1.0/rights/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/sType/Dimensions#' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/sType/Font#' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/xap/1.0/sType/Font#' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/sType/Job#' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/sType/ManifestItem#' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/sType/ResourceEvent#' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/sType/ResourceRef#' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/sType/Version#' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/t/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/xap/1.0/t/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xap/1.0/t/pg/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://ns.adobe.com/xap/1.0/t/pg/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xmp/1.0/DynamicMedia/' used in: Lcom/adobe/xmp/impl/XMPNormalizer;->touchUpDataModel(Lcom/adobe/xmp/impl/XMPMetaImpl;)V
'http://ns.adobe.com/xmp/1.0/DynamicMedia/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xmp/1.0/Script/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xmp/Identifier/qual/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xmp/note/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xmp/transient/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.adobe.com/xmp/wav/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://ns.useplus.org/ldf/xmp/1.0/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://open.t.qq.com?' used in: Lcn/sharesdk/tencent/weibo/f;->b(Ljava/lang/String;)Landroid/os/Bundle;
'http://openmobile.qq.com/api/check?' used in: Lcn/sharesdk/tencent/qq/b;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Lcn/sharesdk/framework/PlatformActionListener;)V
'http://openmobile.qq.com/oauth2.0/m_authorize?' used in: Lcom/tencent/connect/auth/AuthAgent;->a(Z Lcom/tencent/tauth/IUiListener;)I
'http://openmobile.qq.com/oauth2.0/m_jump_by_version?' used in: Lcom/tencent/connect/common/BaseApi;->getCommonDownloadQQUrl(Ljava/lang/String;)Ljava/lang/String;
'http://orbit.jd.com/upload' used in: Lcom/kepler/jd/login/KeplerApiManager$1;->run()V
'http://pingma.qq.com:80/mstat/report' used in: Lcom/tencent/stat/StatConfig;->()V
'http://plogin.m.jd.com/cgi-bin/m/qblogin?appid=100&returnurl=' used in: Lcom/kepler/sdk/n;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;
'http://plogin.m.jd.com/user/login.action?qbautologin=false' used in: Lcom/kepler/sdk/am;->()V
'http://pms.mb.qq.com/rsp204' used in: Lcom/tencent/smtt/sdk/ab;->n()Z
'http://policy.jd.com/m/log/v1' used in: Lcom/jingdong/jdma/entrance/MaCommonUtil;->()V
'http://policy.jd.com/m/sys/v1' used in: Lcom/jingdong/jdma/entrance/MaCommonUtil;->()V
'http://purl.org/dc/1.1/' used in: Lcom/adobe/xmp/impl/ParseRDF;->addChildNode(Lcom/adobe/xmp/impl/XMPMetaImpl; Lcom/adobe/xmp/impl/XMPNode; Lorg/w3c/dom/Node; Ljava/lang/String; Z)Lcom/adobe/xmp/impl/XMPNode;
'http://purl.org/dc/elements/1.1/' used in: Lcom/adobe/xmp/impl/Utils;->isInternalProperty(Ljava/lang/String; Ljava/lang/String;)Z
'http://purl.org/dc/elements/1.1/' used in: Lcom/adobe/xmp/impl/XMPNormalizer;->migrateAudioCopyright(Lcom/adobe/xmp/XMPMeta; Lcom/adobe/xmp/impl/XMPNode;)V
'http://purl.org/dc/elements/1.1/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://purl.org/dc/elements/1.1/' used in: Lcom/adobe/xmp/impl/ParseRDF;->addChildNode(Lcom/adobe/xmp/impl/XMPMetaImpl; Lcom/adobe/xmp/impl/XMPNode; Lorg/w3c/dom/Node; Ljava/lang/String; Z)Lcom/adobe/xmp/impl/XMPNode;
'http://purl.org/dc/elements/1.1/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardAliases()V
'http://purl.org/dc/elements/1.1/' used in: Lcom/adobe/xmp/impl/XMPNormalizer;->touchUpDataModel(Lcom/adobe/xmp/impl/XMPMetaImpl;)V
'http://purl.org/dc/elements/1.1/' used in: Lcom/drew/metadata/xmp/XmpDirectory;->()V
'http://pv.sohu.com/cityjson' used in: Lcom/sccba/dbank/network/ZXHttpClient$8;->run()V
'http://pv.sohu.com/cityjson' used in: Lcom/sccba/dbank/BaseActivity;->onCreate(Landroid/os/Bundle;)V
'http://qzs.qq.com' used in: Lcom/tencent/open/SocialApiIml;->writeEncryToken(Landroid/content/Context;)V
'http://qzs.qq.com/open/mobile/brag/sdk_brag.html?' used in: Lcom/tencent/open/SocialApiIml;->challenge(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://qzs.qq.com/open/mobile/brag/sdk_brag.html?' used in: Lcom/tencent/open/SocialApiIml;->brag(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://qzs.qq.com/open/mobile/invite/sdk_invite.html?' used in: Lcom/tencent/open/SocialApiIml;->invite(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://qzs.qq.com/open/mobile/jsbridge/demo.htm' used in: Lcom/tencent/open/yyb/AppbarJsBridge;->share(Landroid/net/Uri; I Ljava/lang/String; Ljava/lang/String;)V
'http://qzs.qq.com/open/mobile/login/qzsjump.html?' used in: Lcom/tencent/connect/auth/AuthDialog$LoginWebViewClient;->onReceivedError(Landroid/webkit/WebView; I Ljava/lang/String; Ljava/lang/String;)V
'http://qzs.qq.com/open/mobile/login/qzsjump.html?' used in: Lcom/tencent/connect/auth/AuthDialog;->a()Ljava/lang/String;
'http://qzs.qq.com/open/mobile/login/qzsjump.html?' used in: Lcom/tencent/connect/common/BaseApi;->handleDownloadLastestQQ(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://qzs.qq.com/open/mobile/not_support.html?' used in: Lcom/tencent/open/SocialApiIml;->a(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://qzs.qq.com/open/mobile/rate/sdk_rate.html?' used in: Lcom/tencent/open/SocialApiIml;->grade(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://qzs.qq.com/open/mobile/reactive/sdk_reactive.html?' used in: Lcom/tencent/open/SocialApiIml;->reactive(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://qzs.qq.com/open/mobile/request/sdk_request.html?' used in: Lcom/tencent/open/SocialApiIml;->a(Landroid/app/Activity; Ljava/lang/String; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://qzs.qq.com/open/mobile/sendstory/sdk_sendstory_v1.3.html?' used in: Lcom/tencent/open/SocialApiIml;->story(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/IUiListener;)V
'http://re.m.jd.com' used in: Lcom/kepler/jd/sdk/JdView$InJavaScriptLocalObj$1;->run()V
'http://soft.tbs.imtt.qq.com/17421/tbs_res_imtt_tbs_DebugPlugin_DebugPlugin.tbs' used in: Lcom/tencent/smtt/utils/i;->run()V
'http://t.qq.com/' used in: Lcn/sharesdk/tencent/weibo/TencentWeibo;->userInfor(Ljava/lang/String;)V
'http://t.qq.com/' used in: Lcn/sharesdk/tencent/weibo/TencentWeibo;->filterFriendshipInfo(I Ljava/util/HashMap;)Ljava/util/HashMap;
'http://up.sdk.mob.com' used in: Lcom/mob/commons/filesys/FileUploader;->()V
'http://up.sharesdk.cn/upload/image' used in: Lcn/sharesdk/framework/b/c;->k()Ljava/lang/String;
'http://webpresence.qq.com/getonline?Type=1&' used in: Lcom/tencent/open/wpa/WPA;->getWPAUserOnlineState(Ljava/lang/String; Lcom/tencent/tauth/IUiListener;)V
'http://webservice.wintone.com/' used in: Lcom/kernal/bankcard/lisence/CallWebService;->post(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;
'http://webservice.wintone.com/' used in: Lcom/kernal/lisence/CallWebService;->post(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;
'http://weibo.com/' used in: Lcn/sharesdk/sina/weibo/SinaWeibo;->userInfor(Ljava/lang/String;)V
'http://weibo.com/' used in: Lcn/sharesdk/sina/weibo/SinaWeibo;->filterFriendshipInfo(I Ljava/util/HashMap;)Ljava/util/HashMap;
'http://wspeed.qq.com/w.cgi' used in: Lcom/tencent/open/b/g$4;->run()V
'http://wup.imtt.qq.com:8080' used in: Lcom/tencent/smtt/utils/w;->(Landroid/content/Context;)V
'http://www.' used in: Lcom/google/zxing/client/result/optional/NDEFURIResultParser;->()V
'http://www.aiim.org/pdfa/ns/extension/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://www.aiim.org/pdfa/ns/field#' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://www.aiim.org/pdfa/ns/id/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://www.aiim.org/pdfa/ns/property#' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://www.aiim.org/pdfa/ns/schema#' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://www.aiim.org/pdfa/ns/type#' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://www.idreader.com.cn:8888/cxfServer_A/CardAuth?' used in: Lcom/kernal/bankcard/lisence/CallWebService;->post(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;
'http://www.idreader.com.cn:8888/cxfServer_A/CardAuth?' used in: Lcom/kernal/lisence/CallWebService;->post(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;
'http://www.lsbankchina.com/publish/lsbankchina/dbank/index.html' used in: Lcom/sccba/dbank/view/views/ShareDialog;->getBankUrl(Ljava/lang/String;)Ljava/lang/String;
'http://www.myapp.com/down/' used in: Lcn/sharesdk/tencent/qq/f$2;->shouldOverrideUrlLoading(Landroid/webkit/WebView; Ljava/lang/String;)Z
'http://www.myapp.com/forward/a/45592?g_f=990935' used in: Lcom/tencent/open/wpa/WPA;->startWPAConversation(Landroid/app/Activity; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)I
'http://www.npes.org/pdfx/ns/id/' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://www.w3.org/1999/02/22-rdf-syntax-ns#' used in: Lcom/adobe/xmp/impl/XMPMetaParser;->findRootNode(Lorg/w3c/dom/Node; Z [Ljava/lang/Object;)[Ljava/lang/Object;
'http://www.w3.org/1999/02/22-rdf-syntax-ns#' used in: Lcom/adobe/xmp/impl/ParseRDF;->rdf_LiteralPropertyElement(Lcom/adobe/xmp/impl/XMPMetaImpl; Lcom/adobe/xmp/impl/XMPNode; Lorg/w3c/dom/Node; Z)V
'http://www.w3.org/1999/02/22-rdf-syntax-ns#' used in: Lcom/adobe/xmp/impl/ParseRDF;->rdf_EmptyPropertyElement(Lcom/adobe/xmp/impl/XMPMetaImpl; Lcom/adobe/xmp/impl/XMPNode; Lorg/w3c/dom/Node; Z)V
'http://www.w3.org/1999/02/22-rdf-syntax-ns#' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'http://www.w3.org/1999/02/22-rdf-syntax-ns#' used in: Lcom/adobe/xmp/impl/ParseRDF;->getRDFTermKind(Lorg/w3c/dom/Node;)I
'http://www.w3.org/1999/02/22-rdf-syntax-ns#' used in: Lcom/adobe/xmp/impl/ParseRDF;->rdf_ResourcePropertyElement(Lcom/adobe/xmp/impl/XMPMetaImpl; Lcom/adobe/xmp/impl/XMPNode; Lorg/w3c/dom/Node; Z)V
