0

高危漏洞

5

中危漏洞

2

低危漏洞

6

警告

文件名 MosoTeach.apk
上传者 aaa
文件大小 44.62824344635MB
MD5 2e0ed94a5b4e7e894ba710bafd592387
包名 com.mosoink.teach
Main Activity com.mosoink.teach.MainActivity
Min SDK 19
Target SDK 26

权限列表

# 名称 说明 提示
0 android.permission.CALL_PHONE 允许应用程序在您不介入的情况下拨打电话。恶意应用程序可借此在您的话费单上产生意外通话费。请注意,此权限不允许应用程序拨打紧急呼救电话。 警告
1 android.permission.ACCESS_COARSE_LOCATION 访问大概的位置源(例如蜂窝网络数据库)以确定手机的大概位置(如果可以)。恶意应用程序可借此确定您所处的大概位置。 注意
2 android.permission.ACCESS_FINE_LOCATION 访问精准的位置源,例如手机上的全球定位系统(如果有)。恶意应用程序可能会借此确定您所处的位置,并可能消耗额外的电池电量。 注意
3 android.permission.ACCESS_LOCATION_EXTRA_COMMANDS 访问额外的位置信息提供程序命令。恶意应用程序可借此干扰GPS或其他位置源的正常工作。 注意
4 android.permission.GET_TASKS 允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。 注意
5 android.permission.READ_PHONE_STATE 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。 注意
6 android.permission.RECEIVE_BOOT_COMPLETED 允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间,而且如果应用程序一直运行,会降低手机的整体速度。 注意
7 android.permission.RECORD_AUDIO 允许应用程序访问录音路径。 注意
8 android.permission.SYSTEM_ALERT_WINDOW 允许应用程序显示系统警报窗口。恶意应用程序可借此掌控整个手机屏幕。 注意
9 android.permission.WRITE_SETTINGS 允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。 注意
10 android.permission.ACCESS_NETWORK_STATE 允许应用程序查看所有网络的状态。 提示
11 android.permission.ACCESS_WIFI_STATE 允许应用程序查看有关WLAN状态的信息。 提示
12 android.permission.CAMERA 允许应用程序使用相机拍照,这样应用程序可随时收集进入相机镜头的图像。 提示
13 android.permission.CHANGE_CONFIGURATION 允许应用程序更改当前配置,例如语言设置或整体的字体大小。 提示
14 android.permission.CHANGE_NETWORK_STATE 允许应用程序更改网络连接的状态。 提示
15 android.permission.CHANGE_WIFI_STATE 允许应用程序连接到WLAN接入点以及与WLAN接入点断开连接,并对配置的WLAN网络进行更改。 提示
16 android.permission.FLASHLIGHT 允许应用程序控制闪光灯。 提示
17 android.permission.INTERNET 允许程序访问网络. 提示
18 android.permission.KILL_BACKGROUND_PROCESSES 无论内存资源是否紧张,都允许应用程序结束其他应用程序的后台进程。 提示
19 android.permission.MODIFY_AUDIO_SETTINGS 允许应用程序修改整个系统的音频设置,如音量和路由。 提示
20 android.permission.MOUNT_UNMOUNT_FILESYSTEMS 允许应用程序装载和卸载可移动存储器的文件系统。 提示
21 android.permission.READ_LOGS 允许应用程序从系统的各日志文件中读取信息。这样应用程序可以发现您的手机使用情况,但这些信息不应包含任何个人信息或保密信息。 提示
22 android.permission.VIBRATE 允许应用程序控制振动器。 提示
23 android.permission.WAKE_LOCK 允许应用程序防止手机进入休眠状态。 提示
24 android.permission.WRITE_EXTERNAL_STORAGE 允许应用程序写入SD卡。 提示