'http://www.w3.org/1999/02/22-rdf-syntax-ns#' used in: Lcom/adobe/xmp/impl/ParseRDF;->rdf_PropertyElement(Lcom/adobe/xmp/impl/XMPMetaImpl; Lcom/adobe/xmp/impl/XMPNode; Lorg/w3c/dom/Node; Z)V
'http://www.w3.org/1999/02/22-rdf-syntax-ns#' used in: Lcom/adobe/xmp/impl/ParseRDF;->rdf_ParseTypeResourcePropertyElement(Lcom/adobe/xmp/impl/XMPMetaImpl; Lcom/adobe/xmp/impl/XMPNode; Lorg/w3c/dom/Node; Z)V
'http://www.w3.org/XML/1998/namespace' used in: Lcom/adobe/xmp/impl/XMPSchemaRegistryImpl;->registerStandardNamespaces()V
'https://*/*' used in: Lorg/apache/cordova/ConfigXmlParser;->parse(Landroid/content/res/XmlResourceParser;)V
'https://111.17.195.10/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://111.17.195.12/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://111.17.195.14/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://111.17.195.20/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://111.17.195.26/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://111.17.195.28/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://111.17.195.58/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://111.17.195.59/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://123.232.114.138/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://123.232.114.140/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://123.232.114.142/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://123.232.114.148/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://123.232.114.154/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://123.232.114.156/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://123.232.114.184/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://123.232.114.185/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://222.173.33.198/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://222.173.8.202/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://222.173.8.204/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://222.173.8.206/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://222.173.8.212/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://222.173.8.218/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://222.173.8.220/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://222.173.8.250/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://222.173.8.251/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://223.98.185.131/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://60.208.131.91:2801/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_IT()V
'https://60.208.131.91:2802/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_IT()V
'https://60.208.131.91:2809/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_IT()V
'https://60.208.131.91:2811/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_IT()V
'https://60.208.131.91:2811/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:2811/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:2812/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_IT()V
'https://60.208.131.91:2815/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:2815/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:2816/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_IT()V
'https://60.208.131.91:2816/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:2816/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:2817/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_IT()V
'https://60.208.131.91:2817/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:2817/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:2818/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_IT()V
'https://60.208.131.91:2818/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:2818/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:2866/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_IT()V
'https://60.208.131.91:2866/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:2866/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:3801/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_ST()V
'https://60.208.131.91:3802/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_ST()V
'https://60.208.131.91:3803/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_ST()V
'https://60.208.131.91:3809/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_ST()V
'https://60.208.131.91:3811/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_ST()V
'https://60.208.131.91:3811/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:3811/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:3812/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_ST()V
'https://60.208.131.91:3815/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:3815/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:3816/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_ST()V
'https://60.208.131.91:3816/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:3816/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:3817/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:3817/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:3818/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_ST()V
'https://60.208.131.91:3818/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:3818/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:3866/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_ST()V
'https://60.208.131.91:3866/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:3866/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5103/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5103/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5166/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5166/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5602/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5602/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5603/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5603/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5613/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5613/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5801/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_SIT()V
'https://60.208.131.91:5801/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5801/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5802/ArtFinance/dbankh5/' used in: Lcom/sccba/dbank/task/CustomZipDownTask$1;->run()V
'https://60.208.131.91:5802/ArtFinance/dbankh5/800/800.zip' used in: Lcom/sccba/dbank/task/CustomZipDownTask$1;->run()V
'https://60.208.131.91:5802/ArtFinance/dbankh5/entrust/web/' used in: Lcom/sccba/sdk/SccbaSDK;->onCreate(Landroid/os/Bundle;)V
'https://60.208.131.91:5802/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_SIT()V
'https://60.208.131.91:5802/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5802/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5803/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_SIT()V
'https://60.208.131.91:5803/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5803/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5806/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5806/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5808/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5808/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5809/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_SIT()V
'https://60.208.131.91:5809/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5809/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5810/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5810/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5811/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_SIT()V
'https://60.208.131.91:5811/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5811/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5812/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_SIT()V
'https://60.208.131.91:5812/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5812/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5815/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5815/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5816/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_SIT()V
'https://60.208.131.91:5816/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5816/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5817/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_SIT()V
'https://60.208.131.91:5817/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5817/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5818/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_SIT()V
'https://60.208.131.91:5818/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5818/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5831/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5831/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:5866/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_SIT()V
'https://60.208.131.91:5866/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:5866/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6103/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6103/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6166/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6166/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6602/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6602/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6603/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6603/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6613/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6613/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6801/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_UAT()V
'https://60.208.131.91:6801/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6801/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6802/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_UAT()V
'https://60.208.131.91:6802/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6802/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6803/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_UAT()V
'https://60.208.131.91:6803/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6803/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6806/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6806/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6808/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6808/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6809/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_UAT()V
'https://60.208.131.91:6809/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6809/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6810/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6810/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6811/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_UAT()V
'https://60.208.131.91:6811/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6811/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6812/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_UAT()V
'https://60.208.131.91:6812/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6812/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6815/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6815/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6816/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_UAT()V
'https://60.208.131.91:6816/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6816/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6817/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_UAT()V
'https://60.208.131.91:6817/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6817/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6818/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_UAT()V
'https://60.208.131.91:6818/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6818/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6831/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6831/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:6866/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->initBaseUrl_UAT()V
'https://60.208.131.91:6866/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:6866/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.208.131.91:7866/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://60.208.131.91:7866/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://60.216.25.69/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://api.weibo.com/2/friendships/create.json' used in: Lcn/sharesdk/sina/weibo/d;->e(Ljava/lang/String;)Ljava/util/HashMap;
'https://api.weibo.com/2/friendships/followers.json' used in: Lcn/sharesdk/sina/weibo/d;->d(I I Ljava/lang/String;)Ljava/util/HashMap;
'https://api.weibo.com/2/friendships/friends.json' used in: Lcn/sharesdk/sina/weibo/d;->b(I I Ljava/lang/String;)Ljava/util/HashMap;
'https://api.weibo.com/2/friendships/friends/bilateral.json' used in: Lcn/sharesdk/sina/weibo/d;->c(I I Ljava/lang/String;)Ljava/util/HashMap;
'https://api.weibo.com/2/statuses/share.json' used in: Lcn/sharesdk/sina/weibo/d;->b(Ljava/lang/String; Ljava/lang/String;)Ljava/util/HashMap;
'https://api.weibo.com/2/statuses/share.json' used in: Lcn/sharesdk/sina/weibo/d;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/util/HashMap;
'https://api.weibo.com/2/statuses/update.json' used in: Lcn/sharesdk/sina/weibo/d;->a(Ljava/lang/String; F F)Ljava/util/HashMap;
'https://api.weibo.com/2/statuses/upload.json' used in: Lcn/sharesdk/sina/weibo/d;->b(Ljava/lang/String; Ljava/lang/String; F F)Ljava/util/HashMap;
'https://api.weibo.com/2/statuses/upload_url_text.json' used in: Lcn/sharesdk/sina/weibo/d;->a(Ljava/lang/String; Ljava/lang/String; F F)Ljava/util/HashMap;
'https://api.weibo.com/2/statuses/user_timeline.json' used in: Lcn/sharesdk/sina/weibo/d;->a(I I Ljava/lang/String;)Ljava/util/HashMap;
'https://api.weibo.com/2/users/show.json' used in: Lcn/sharesdk/sina/weibo/d;->d(Ljava/lang/String;)Ljava/util/HashMap;
'https://api.weibo.com/oauth2/access_token' used in: Lcn/sharesdk/sina/weibo/d;->b(Ljava/lang/String;)Ljava/lang/String;
'https://api.weibo.com/oauth2/access_token' used in: Lcn/sharesdk/sina/weibo/d;->a()Z
'https://api.weibo.com/oauth2/default.html' used in: Lcn/sharesdk/sina/weibo/d;->getRedirectUri()Ljava/lang/String;
'https://api.weixin.qq.com/sns/oauth2/access_token' used in: Lcn/sharesdk/wechat/utils/g$1;->run()V
'https://api.weixin.qq.com/sns/oauth2/refresh_token' used in: Lcn/sharesdk/wechat/utils/g;->a()Z
'https://api.weixin.qq.com/sns/userinfo' used in: Lcn/sharesdk/wechat/utils/g$2;->run()V
'https://ebank-zq.qlbchina.com/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank-zq.qlbchina.com/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.bankofrizhao.com.cn/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.bankofrizhao.com.cn/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.bankwf.com/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.bankwf.com/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.ccabchina.com/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.ccabchina.com/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.dyccb.net' used in: Lcom/sccba/dbank/DBankCordovaDialog;->getUrl()Ljava/lang/String;
'https://ebank.dyccb.net/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://ebank.dyccb.net/directbank/' used in: Lcom/sccba/dbank/util/CommonUtils;->getUrl(Landroid/content/Context;)Ljava/lang/String;
'https://ebank.dyccb.net/directbank/' used in: Lcom/sccba/dbank/view/views/ShareDialog;->getBankUrl(Ljava/lang/String;)Ljava/lang/String;
'https://ebank.dyccb.net/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.dyccb.net/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.dylsbank.com/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.dylsbank.com/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.dzbchina.com' used in: Lcom/sccba/dbank/util/CommonUtils;->getUrl(Landroid/content/Context;)Ljava/lang/String;
'https://ebank.dzbchina.com' used in: Lcom/sccba/dbank/DBankCordovaDialog;->getUrl()Ljava/lang/String;
'https://ebank.dzbchina.com/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://ebank.dzbchina.com/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.dzbchina.com/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.fcfybank.com/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.fcfybank.com/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.jn-bank.com/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.jn-bank.com/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.lsbankchina.com/directbank' used in: Lcom/sccba/dbank/util/CommonUtils;->getUrl(Landroid/content/Context;)Ljava/lang/String;
'https://ebank.lsbankchina.com/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://ebank.lsbankchina.com/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.lsbankchina.com/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.lsbchina.com/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://ebank.lsbchina.com/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.lsbchina.com/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.ndhb.com.cn/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.ndhb.com.cn/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.qlbchina.com/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://ebank.qlbchina.com/directbank/qrcode/qrcode.html' used in: Lcom/sccba/dbank/view/views/ShareDialog;->getBankUrl(Ljava/lang/String;)Ljava/lang/String;
'https://ebank.qlbchina.com/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.qlbchina.com/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.qsbank.cc/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.qsbank.cc/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.taccb.com.cn/directbank' used in: Lcom/sccba/dbank/util/CommonUtils;->getUrl(Landroid/content/Context;)Ljava/lang/String;
'https://ebank.taccb.com.cn/directbank' used in: Lcom/sccba/dbank/DBankCordovaDialog;->getUrl()Ljava/lang/String;
'https://ebank.taccb.com.cn/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://ebank.taccb.com.cn/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.taccb.com.cn/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.whccb.com/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.whccb.com/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.wqbank.cn/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.wqbank.cn/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.yantaibank.net/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://ebank.yantaibank.net/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.yantaibank.net/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://ebank.zzbank.cc/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://ebank.zzbank.cc/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://graph.qq.com' used in: Lcn/sharesdk/tencent/qzone/b;->b(Ljava/lang/String; Ljava/lang/String;)Ljava/util/HashMap;
'https://graph.qq.com' used in: Lcn/sharesdk/tencent/qq/b;->b(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Lcn/sharesdk/framework/PlatformActionListener;)V
'https://graph.qq.com/oauth2.0/m_authorize?response_type=token&client_id=' used in: Lcn/sharesdk/tencent/qzone/b;->getAuthorizeUrl()Ljava/lang/String;
'https://graph.qq.com/oauth2.0/m_authorize?response_type=token&client_id=' used in: Lcn/sharesdk/tencent/qq/b;->getAuthorizeUrl()Ljava/lang/String;
'https://graph.qq.com/oauth2.0/me' used in: Lcn/sharesdk/tencent/qzone/b;->e(Ljava/lang/String;)Ljava/util/HashMap;
'https://graph.qq.com/oauth2.0/me' used in: Lcn/sharesdk/tencent/qq/b;->c(Ljava/lang/String;)Ljava/util/HashMap;
'https://graph.qq.com/photo/upload_pic' used in: Lcn/sharesdk/tencent/qzone/b;->a(Ljava/lang/String; Ljava/lang/String;)Ljava/util/HashMap;
'https://graph.qq.com/user/get_simple_userinfo' used in: Lcn/sharesdk/tencent/qq/b;->e(Ljava/lang/String;)Ljava/util/HashMap;
'https://graph.qq.com/user/get_simple_userinfo' used in: Lcn/sharesdk/tencent/qzone/b;->d(Ljava/lang/String;)Ljava/util/HashMap;
'https://hhebank.bankwf.com/pay/' used in: Lcom/sccba/sdk/utils/SBACommon;->getBaseUrl()Ljava/lang/String;