四大组件

组件名称

com.mosoink.teach.MainActivity
com.mosoink.teach.RegisterActivity
com.mosoink.teach.JoinCCActivity
com.mosoink.teach.CreateCCActivity
com.mosoink.teach.CreateCCSetCourseNameActivity
com.mosoink.teach.ClazzCourseActivity
com.mosoink.teach.SettingActivity
com.mosoink.teach.SysMsgShowActivity
com.mosoink.teach.SettingChangePwdActivity
com.mosoink.teach.SettingUserInfoChangeActivity
com.mosoink.teach.SetingAboutUsActivity
com.mosoink.teach.SchoolChooseActivity
com.mosoink.teach.CreateCCBookListActivity
com.mosoink.teach.MemberDetailActivity
com.mosoink.teach.ScoreSummaryActivity
com.mosoink.teach.CCResUploadFromPcActivity
com.mosoink.teach.CCResUploadLinkActivity
com.mosoink.teach.ChooseExpValueActivity
com.mosoink.teach.ForTransmitCCListActivity
com.mosoink.teach.CCResUpLoadActivity
com.mosoink.teach.EditActivity
com.mosoink.teach.NoticeEditActivity
com.mosoink.teach.CCSetGroupAndTypeActivity
com.mosoink.teach.IAVoteEditActivity
com.mosoink.teach.ForLeadKUEditActivity
com.mosoink.teach.ForLeadCourseNameListActivity
com.mosoink.teach.IAVoteActivity
com.mosoink.teach.IACloudLabelActivity
com.mosoink.teach.IACloudLabelResultActivity
com.mosoink.teach.IAStormResultsActivity
com.mosoink.teach.IAStormItemDetailsActivity
com.mosoink.teach.InteractCheckInfoActivity
com.mosoink.teach.IAStormEditActivity
com.mosoink.teach.IAAQEditActivity
com.mosoink.teach.IAAQThemeActivity
com.mosoink.teach.IAAQActivity
com.mosoink.teach.IAAQHistoryActivity
com.mosoink.teach.IAAQSelectionActivity
com.mosoink.teach.IATestActivity
com.mosoink.teach.CreateCloudBookActivity
com.mosoink.teach.ImportCcFromTableActivity
com.mosoink.teach.CloudBookInformationActivity
com.mosoink.teach.CloudbookFinishDetailActivity
com.mosoink.teach.CloudbookDetailActivity
com.mosoink.teach.ChooseCloudBookActivity
com.mosoink.teach.ContextMenu
com.mosoink.teach.AQImageViewedActivity
com.mosoink.teach.ShowBigText
com.mosoink.teach.IAGroupActivity
com.mosoink.teach.IAStormActivity2
com.mosoink.teach.SettingShareToFriendsActivity
com.mosoink.teach.CCResVideoActivity
com.mosoink.teach.CCResWebViewPreviewActivity
com.mosoink.teach.CCResCheckInfoActivity
com.mosoink.teach.CCResSearchActivity
com.mosoink.teach.SettingCacheManagerActivity
com.mosoink.teach.CheckInTeacherActivity
com.mosoink.teach.CheckInStatisticsActivity
com.mosoink.teach.CheckInSetPatternActivity
com.mosoink.teach.CheckInStartTeacherActivity
com.mosoink.teach.CheckInDetailActivity
com.mosoink.teach.CheckInStudentActivity
com.mosoink.teach.CheckInStudentOneKeyActivity
com.mosoink.teach.CheckInStudentGestureActivity
com.mosoink.teach.CheckInSetAbsenceTypeActivity
com.mosoink.teach.ForgetPasswordActivity
com.mosoink.teach.ImageChooseActivity
com.mosoink.teach.GalleryOldActivity
com.mosoink.teach.GalleryActivity
com.mosoink.teach.ImageViewerActivity
com.mosoink.teach.AccountNumberSafeActivity
com.mosoink.teach.ForgetPwdActivity
com.mosoink.teach.ForgetPwdSendActivity
com.mosoink.teach.BindingPhoneOrEmailActivity
com.mosoink.teach.ChangeBindingActivity
com.mosoink.teach.ForgetPwdSendSmsActivity
com.mosoink.teach.ForgetPwdSendEmailActivity
com.mosoink.teach.InputNewPwdActivity
com.mosoink.teach.CCApplySchoolSuccessActivity
com.mosoink.teach.CCApplySchoolExistActivity
com.mosoink.teach.IAStormStemActivity
com.mosoink.teach.QuizRankListActivity
com.mosoink.teach.QuizStudentResultActivity
com.mosoink.teach.QuizDetailResultActivity
com.mosoink.teach.QuizAppointStuReQuizActivity
com.mosoink.teach.QuizBeginActivity
com.mosoink.teach.QuizDoingActivity
com.mosoink.teach.QuizTotalAnalysisActivity
com.mosoink.teach.QuizTopicAnalyseActivity
com.mosoink.teach.QuizAnalyseResultInfoActivity
com.mosoink.teach.QuizTeacherLookActivity
com.mosoink.teach.HWBeforeAppraiseActivity
com.mosoink.teach.HWBeforeEndActivity
com.mosoink.teach.UserProFileCompletedActivity