'https://hhebank.bankwf.com/pay/' used in: Lcom/sccba/keyboard/KBNativeRequestManager;->getRandomNo(Landroid/app/Activity; Lcom/sccba/keyboard/network/KBHttpEventCallBack;)V
'https://home.m.jd.com/newAllOrders/newAllOrders.action' used in: Lcom/kepler/sdk/am;->()V
'https://item.m.jd.com/product' used in: Lcom/kepler/sdk/am;->()V
'https://item.m.jd.com/product/SKUID.html' used in: Lcom/kepler/sdk/am;->()V
'https://joauth.jd.com/oauth/authorize?' used in: Lcom/kepler/sdk/am;->()V
'https://kepler.jd.com/console/admin/getConfigNew' used in: Lcom/kepler/sdk/t;->a(Lcom/kepler/jd/Listener/FaceCommonCallBack;)V
'https://kepler.jd.com/oauth/sdk/do' used in: Lcom/kepler/sdk/am;->()V
'https://kploauth.jd.com/oauth/passport_access_confirm' used in: Lcom/kepler/sdk/am;->()V
'https://mapi.m.jd.com/ksdk/scheme.json' used in: Lcom/kepler/jd/sdk/bean/LoadApp;->loadOpen()V
'https://mapi.m.jd.com/ksdk/updlist.json' used in: Lcom/kepler/sdk/h;->a(Lcom/kepler/jd/Listener/FaceCommonCallBack;)V
'https://open.t.qq.com' used in: Lcn/sharesdk/tencent/weibo/f;->b(Ljava/lang/String;)Landroid/os/Bundle;
'https://open.t.qq.com' used in: Lcn/sharesdk/tencent/weibo/f;->c(Ljava/lang/String;)Ljava/util/HashMap;
'https://open.t.qq.com/api/friends/add' used in: Lcn/sharesdk/tencent/weibo/f;->e(Ljava/lang/String;)Ljava/util/HashMap;
'https://open.t.qq.com/api/friends/user_fanslist' used in: Lcn/sharesdk/tencent/weibo/f;->b(I I Ljava/lang/String;)Ljava/util/HashMap;
'https://open.t.qq.com/api/friends/user_idollist' used in: Lcn/sharesdk/tencent/weibo/f;->a(I I Ljava/lang/String;)Ljava/util/HashMap;
'https://open.t.qq.com/api/t/add' used in: Lcn/sharesdk/tencent/weibo/f;->a(Ljava/lang/String; F F)Ljava/util/HashMap;
'https://open.t.qq.com/api/t/add_pic' used in: Lcn/sharesdk/tencent/weibo/f;->b(Ljava/lang/String; Ljava/lang/String; F F)Ljava/util/HashMap;
'https://open.t.qq.com/api/t/add_pic_url' used in: Lcn/sharesdk/tencent/weibo/f;->a(Ljava/lang/String; Ljava/lang/String; F F)Ljava/util/HashMap;
'https://open.t.qq.com/api/t/upload_pic' used in: Lcn/sharesdk/tencent/weibo/f;->d(Ljava/lang/String;)Ljava/lang/String;
'https://open.t.qq.com/cgi-bin/oauth2/authorize?client_id=' used in: Lcn/sharesdk/tencent/weibo/f;->getAuthorizeUrl()Ljava/lang/String;
'https://open.weibo.cn/oauth2/authorize?' used in: Lcn/sharesdk/sina/weibo/d;->getAuthorizeUrl()Ljava/lang/String;
'https://openmobile.qq.com/' used in: Lcom/tencent/open/utils/HttpUtils;->request(Lcom/tencent/connect/auth/QQToken; Landroid/content/Context; Ljava/lang/String; Landroid/os/Bundle; Ljava/lang/String;)Lorg/json/JSONObject;
'https://openmobile.qq.com/user/user_login_statis' used in: Lcom/tencent/connect/auth/AuthAgent;->a(Lcom/tencent/tauth/IUiListener;)V
'https://openmobile.qq.com/v3/user/get_info' used in: Lcom/tencent/connect/auth/AuthAgent;->b(Lcom/tencent/tauth/IUiListener;)V
'https://p.m.jd.com/cart/cart.action' used in: Lcom/kepler/sdk/am;->()V
'https://passport.m.jd.com/user/logout.action' used in: Lcom/kepler/sdk/am;->()V
'https://plogin.m.jd.com/cgi-bin/m/mlogin' used in: Lcom/kepler/sdk/am;->()V
'https://plogin.m.jd.com/user/login' used in: Lcom/kepler/sdk/am;->()V
'https://router.jd.com/api' used in: Lcom/kepler/sdk/am;->()V
'https://so.m.jd.com/category/all.html' used in: Lcom/kepler/sdk/am;->()V
'https://so.m.jd.com/ware/search.action?keyword=' used in: Lcom/kepler/sdk/am;->()V
'https://www.' used in: Lcom/google/zxing/client/result/optional/NDEFURIResultParser;->()V
'https://www.kitebank.com' used in: Lcom/sccba/dbank/util/CommonUtils;->getUrl(Landroid/content/Context;)Ljava/lang/String;
'https://www.kitebank.com' used in: Lcom/sccba/dbank/DBankCordovaDialog;->getUrl()Ljava/lang/String;
'https://www.kitebank.com/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
'https://www.qszxyh.com' used in: Lcom/sccba/dbank/util/CommonUtils;->getUrl(Landroid/content/Context;)Ljava/lang/String;
'https://www.qszxyh.com' used in: Lcom/sccba/dbank/DBankCordovaDialog;->getUrl()Ljava/lang/String;
'https://www.qszxyh.com/directbank' used in: Lcom/sccba/dbank/manager/BankAppManager;->getUrlAddress(Ljava/lang/String; I)Ljava/lang/String;
"javascript:cordova.fireDocumentEvent('backbutton');" used in: Lorg/apache/cordova/CordovaWebView;->onKeyUp(I Landroid/view/KeyEvent;)Z
"javascript:cordova.fireDocumentEvent('menubutton');" used in: Lorg/apache/cordova/CordovaWebView;->onKeyUp(I Landroid/view/KeyEvent;)Z
"javascript:cordova.fireDocumentEvent('searchbutton');" used in: Lorg/apache/cordova/CordovaWebView;->onKeyUp(I Landroid/view/KeyEvent;)Z
"javascript:cordova.fireDocumentEvent('volumedownbutton');" used in: Lorg/apache/cordova/CordovaWebView;->onKeyDown(I Landroid/view/KeyEvent;)Z
"javascript:cordova.fireDocumentEvent('volumeupbutton');" used in: Lorg/apache/cordova/CordovaWebView;->onKeyDown(I Landroid/view/KeyEvent;)Z
"javascript:document.getElementsByTagName('HEAD').item(0).removeChild(document.getElementById('QQBrowserSDKNightMode'));" used in: Lcom/tencent/smtt/sdk/WebView;->(Landroid/content/Context; Landroid/util/AttributeSet; I Ljava/util/Map; Z)V
"javascript:document.getElementsByTagName('HEAD').item(0).removeChild(document.getElementById('QQBrowserSDKNightMode'));" used in: Lcom/tencent/smtt/sdk/WebView;->switchNightMode(Z)V
'javascript:try{ ' used in: Lcom/kepler/jd/sdk/JdView$2;->run()V
"javascript:try{cordova.fireDocumentEvent('pause');}catch(e){console.log('exception firing pause event from native');};" used in: Lorg/apache/cordova/CordovaWebView;->handlePause(Z)V
"javascript:try{cordova.fireDocumentEvent('resume');}catch(e){console.log('exception firing resume event from native');};" used in: Lorg/apache/cordova/CordovaWebView;->handleResume(Z Z)V
"javascript:try{cordova.require('cordova/channel').onDestroy.fire();}catch(e){console.log('exception firing destroy event from native');};" used in: Lorg/apache/cordova/CordovaWebView;->handleDestroy()V
"javascript:var style = document.createElement('style');style.type='text/css';style.id='QQBrowserSDKNightMode';style.innerHTML='html,body{background:none !important;background-color: #1d1e2a !important;}html *{background-color: #1d1e2a !important; color:#888888 !important;border-color:#3e4f61 !important;text-shadow:none !important;box-shadow:none !important;}a,a *{border-color:#4c5b99 !important; color:#2d69b3 !important;text-decoration:none !important;}a:visited,a:visited *{color:#a600a6 !important;}a:active,a:active *{color:#5588AA !important;}input,select,textarea,option,button{background-image:none !important;color:#AAAAAA !important;border-color:#4c5b99 !important;}form,div,button,span{background-color:#1d1e2a !important; border-color:#4c5b99 !important;}img{opacity:0.5}';document.getElementsByTagName('HEAD').item(0).appendChild(style);" used in: Lcom/tencent/smtt/sdk/WebView;->(Landroid/content/Context; Landroid/util/AttributeSet; I Ljava/util/Map; Z)V
"javascript:var style = document.createElement('style');style.type='text/css';style.id='QQBrowserSDKNightMode';style.innerHTML='html,body{background:none !important;background-color: #1d1e2a !important;}html *{background-color: #1d1e2a !important; color:#888888 !important;border-color:#3e4f61 !important;text-shadow:none !important;box-shadow:none !important;}a,a *{border-color:#4c5b99 !important; color:#2d69b3 !important;text-decoration:none !important;}a:visited,a:visited *{color:#a600a6 !important;}a:active,a:active *{color:#5588AA !important;}input,select,textarea,option,button{background-image:none !important;color:#AAAAAA !important;border-color:#4c5b99 !important;}form,div,button,span{background-color:#1d1e2a !important; border-color:#4c5b99 !important;}img{opacity:0.5}';document.getElementsByTagName('HEAD').item(0).appendChild(style);" used in: Lcom/tencent/smtt/sdk/WebView;->switchToNightMode()V
"javascript:var style = document.createElement('style');style.type='text/css';style.id='QQBrowserSDKNightMode';style.innerHTML='html,body{background:none !important;background-color: #1d1e2a !important;}html *{background-color: #1d1e2a !important; color:#888888 !important;border-color:#3e4f61 !important;text-shadow:none !important;box-shadow:none !important;}a,a *{border-color:#4c5b99 !important; color:#2d69b3 !important;text-decoration:none !important;}a:visited,a:visited *{color:#a600a6 !important;}a:active,a:active *{color:#5588AA !important;}input,select,textarea,option,button{background-image:none !important;color:#AAAAAA !important;border-color:#4c5b99 !important;}form,div,button,span{background-color:#1d1e2a !important; border-color:#4c5b99 !important;}img{opacity:0.5}';document.getElementsByTagName('HEAD').item(0).appendChild(style);" used in: Lcom/tencent/smtt/sdk/WebView;->switchNightMode(Z)V
'javascript:window.JsBridge&&JsBridge.callback(' used in: Lcom/tencent/open/a$a;->a(Ljava/lang/Object;)V
'javascript:window.JsBridge&&JsBridge.callback(' used in: Lcom/tencent/open/a$a;->a()V
"javascript:window.local_obj.showSource(''+document.getElementsByTagName('html')[0].innerHTML+'','" used in: Lcom/kepler/jd/sdk/JdView$JDBaseWebViewClient;->onPageFinished(Landroid/webkit/WebView; Ljava/lang/String;)V
'www.bouncycastle.org' used in: Lorg/bouncycastle/crypto/examples/DESExample;->(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Z)V
'www.kitebank.com' used in: Lcom/sccba/dbank/manager/BankAppManager;->getDomainName(Landroid/app/Activity;)Ljava/lang/String;
'www.kitebank.com' used in: Lcom/sccba/dbank/manager/BankAppManager;->getBaseIP(Ljava/lang/String; I)Ljava/lang/String;
'www.kitebank.com' used in: Lcom/sccba/dbank/manager/BankAppManager;->getDomainName(Ljava/lang/String;)Ljava/lang/String;
'www.qq.com' used in: Lcom/tencent/smtt/sdk/ab;->l()Z
'www.qszxyh.com' used in: Lcom/sccba/dbank/manager/BankAppManager;->getDomainName(Landroid/app/Activity;)Ljava/lang/String;
'www.qszxyh.com' used in: Lcom/sccba/dbank/manager/BankAppManager;->getBaseIP(Ljava/lang/String; I)Ljava/lang/String;
'www.qszxyh.com' used in: Lcom/sccba/dbank/manager/BankAppManager;->getDomainName(Ljava/lang/String;)Ljava/lang/String;
'www.zip' used in: Lcom/sccba/dbank/manager/BankAppManager$5;->run()V
'www.zip' used in: Lcom/sccba/dbank/manager/FilePathManager;->()V

中危

检测到8处setSavePassword密码明文存储漏洞。

位置: classes.dex
com.tencent.open.SocialApiIml;
com.tencent.smtt.sdk.WebSettings;
com.jingdong.jdma.entrance.JDMaManager;
com.sccba.dbank.WebLinkActivity;
com.kepler.jd.sdk.JdView;
com.sccba.dbank.BaseCordovaActivity;
com.sccba.sdk.SBAWebViewWithProgress;
com.tencent.open.yyb.AppbarActivity;

webview的保存密码功能默认设置为true。Webview会明文保存网站上的密码到本地私有文件”databases/webview.db”中。对于可以被root的系统环境或者配合其他漏洞(如webview的同源绕过漏洞),攻击者可以获取到用户密码。
建议:显示设置webView.getSetting().setSavePassword(false)。

参考案例:
www.wooyun.org/bugs/wooyun-2010-021420
www.wooyun.org/bugs/wooyun-2013-020246

参考资料:
http://wolfeye.baidu.com/blog/
www.claudxiao.net/2013/03/android-webview-cache/

低危

检测到8处SecureRandom使用不当。

位置: classes.dex
com.wintone.cipher.AES;->decrypt
com.wintone.cipher.AESofSUN;->decrypt
org.bouncycastle.crypto.examples.DESExample;->
com.sccba.keyboard.utils.KBSecurityUtils;->getRawKey
com.wintone.cipher.AES;->Encrypt
org.bouncycastle.crypto.tls.TlsProtocolHandler;->
org.bouncycastle.jce.provider.JDKKeyStore$StoreEntry;->
com.wintone.cipher.AESofSUN;->Encrypt

SecureRandom的使用不当会导致生成的随机数可被预测,该漏洞存在于Android系统随机生成数字串安全密钥的环节中。该漏洞的生成原因是对SecureRandom类的不正确使用方式导致生成的随机数不随机。建议:
(1)不要使用自定义随机源代替系统默认随机源(推荐)除非有特殊需求,在使用SecureRandom类时,不要调用以下函数:SecureRandom类下SecureRandom(byte[]seed)、setSeed(long seed)和setSeed(byte[]seed)方法。
(2)在调用setSeed方法前先调用任意nextXXX方法。具体做法是调用setSeed方法前先调用一次SecureRandom#nextBytes(byte[]bytes)方法,可以避免默认随机源被替代,详细见参考资料。

参考资料:
https://developer.android.com/reference/java/security/SecureRandom.html
http://drops.wooyun.org/papers/5164
http://jaq.alibaba.com/blog.htm?id=47

低危

检测到5个WebView系统隐藏接口未移除。

位置: classes.dex
cn.sharesdk.framework.authorize.e;->b()Lcn.sharesdk.framework.authorize.RegisterView;
cn.sharesdk.tencent.qzone.d;->a()Lcn.sharesdk.framework.authorize.RegisterView;
com.sccba.dbank.WebLinkActivity;->setWebViewSetting(Landroid.webkit.WebView;)V
cn.sharesdk.tencent.qq.f;->a()Lcn.sharesdk.framework.authorize.RegisterView;
com.jingdong.jdma.entrance.JDMaManager;->formatMUrlV3(Landroid.app.Activity; Landroid.webkit.WebView; Ljava.lang.String; Ljava.lang.String; Ljava.lang.String; Ljava.lang.String; Ljava.lang.String;)V

android webview组件包含3个隐藏的系统接口:searchBoxJavaBridge_,accessibilityTraversal以及accessibility,恶意程序可以利用它们实现远程代码执行。
如果使用了WebView,那么使用WebView.removeJavascriptInterface(String name) API,显示的移除searchBoxJavaBridge_、accessibility、accessibilityTraversal这三个接口。

参考资料:
http://wolfeye.baidu.com/blog/android-webview/
http://blog.csdn.net/u013107656/article/details/51729398
http://wolfeye.baidu.com/blog/android-webview-cve-2014-7224/

低危

检测到4处使用了DES弱加密算法。

位置: classes.dex
'DES/ECB/PKCS5Padding' used in: Lcom/sccba/keyboard/utils/KBDesUtil;->des([B [B [B I)[B
'DES/ECB/PKCS5Padding' used in: Lcom/sccba/dbank/util/DesUtil;->des([B [B [B I)[B
'DES/ECB/PKCS5Padding' used in: Lcom/jingdong/jdma/secure/DesUtil;->decrypt([B [B)[B
'DES/ECB/PKCS5Padding' used in: Lcom/jingdong/jdma/secure/DesUtil;->encrypt([B [B)[B