com.mosoink.teach.wxapi.WXPayEntryActivity
com.mosoink.teach.CheckDirectionsActivity
com.mosoink.teach.SchoolAccountActivity
com.mosoink.teach.MemberDetailsActivity
com.umeng.socialize.editorpage.ShareActivity
com.tencent.tauth.AuthActivity
com.tencent.connect.common.AssistActivity
com.mosoink.teach.wxapi.WXEntryActivity
com.umeng.socialize.media.WBShareCallBackActivity
com.sina.weibo.sdk.web.WeiboSdkWebActivity
com.sina.weibo.sdk.share.WbShareTransActivity
com.mosoink.teach.CPHistoryActivity
com.mosoink.teach.CPHistoryMemberActivity
com.mosoink.teach.CPAddStudentActivity
com.mosoink.teach.HWEditActivity
com.mosoink.teach.HomeWorkDetailActivity
com.mosoink.teach.HWResultTaskDetailsActivity
com.mosoink.teach.HWEvaluateActivity
com.mosoink.teach.HWStudentAnswerActivity
com.mosoink.teach.HWScoreAssistantOrStudentActivity
com.mosoink.teach.HWCommentAreaActivity
com.mosoink.teach.HWOfflineJoinActivity
com.mosoink.teach.HWResultsListActivity
com.mosoink.teach.HWEditRecordActivity
com.mosoink.teach.HWResultEditRecordActivity
com.mosoink.teach.HwUserTeamInterAppraiseActivity
com.mosoink.teach.HwMixAppraiseTeamScoreRecordActivity
com.mosoink.teach.HWTotalMemberScoreDetailActivity
com.mosoink.teach.HWMixAppraiseSettingActivity
com.mosoink.teach.HwAppraisePlanScoreDetailActivity
com.mosoink.teach.HWAppraiseScoreQuestionActivity
com.mosoink.teach.HwAppraiseTypeEachOtherOrMixOuterResultActivity
com.mosoink.teach.HwTeamAppraiseScoreRecordActivity
com.mosoink.teach.HwAppraiseActivity
com.mosoink.teach.HWPreviewAppraiseActivity
com.mosoink.teach.GiftGetActivity
com.mosoink.teach.GiftSendActivity
com.mosoink.teach.GiftSummaryActivity
com.mosoink.teach.GiftGetRankingActivity
com.mosoink.teach.GiftGetDetailActivity
com.mosoink.teach.GiftChooseMemberActivity
com.mosoink.teach.GiftSendBeanPackActivity
com.mosoink.teach.GiftListActivity
com.mosoink.teach.GiftCardListActivity
com.mosoink.teach.GiftCardEditActivity
com.mosoink.teach.GiftGetCardActivity
com.mosoink.teach.GiftBeanPackRecordActivity
com.mosoink.teach.GiftPackDialogActivity
com.mosoink.teach.GiftOwnDialogActivity
com.mosoink.teach.GiftActivity
com.mosoink.teach.ResourceSortActivity
com.mosoink.teach.HWChangeStuActivity
com.mosoink.teach.HWPreviewActivity
com.mosoink.teach.HWOtherAttachmentActivity
com.mosoink.teach.PhoneRegisterActivity
com.mosoink.teach.PhoneRegisterNewActivity
com.mosoink.teach.InputCodeActivity
com.mosoink.teach.SettingPhonePasswordActivity
com.mosoink.teach.SettingPhonePasswordNewActivity
com.mosoink.teach.ChooseIdentityActivity
com.mosoink.teach.PhoneCodesLoginActivity
com.mosoink.teach.MBaseAttachmentActivity
com.mosoink.teach.AppraiseMinimumActivity
com.mosoink.teach.HWAllowReSubmitActivity
com.mosoink.teach.HWBeginAppraiseActivity
com.mosoink.teach.DiscoverCircleDynamicActivity
com.mosoink.teach.CircleUnreadMsgActivity
com.mosoink.teach.CircleRecommendListActivity
com.mosoink.teach.CircleManageActivity
com.mosoink.teach.CreatePrivateCircleActivity
com.mosoink.teach.CreatePrivateCircleSuccessActivity
com.mosoink.teach.CircleKeyWordActivity
com.mosoink.teach.ApplyFollowPrivateCircleActivity
com.mosoink.teach.CheckApplyFollowPrivateCircleActivity
com.mosoink.teach.CircleShareNotesActivity
com.mosoink.teach.DynamicDetailsActivity
com.mosoink.teach.DynamicAwardActivity
com.mosoink.teach.DynamicReferenceActivity
com.mosoink.teach.DynamicRefToClazzResourceActivity
com.mosoink.teach.WebGuidePageActivity
com.mosoink.teach.BlueBeanCenterActivity
com.mosoink.teach.BlueBeanExchangeActivity
com.mosoink.teach.BlueBeanRechargeActivity
com.mosoink.teach.DynamicReportActivity
com.mosoink.teach.CreateCCPerfectInfoActivity
com.mosoink.teach.CreateCCSuccessActivity
com.mosoink.teach.CircleShareActivity
com.mosoink.teach.UserAgreementActivity
com.mosoink.teach.CCResOtherPreviewActivity
com.mosoink.teach.UserDetailActivity