使用弱加密算法会大大增加黑客攻击的概率,黑客可能会破解隐私数据、猜解密钥、中间人攻击等,造成隐私信息的泄漏,甚至造成财产损失。建议使用AES加密算法。

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

低危

检测到23处AES/DES弱加密风险。

位置: classes.dex
Lcom/wintone/cipher/AESofSUN;->decrypt([B [B)[B
Lm/framework/utils/Data;->AES128Encode(Ljava/lang/String; Ljava/lang/String;)[B
com.wintone.cipher.AESofSUN;->decrypt([B)[B
Lcom/wintone/cipher/AESofSUN;->Encrypt([B [B)[B
Lcom/mob/tools/utils/Data;->AES128Decode([B [B)[B
Lcom/tencent/smtt/utils/o;->a([B Ljava/lang/String;)[B
Lm/framework/utils/Data;->AES128Encode([B Ljava/lang/String;)[B
com.wintone.cipher.AES;->Encrypt([B)[B
com.wintone.cipher.AES;->decrypt([B)[B
com.wintone.cipher.AESofSUN;->Encrypt([B)[B
Lcom/mob/tools/utils/Data;->AES128Encode(Ljava/lang/String; Ljava/lang/String;)[B
Lcom/wintone/cipher/AES;->Encrypt([B [B)[B
Lcom/wintone/cipher/AES;->decrypt([B [B)[B
Lcom/sccba/dbank/util/DesUtil;->des([B [B [B I)[B
Lcom/mob/tools/utils/Data;->AES128Encode([B [B)[B
Lcom/tencent/smtt/utils/o;->c([B)[B
com.sccba.keyboard.utils.KBSecurityUtils;->encryptAES(Ljava.lang.String;)[B
Lcom/sccba/keyboard/utils/KBDesUtil;->des([B [B [B I)[B
Lcom/jingdong/jdma/secure/DesUtil;->encrypt([B [B)[B
Lcom/jingdong/jdma/secure/DesUtil;->decrypt([B [B)[B
Lm/framework/utils/Data;->AES128Decode([B [B)[B
com.sccba.keyboard.utils.KBSecurityUtils;->decryptAES([B)[B
Lcom/tencent/smtt/utils/o;->()V

使用AES/DES/DESede加密算法时,如果使用ECB模式,容易受到攻击风险,造成信息泄露。建议在使用AES/DES/DESede加密算法时,应显示指定使用CBC或CFB加密模式

参考资料:
http://blog.csdn.net/u013107656/article/details/51997957
https://developer.android.com/reference/javax/crypto/Cipher.html
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

低危

非debug包,需要通过打包平台proguard脚本,移除大部分系统输出代码。
经扫描该包仍存在大量系统输出代码,共发现88处系统输出代码.(此处扫描的系统输出代码,是指调用System.out.print*输出的,本应在打包平台移除的系统输出代码.)
各个bundle系统输出代码详情如下:

位置: classes.dex
kernal.idcard.android.RecogService$recogBinder;
com.kernal.lisence.MyProvider;
com.wintone.cipher.AESofSUN;
com.kernal.bankcard.lisence.DeviceFP;
com.kernal.bankcard.lisence.WintoneLSCOperateTools;
com.kernal.passportreader.sdk.CameraActivity;
com.wintone.Adaptor.CipherAdaptorC2;
org.bouncycastle.crypto.engines.NaccacheSternEngine;
com.kernal.bankcard.VersionAuthFileOperate;
com.wintone.cipher.Base64;
org.bouncycastle.jce.provider.JCEIESCipher;
com.kernal.bankcard.utils.CameraSetting;
com.sun.mail.pop3.POP3Store;
com.sun.mail.imap.protocol.IMAPSaslAuthenticator;
org.bouncycastle.asn1.util.Dump;
com.sun.mail.pop3.Protocol;
com.iss.loghandler.ErrorLogSave;
javax.mail.Session;
org.bouncycastle.jce.provider.JDKPKCS12KeyStore;
kernal.idcard.android.HolderRecogService;
cn.cloudwalk.libproject.util.FileUtil;
kernal.idcard.android.AuthService;
com.kernal.lisence.WintoneLSCOperateTools;
com.tencent.open.utils.Util;
com.sun.mail.dsn.DeliveryStatus;
com.iss.httpclient.core.ConsoleRequestLogger;
com.wintone.cipher.AESofC;
com.jingdong.jdma.secure.DesUtil;
com.kernal.bankcard.camera.ScanCamera;
org.bouncycastle.jce.provider.JCEStreamCipher;
com.iss.utils.TimeUtils;
org.bouncycastle.crypto.generators.NaccacheSternKeyPairGenerator;
kernal.idcard.android.RecogService;
org.bouncycastle.util.test.SimpleTest;
com.wintone.cipher.AES;
org.bouncycastle.jce.provider.BrokenJCEBlockCipher;
com.sccba.dbank.util.FileUtils;
com.sun.mail.imap.protocol.BODYSTRUCTURE;
com.adobe.xmp.XMPMetaFactory;
com.kernal.lisence.MyProvider$DatabaseHelper;
com.sun.mail.imap.protocol.IMAPSaslAuthenticator$1;
com.drew.imaging.ImageMetadataReader;
com.jingdong.jdma.secure.NewBase64;
com.sun.mail.imap.IMAPStore;
com.kernal.lisence.SqliteHelperUtils$SqliteHelper;
com.kernal.bankcard.lisence.SqliteHelperUtils;
javax.mail.internet.MailDateFormat;
com.kernal.bankcard.ModeAuthFileResult;
org.bouncycastle.x509.examples.AttrCertExample;
kernal.idcard.android.HolderRecogService$recogBinder;
com.wintone.cipher.MD5;
com.kernal.bankcard.lisence.CallWebService;
com.iss.utils.Md5Util;
com.kernal.passport.sdk.utils.CameraParametersUtils;
com.wintone.cipher.AESWithoutJCE;
kernal.idcard.android.IDCardBean;
com.drew.lang.CompoundException;
com.kernal.bankcard.lisence.SqliteHelperUtils$SqliteHelper;
com.wintone.cipher.RC4;
com.sun.activation.registries.LogSupport;
com.squareup.okhttp.internal.Platform;
com.kernal.lisence.DeviceFP;
com.sun.mail.imap.protocol.IMAPProtocol;
org.bouncycastle.crypto.examples.DESExample;
com.kernal.bankcard.BankCardRecogUtils;
com.wintone.Adaptor.CipherAdaptorC1;
com.sccba.dbank.manager.MenuManager;
com.sccba.dbank.util.MD5Utils;
com.sun.mail.imap.IMAPFolder;
com.kernal.db.SqliteHelperUtils$SqliteHelper;
com.wintone.cipher.AESWithJCE;
com.sun.mail.smtp.SMTPTransport;
com.iss.loghandler.CollectDataManager;
com.kernal.lisence.VersionAuthFileOperate;
com.kernal.bankcard.lisence.ProcedureAuthOperate;
org.bouncycastle.LICENSE;
com.kernal.lisence.CallWebService;
com.kernal.lisence.SqliteHelperUtils;
com.kernal.passport.sdk.utils.LogcatHelper$LogDumper;
com.kernal.lisence.ProcedureAuthOperate;
com.sun.mail.util.UUEncoderStream;
com.kernal.smartvision_bankCard.ShowResult;
com.wintone.cert.MyProcess$StreamGobbler;
com.kernal.lisence.ModeAuthFileResult;
com.kernal.db.SqliteHelperUtils;
com.kernal.passport.sdk.utils.HttpUploadDialog;
com.sun.mail.smtp.DigestMD5;
org.bouncycastle.jce.provider.WrapCipherSpi;

低危

检测到3处主机名弱校验检测漏洞。

位置: classes.dex
com.iss.imageloader.core.download.BaseImageDownloader$1;->verify(Ljava.lang.String; Ljavax.net.ssl.SSLSession;)Z
com.iss.imageloader.core.download.BaseImageDownloader$2;->verify(Ljava.lang.String; Ljavax.net.ssl.SSLSession;)Z
com.kepler.sdk.ae$a;->verify(Ljava.lang.String; Ljavax.net.ssl.SSLSession;)Z

自定义HostnameVerifier类,却不实现其verify方法验证域名直接返回true,直接接受任意域名。建议:
对SSL证书进行强校验,包括签名CA是否合法、证书是否是自签名、主机域名是否匹配、证书是否过期等。

参考资料:
http://drops.wooyun.org/tips/3296
https://www.91ri.org/12534.html

低危

检测到3处RSA算法不使用padding。

位置: classes.dex
'RSA/ECB/NoPadding' used in: Lcom/tencent/smtt/utils/o;->()V
'RSA/ECB/NoPadding' used in: Lcom/tencent/smtt/utils/p;->c()Ljava/lang/String;
'RSA/ECB/NoPadding' used in: Lcom/tencent/smtt/utils/p;->a(Ljava/lang/String;)Ljava/lang/String;

使用RSA公钥时通常会绑定一个padding,原因是为了防止一些依赖于no padding时对RSA算法的攻击。

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

低危

检测到1处地方在自定义实现的WebViewClient类在onReceivedSslError调用proceed()方法。

位置: classes.dex
com.sccba.dbank.WebLinkActivity$3;->onReceivedSslError(Landroid.webkit.WebView; Landroid.webkit.SslErrorHandler; Landroid.net.http.SslError;)V

Android WebView组件加载网页发生证书认证错误时,会调用WebViewClient类的onReceivedSslError方法,如果该方法实现调用了handler.proceed()来忽略该证书错误,则会受到中间人攻击的威胁,可能导致隐私泄露。建议:
当发生证书认证错误时,采用默认的处理方法handler.cancel(),停止加载问题页面当发生证书认证错误时,采用默认的处理方法handler.cancel(),停止加载问题页面。

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0109266

参考资料:
https://jaq.alibaba.com/blog.htm?id=60
http://wolfeye.baidu.com/blog/webview-ignore-ssl-error/

警告

检测到15处addFlags使用Intent.FLAG_ACTIVITY_NEW_TASK。

位置: classes.dex
com.tencent.smtt.sdk.av;->onError
com.tencent.smtt.utils.r;->c
cn.sharesdk.wechat.utils.j;->a
com.tencent.connect.auth.AuthDialog$LoginWebViewClient;->shouldOverrideUrlLoading
com.kepler.sdk.l;->b
com.alipay.share.sdk.openapi.channel.APMessageAct;->send
com.tencent.smtt.sdk.a.d;->a
cn.sharesdk.wechat.utils.h;->a
com.tencent.open.TDialog$FbWebViewClient;->shouldOverrideUrlLoading
com.tencent.smtt.utils.r;->e
com.tencent.smtt.sdk.av;->b
com.tencent.open.utils.Util;->a
com.mob.tools.FakeActivity;->showActivity
com.tencent.open.PKDialog;->loadUrlWithBrowser
com.tencent.smtt.sdk.r;->a

APP创建Intent传递数据到其他Activity,如果创建的Activity不是在同一个Task中打开,就很可能被其他的Activity劫持读取到Intent内容,跨Task的Activity通过Intent传递敏感信息是不安全的。建议:
尽量避免使用包含FLAG_ACTIVITY_NEW_TASK标志的Intent来传递敏感信息。

参考资料:
http://wolfeye.baidu.com/blog/intent-data-leak

警告

检测到3个导出的组件接收其他app的消息,这些组件会被其他app引用并导致dos攻击。

activity com.mob.tools.MobUIShell
activity cn.sharesdk.tencent.qq.ResultReceiver
activity com.iss.dbank.taian.wxapi.WXEntryActivity

建议:
(1)最小化组件暴露。对不会参与跨应用调用的组件建议显示添加android:exported="false"属性。
(2)设置组件访问权限。对provider设置权限,同时将权限的protectionLevel设置为"signature"或"signatureOrSystem"。
(3)组件传输数据验证。对组件之间,特别是跨应用的组件之间的数据传入与返回做验证和增加异常处理,防止恶意调试数据传入,更要防止敏感数据返回。

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0169746
http://www.wooyun.org/bugs/wooyun-2010-0104965

参考资料:
http://jaq.alibaba.com/blog.htm?spm=0.0.0.0.Wz4OeC&id=55
《Android安全技术解密与防范》

警告

检测3处組件設置了android.intent.category.BROWSABLE属性。
com.mob.tools.MobUIShell
cn.sharesdk.tencent.qq.ResultReceiver
com.tencent.tauth.AuthActivity


在AndroidManifest文件中定义了android.intent.category.BROWSABLE属性的组件,可以通过浏览器唤起,这会导致远程命令执行漏洞攻击。建议:
(1)APP中任何接收外部输入数据的地方都是潜在的攻击点,过滤检查来自网页的参数。
(2)不要通过网页传输敏感信息,有的网站为了引导已经登录的用户到APP上使用,会使用脚本动态的生成URL Scheme的参数,其中包括了用户名、密码或者登录态token等敏感信息,让用户打开APP直接就登录了。恶意应用也可以注册相同的URL Sechme来截取这些敏感信息。Android系统会让用户选择使用哪个应用打开链接,但是如果用户不注意,就会使用恶意应用打开,导致敏感信息泄露或者其他风险。

參考案例:
http://www.wooyun.org/bugs/wooyun-2014-073875
http://www.wooyun.org/bugs/wooyun-2014-067798

参考资料:
http://wolfeye.baidu.com/blog/intent-scheme-url/
http://www.jssec.org/dl/android_securecoding_en.pdf
http://drops.wooyun.org/mobile/15202
http://blog.csdn.net/l173864930/article/details/36951805
http://drops.wooyun.org/papers/2893

警告

检测到12潜在的XSS漏洞。

位置: classes.dex
cn.sharesdk.framework.authorize.e;->b()Lcn.sharesdk.framework.authorize.RegisterView;
cn.sharesdk.tencent.qq.f;->a()Lcn.sharesdk.framework.authorize.RegisterView;
cn.sharesdk.tencent.qzone.d;->a()Lcn.sharesdk.framework.authorize.RegisterView;
com.jingdong.jdma.entrance.JDMaManager;->formatMUrlV3(Landroid.app.Activity; Landroid.webkit.WebView; Ljava.lang.String; Ljava.lang.String; Ljava.lang.String; Ljava.lang.String; Ljava.lang.String;)V
com.kepler.jd.sdk.JdView;->settingWebView()V
com.sccba.dbank.WebLinkActivity;->setWebViewSetting(Landroid.webkit.WebView;)V
com.sccba.sdk.SBAWebViewWithProgress;->init()V
com.tencent.connect.auth.AuthDialog;->d()V
com.tencent.open.PKDialog;->initViews()V
com.tencent.open.SocialApiIml;->writeEncryToken(Landroid.content.Context;)V
com.tencent.open.TDialog;->b()V
com.tencent.open.yyb.AppbarActivity;->initViews()V

允许WebView执行JavaScript(setJavaScriptEnabled),有可能导致XSS攻击。建议尽量避免使用。
(1)API等于高高于17的Android系统。出于安全考虑,为了防止Java层的函数被随意调用,Google在4.2版本之后,规定允许被调用的函数必须以@JavascriptInterface进行注解。
(2)API等于高高于17的Android系统。建议不要使用addJavascriptInterface接口,以免带来不必要的安全隐患,如果一定要使用该接口,建议使用证书校验。
u(3)使用removeJavascriptInterface移除Android系统内部的默认内置接口:searchBoxJavaBridge_、accessibility、accessibilityTraversal。

参考案例:
www.wooyun.org/bugs/wooyun-2015-0140708
www.wooyun.org/bugs/wooyun-2016-0188252

参考资料:
http://jaq.alibaba.com/blog.htm?id=48
http://blog.nsfocus.net/android-webview-remote-code-execution-vulnerability-analysis

警告

检测到18处IvParameterSpec的使用。

位置: classes.dex
com.baidu.location.b.b.a;->a(Ljava.lang.String; Ljava.lang.String; [B)[B
com.baidu.location.b.b.a;->if(Ljava.lang.String; Ljava.lang.String; [B)[B
com.sccba.dbank.util.DesUtil;->des([B [B [B I)[B
com.sccba.keyboard.utils.KBDesUtil;->des([B [B [B I)[B
com.sccba.keyboard.utils.KBSecurityUtils;->decryptPBE([B)Ljava.lang.String;
com.wintone.cipher.AESWithJCE;->main([Ljava.lang.String;)V
com.wintone.cipher.AESWithJCE;->main([Ljava.lang.String;)V
org.bouncycastle.jce.provider.JDKAlgorithmParameterGenerator$DES;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jce.provider.JDKAlgorithmParameterGenerator$RC2;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jce.provider.JDKAlgorithmParameters$IVAlgorithmParameters;->localEngineGetParameterSpec(Ljava.lang.Class;)Ljava.security.spec.AlgorithmParameterSpec;
org.bouncycastle.jce.provider.JDKAlgorithmParameters$RC2AlgorithmParameters;->localEngineGetParameterSpec(Ljava.lang.Class;)Ljava.security.spec.AlgorithmParameterSpec;
org.bouncycastle.jce.provider.symmetric.AES$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jce.provider.symmetric.CAST5$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jce.provider.symmetric.CAST5$AlgParams;->localEngineGetParameterSpec(Ljava.lang.Class;)Ljava.security.spec.AlgorithmParameterSpec;
org.bouncycastle.jce.provider.symmetric.Camellia$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jce.provider.symmetric.Noekeon$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jce.provider.symmetric.SEED$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.openssl.PEMUtilities;->crypt(Z Ljava.lang.String; [B [C Ljava.lang.String; [B)[B