com.mosoink.teach.UserAuthActivity
com.mosoink.teach.UserZoneActivity
com.mosoink.teach.UserFavorActivity
com.mosoink.teach.CirclePostCommentSendActivity
com.mosoink.teach.MIPostHwResultActivity
com.mosoink.teach.PrivateCircleDetailActivity
com.mosoink.teach.TimeLineActivity
com.mosoink.teach.HWMemberDetailActivity
com.mosoink.teach.CCNoticeActivity
com.mosoink.teach.CCNoticeDetailActivity
com.mosoink.teach.CCNoticeTransmitActivity
com.mosoink.teach.CCSystemMsgActivity
com.mosoink.teach.ContactActivity
com.mosoink.teach.IAPrivateChatActivity
com.mosoink.teach.MemberRoleSettingActivity
com.mosoink.teach.TeamPlanActivity
com.mosoink.teach.TeamPlanEditActivity
com.mosoink.teach.MemberChooseActivity
com.mosoink.teach.TeamPlanPreviewActivity
com.mosoink.teach.HWManagerTeamActivity
com.mosoink.teach.HWMoveMemberActivity
com.mosoink.teach.HWPartitionTeamActivity
com.mosoink.teach.CPHomeTeacherActivity
com.mosoink.teach.CPHomeStudentActivity
com.mosoink.teach.CPPlanSelectActivity
com.mosoink.teach.CPTeamSelectActivity
com.mosoink.teach.CPHandupTeacherActivity
com.mosoink.teach.CPVieAnswerTeacherActivity
com.mosoink.teach.CPHandupStudentActivity
com.mosoink.teach.CPVieAnswerStudentActivity
com.mosoink.teach.CPStudentEndActivity
com.mosoink.teach.AppUpgradeActivity
com.mosoink.teach.MemberDetailWebActivity
com.mosoink.teach.PlanStudentPreviewActivity
com.mosoink.teach.AIActivity
com.mosoink.teach.AIMsgListActivity
com.mosoink.teach.ClazzCardEditActivity
com.mosoink.teach.VideoChooseActivity
com.mosoink.teach.VideoPlayActivity
com.mosoink.teach.HomeworkMarkActivity
com.mosoink.teach.HWAttachmentWebViewActivity
com.mosoink.teach.ScreenConnectingActivity
com.mosoink.teach.ScreenControllerActivity
com.mosoink.teach.openAPI.OpenAPIActivity
com.mosoink.teach.FileStorageActivity
com.mosoink.teach.LoginNewActivity
com.mosoink.teach.CompleteInfoActivity
com.mosoink.teach.AIControlActivity
com.mosoink.teach.CPManualChooseActivity
com.mosoink.teach.CPChooseMemberActivity
com.mosoink.teach.CPMemberScoreActivity
com.mosoink.teach.CPRandomChooseActivity
com.mosoink.teach.ClazzSortActivity
com.mosoink.teach.ChooseRoleActivity
com.mosoink.teach.UserBasicInfoActivity
com.mosoink.teach.SchoolInfoActivity
com.mosoink.teach.UnCompleteListActivity
com.mosoink.teach.AIControlGuideActivity
com.mosoink.teach.CheckAgreementActivity
com.mosoink.teach.FileReceiveActivity
com.mosoink.teach.FileSaveSuccessActivity
com.mosoink.teach.FileChooseClazzActivity
com.mosoink.teach.ClazzGroupActivity
com.mosoink.teach.ResourceUploadActivity
com.mosoink.teach.LocalFileChooseActivity
com.mosoink.teach.MBaseResourceUploadActivity
cn.jpush.android.ui.PushActivity
cn.jpush.android.ui.PopWinActivity
cn.jpush.android.service.JNotifyActivity
com.mosoink.teach.ApplyAddSchoolActivity
com.mosoink.teach.NotRecordedSchoolActivity
com.mosoink.teach.ChooseSchoolActivity
com.mosoink.teach.NewDepartmentActivity
com.mosoink.teach.MemberSecondActivity
com.mosoink.teach.GiftSendSuccessActivity
com.mosoink.teach.MTShareActivity
com.mosoink.teach.MemberDetailRuleDirectionActivity
com.mosoink.teach.JsCallNativeActivity
com.mosoink.teach.ViewAccountActivity
com.mosoink.teach.MedalWallActivity
com.mosoink.teach.MedalDetailActivity
com.mosoink.teach.MedalPopupActivity
com.mosoink.teach.HwAIAppraiseListActivity
com.mosoink.teach.HWGradeBatchActivity
com.mosoink.teach.WarningSetActivity
com.mosoink.teach.ClazzScorePercentActivity
com.mosoink.teach.WeightSetActivity
com.mosoink.teach.HistoryWeightActivity
com.mosoink.teach.WarningActivity
com.mosoink.teach.WarnAdviseActivity
com.mosoink.teach.WarningGuideActivity
com.mosoink.screen.ScanActivity
com.mosoink.teach.ScreenPromptActivity
com.alipay.sdk.app.H5PayActivity
com.alipay.sdk.app.H5AuthActivity
com.alipay.sdk.app.PayResultActivity
com.alipay.sdk.app.AlipayResultActivity