使用IVParameterSpec函数,如果使用了固定的初始化向量,那么密码文本可预测性高得多,容易受到字典攻击等。建议禁止使用常量初始化矢量构造IVParameterSpec,使用聚安全提供的安全组件。

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

警告

检测到1处使用空Intent构造PendingIntent。

位置: classes.dex
com.sccba.dbank.GestureActivity;->getDefalutIntent(I)Landroid.app.PendingIntent;

使用pendingIntent时候,如果使用了一个空Intent,会导致恶意用户劫持Intent的内容。禁止使用空intent去构造pendingIntent。建议:
禁止使用空intent去构造pendingIntent。

参考资料:
http://wolfeye.baidu.com/blog/pendingintent-leak-information
http://bbs.mob.com/thread-5249-1-1.html

警告

检测到33处使用了加解密算法。密钥处理不当可能会导致信息泄露。

位置: classes.dex
org.bouncycastle.jce.provider.JCEDHKeyAgreement;->engineGenerateSecret(Ljava.lang.String;)Ljavax.crypto.SecretKey;
org.bouncycastle.jce.provider.JDKKeyStore;->decodeKey(Ljava.io.DataInputStream;)Ljava.security.Key;
org.bouncycastle.jce.provider.BrokenJCEBlockCipher;->engineUnwrap([B Ljava.lang.String; I)Ljava.security.Key;
org.bouncycastle.jce.provider.JCEKeyGenerator$DESede;->engineGenerateKey()Ljavax.crypto.SecretKey;
m.framework.utils.Data;->AES128Encode([B Ljava.lang.String;)[B
com.wintone.cipher.RC4;->decrypt([B [B)[B
com.wintone.cipher.AESofSUN;->decrypt([B)[B
com.tencent.smtt.utils.LogFileUtils;->encrypt(Ljava.lang.String; Ljava.lang.String;)[B
com.baidu.location.b.b.a;->if(Ljava.lang.String; Ljava.lang.String; [B)[B
org.bouncycastle.jce.provider.WrapCipherSpi;->engineUnwrap([B Ljava.lang.String; I)Ljava.security.Key;
m.framework.utils.Data;->AES128Encode(Ljava.lang.String; Ljava.lang.String;)[B
org.bouncycastle.openssl.PEMUtilities;->getKey([C Ljava.lang.String; I [B Z)Ljavax.crypto.SecretKey;
org.bouncycastle.jce.provider.JCESecretKeyFactory$DESede;->engineGenerateSecret(Ljava.security.spec.KeySpec;)Ljavax.crypto.SecretKey;
org.bouncycastle.jce.provider.JCESecretKeyFactory;->engineGetKeySpec(Ljavax.crypto.SecretKey; Ljava.lang.Class;)Ljava.security.spec.KeySpec;
com.sccba.keyboard.utils.KBSecurityUtils;->getKey(Ljava.lang.String;)Ljavax.crypto.SecretKey;
cn.sharesdk.framework.utils.a;->a(Ljava.lang.String; Ljava.lang.String; Ljava.util.ArrayList; Lcn.sharesdk.framework.utils.a$a;)Ljava.util.ArrayList;
org.bouncycastle.jce.provider.JCEKeyGenerator;->engineGenerateKey()Ljavax.crypto.SecretKey;
com.mob.tools.utils.Data;->AES128Encode([B [B)[B
com.baidu.location.b.b.a;->a(Ljava.lang.String; Ljava.lang.String; [B)[B
org.bouncycastle.jce.provider.JCESecretKeyFactory;->engineTranslateKey(Ljavax.crypto.SecretKey;)Ljavax.crypto.SecretKey;
com.sccba.keyboard.utils.KBSecurityUtils;->encryptAES(Ljava.lang.String;)[B
com.wintone.cipher.AES;->decrypt([B)[B
org.bouncycastle.jce.provider.asymmetric.ec.KeyAgreement;->engineGenerateSecret(Ljava.lang.String;)Ljavax.crypto.SecretKey;
org.bouncycastle.jce.provider.JCESecretKeyFactory$DESede;->engineGetKeySpec(Ljavax.crypto.SecretKey; Ljava.lang.Class;)Ljava.security.spec.KeySpec;
com.mob.tools.utils.Data;->AES128Encode(Ljava.lang.String; Ljava.lang.String;)[B
cn.sharesdk.tencent.weibo.e;->a(J J)[B
m.framework.utils.Data;->AES128Decode([B [B)[B
com.sccba.keyboard.utils.KBSecurityUtils;->decryptAES([B)[B
com.wintone.cipher.AESWithJCE;->main([Ljava.lang.String;)V
com.tencent.smtt.utils.LogFileUtils;->encryptKey(Ljava.lang.String; Ljava.lang.String;)[B
com.mob.tools.utils.Data;->AES128Decode([B [B)[B
org.bouncycastle.jce.provider.JCESecretKeyFactory$DES;->engineGenerateSecret(Ljava.security.spec.KeySpec;)Ljavax.crypto.SecretKey;
com.wintone.cipher.RC4;->Encrypt([B [B)[B

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0105766
http://www.wooyun.org/bugs/wooyun-2015-0162907
http://www.wooyun.org/bugs/wooyun-2010-0187287

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html


动态扫描发现风险点

风险等级 风险名称

中危

中危

content://media/external/video/media

警告

疑似银行卡

http://loc.map.baidu.com/sdk.php

{"Content-Length": "556", "Host": "loc.map.baidu.com", "User-Agent": "Apache-HttpClient/UNAVAILABLE (java 1.4)", "Accept-Charset": "UTF-8;", "Connection": "Keep-Alive", "Content-Type": "application/x-www-form-urlencoded; charset=utf-8"}

bloc=uPO7o-uqp_279Ojr8ey4-afz7fy5v9equaqwoeHvi6CDjNmP29_Y1IPUht_ZhZOLiMPM3I2VlcmVn5HEkJPExO7tv-W4vLCmoeOL6L3h8__9we_up6Pu7qKYpLP_8qGlyMufypiYmJTAl9LVxJvInJWOmtve15qEhYuNwYGM28Yjei90fXttKXt4JHZwICV4a25sampjOGk0IWxlP0Q7O1lRCR4jDBMVRUUARk0QAUZJUE5aV1NpKW0HEBACDlRDaGV0bz8xOyYkYCdvZG1kOz1xbydbIn8_NzF8c2xxOiZYHkJDHhsNUARKEBtzND4aFQ4GWVVeRlAXFE8DAAJaoLHqrPCtpLbwQx-sdv..%7Ctp%3D3&ext=vK3xpfX2-qum8_Hw8_f4p-7t6e3o4Lnn7Lbl5OqzsuaP3ozcxZyD0IGn3tKgi6TUwMnHzr_Al73GmsTFwbS0yu_F4uzAtcy96bKwvseSurbYoK3Xo6GOpdSBqd_YqqaiwJHLw8DAwIOa0NeKxpPBzdGUytXQ04MAPpdh9P..%7Ctp%3D3

{"Content-Length": "149", "Expires": "Tue, 23 Jan 2018 15:21:53 GMT", "Http_x_bd_logid": "1637036033", "Server": "apache", "Http_x_bd_logid64": "9982501659324940946", "Cache-Control": "max-age=86400", "Date": "Mon, 22 Jan 2018 15:21:53 GMT", "Content-Type": "text/plain"}

{"content":{"bldg":"","floor":"","in_cn":"2","indoor":"0","point":{"x":"","y":""},"radius":""},"result":{"error":"167","time":"2018-01-22 23:21:53"}}


服务端分析

风险等级 风险名称

警告

检测到?处XSS漏洞。
开发中...

警告

检测到?处XSS跨站漏洞。
开发中...

应用证书