com.baidu.speech.VoiceRecognitionService
com.hyphenate.chat.EMChatService
com.baidu.location.f
com.mosoink.base.MIService
cn.jpush.android.service.DownloadService
cn.jpush.android.service.PushService
cn.jpush.android.service.DaemonService
com.mosoink.teach.PushService
com.xiaomi.push.service.XMJobService
com.xiaomi.push.service.XMPushService
com.xiaomi.mipush.sdk.PushMessageHandler
com.xiaomi.mipush.sdk.MessageHandleService
com.mosoink.screen.FloatMonkService

com.hyphenate.chat.EMMonitorReceiver
cn.jpush.android.service.PushReceiver
com.mosoink.teach.PushMessageReceiver
cn.jpush.android.service.AlarmReceiver
com.mosoink.teach.MsgReceiver
com.xiaomi.push.service.receivers.NetworkStatusReceiver
com.xiaomi.push.service.receivers.PingReceiver
cn.jpush.android.service.PluginXiaomiPlatformsReceiver

cn.jpush.android.service.DataProvider
cn.jpush.android.service.DownloadProvider

第三方库

# 库名 介绍
0 com.tencent.bugly 腾讯Bugly,面向移动开发者提供最专业的Crash监控、崩溃分析等质量跟踪服务,为您修复用户的每一次Crash!

静态扫描发现风险点

风险等级 风险名称

中危

检测到1个未移除的敏感Test或Debug组件

com.mosoink.teach.IATestActivity

建议:
在正式发布app前移除敏感的Test或Debug组件

中危

该app需要移除大部分日志打印代码。
经扫描该包仍存在大量打日志代码,共发现101处打日志代码.(此处扫描的日志打印代码,是指调用android.util.Log.* 打印的.)
详情如下:

位置: classes.dex
com.tencent.bugly.yaq.crashreport.CrashReport;->getUserData(Landroid/content/Context; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setSdkExtraData(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setAuditEnable(Landroid/content/Context; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDexForTinker;->finishinstallDexes(Ljava/lang/ClassLoader;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->postCatchedException(Ljava/lang/Throwable; Ljava/lang/Thread; Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setUserId(Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getAppVer()Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.BuglyLog;->i(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setUserId(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getAppChannel()Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDexForTinkerForMemoryDex;->getprefixname(Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->removeUserData(Landroid/content/Context; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getUserId()Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDexForTinker;->installDexes(Ljava/lang/ClassLoader; Ljava/lang/String; Ljava/lang/String;)Ljava/util/ArrayList;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.b;->a(Landroid/content/Context; Lcom/tencent/bugly/yaq/BuglyStrategy;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->enableObtainId(Landroid/content/Context; Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->testNativeCrash(Z Z Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setIsAppForeground(Landroid/content/Context; Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getUserDatasSize(Landroid/content/Context;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setHandleNativeCrashInJava(Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.proguard.x;->a(I Ljava/lang/String; [Ljava/lang/Object;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->closeNativeReport()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->closeBugly()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDexForMemoryDex$V26;->makeDexElements(Ljava/lang/Object; [Ljava/nio/ByteBuffer; Ljava/util/List;)[Ljava/lang/Object;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setCrashRegularFilter(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDexForTinker;->preparetoinstallDexes(Ljava/lang/ClassLoader; I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.BuglyLog;->w(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setUserId(Landroid/content/Context; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->startCrashReport()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getAllUserDataKeys(Landroid/content/Context;)Ljava/util/Set;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->enableObtainId(Landroid/content/Context; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setUserId(Landroid/content/Context; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.BuglyLog;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.proguard.x;->a(I Ljava/lang/String; [Ljava/lang/Object;)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setHandleNativeCrashInJava(Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDexForTinkerForMemoryDex$V26;->makeDexElements(Ljava/lang/Object; [Ljava/nio/ByteBuffer; Ljava/util/ArrayList;)[Ljava/lang/Object;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setSessionIntervalMills(J)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->testANRCrash()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getAppChannel()Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDex$V19;->makeDexElements(Ljava/lang/Object; Ljava/util/ArrayList; Ljava/io/File; Ljava/util/ArrayList;)[Ljava/lang/Object;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.b;->a(Landroid/content/Context; Lcom/tencent/bugly/yaq/BuglyStrategy;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getUserSceneTagId(Landroid/content/Context;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getAppVer()Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDexForMemoryDex;->getprefixname(Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getSdkExtraData(Landroid/content/Context;)Ljava/util/Map;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getAppID()Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDexForTinker;->installDexes(Ljava/lang/ClassLoader; Ljava/lang/String; Ljava/lang/String; I)Ljava/util/ArrayList;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->testANRCrash()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setJavascriptMonitor(Lcom/tencent/bugly/yaq/crashreport/CrashReport$WebViewInterface; Z Z)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setBuglyDbName(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDex;->installDexes(Ljava/lang/ClassLoader; Ljava/lang/String; Ljava/lang/String; Z Z)Ljava/util/ArrayList;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->putUserData(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getUserId()Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.BuglyLog;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getSdkExtraData()Ljava/util/Map;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setIsDevelopmentDevice(Landroid/content/Context; Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setAuditEnable(Landroid/content/Context; Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setUserSceneTag(Landroid/content/Context; I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getSdkExtraData()Ljava/util/Map;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->closeCrashReport()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->isLastSessionCrash()Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getUserData(Landroid/content/Context; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getUserSceneTagId(Landroid/content/Context;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setBuglyDbName(Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setAppChannel(Landroid/content/Context; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDexForTinker$V19;->makeDexElements(Ljava/lang/Object; Ljava/util/ArrayList; Ljava/io/File; Ljava/util/ArrayList;)[Ljava/lang/Object;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->putSdkData(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDex;->preparetoinstallDexes(Ljava/lang/ClassLoader; I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->isLastSessionCrash()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->postException(Ljava/lang/Thread; I Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/util/Map;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getAppID()Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.b;->a(Landroid/content/Context; Ljava/lang/String; Z Lcom/tencent/bugly/yaq/BuglyStrategy;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->testJavaCrash()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setServerUrl(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDexForTinkerForMemoryDex;->installDexes(Ljava/lang/ClassLoader; [Ljava/nio/ByteBuffer;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->testNativeCrash(Z Z Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDex;->installDexes(Ljava/lang/ClassLoader; Ljava/lang/String; Ljava/lang/String; I Z Z)Ljava/util/ArrayList;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setCrashRegularFilter(Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.Util;->Comparetxtinzip(Ljava/util/zip/ZipFile; Ljava/lang/String; Ljava/io/File;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->postCatchedException(Ljava/lang/Throwable; Ljava/lang/Thread; Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.BuglyLog;->v(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setAppPackage(Landroid/content/Context; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.Util;->deleteDir(Ljava/io/File;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.proguard.x;->a(I Ljava/lang/String; [Ljava/lang/Object;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDex;->finishinstallDexes(Ljava/lang/ClassLoader;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.Bugly;->init(Landroid/content/Context; Ljava/lang/String; Z Lcom/tencent/bugly/yaq/BuglyStrategy;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->closeNativeReport()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setCrashFilter(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDexForMemoryDex;->installDexes(Ljava/lang/ClassLoader; [Ljava/nio/ByteBuffer; Z Z)Ljava/util/ArrayList;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setCrashFilter(Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->removeUserData(Landroid/content/Context; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->testJavaCrash()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setAppVersion(Landroid/content/Context; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getAllUserDataKeys(Landroid/content/Context;)Ljava/util/Set;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setUserSceneTag(Landroid/content/Context; I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.wrapper.proxyapplication.MultiDexForMemoryDex$V26;->install(Ljava/lang/ClassLoader; Ljava/lang/reflect/Field; [Ljava/nio/ByteBuffer; Z Z)Ljava/util/ArrayList;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->postException(Ljava/lang/Thread; I Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/util/Map;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.proguard.x;->a(I Ljava/lang/String; [Ljava/lang/Object;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->getUserDatasSize(Landroid/content/Context;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.b;->a(Landroid/content/Context; Ljava/lang/String; Z Lcom/tencent/bugly/yaq/BuglyStrategy;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.bugly.yaq.crashreport.CrashReport;->setJavascriptMonitor(Landroid/webkit/WebView; Z Z)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

中危

检测到1个WebView远程执行漏洞。

位置: classes.dex
com.tencent.bugly.yaq.crashreport.CrashReport$1;->addJavascriptInterface(Lcom.tencent.bugly.yaq.crashreport.crash.h5.H5JavaScriptInterface; Ljava.lang.String;)V

Android API < 17之前版本存在远程代码执行安全漏洞,该漏洞源于程序没有正确限制使用addJavaScriptInterface方法,攻击者可以通过Java反射利用该漏洞执行任意Java对象的方法,导致远程代码执行安全漏洞。
(1)API等于高于17的Android系统。出于安全考虑,为了防止Java层的函数被随意调用,Google在4.2版本之后,规定允许被调用的函数必须以@JavascriptInterface进行注解。
(2)API等于高于17的Android系统。建议不要使用addJavascriptInterface接口,以免带来不必要的安全隐患,如果一定要使用该接口,建议使用证书校验。
(3)使用removeJavascriptInterface移除Android系统内部的默认内置接口:searchBoxJavaBridge_、accessibility、accessibilityTraversal。

参考案例:
www.wooyun.org/bugs/wooyun-2015-0140708
www.wooyun.org/bugs/wooyun-2016-0188252
http://drops.wooyun.org/papers/548

参考资料:
http://jaq.alibaba.com/blog.htm?id=48
http://blog.nsfocus.net/android-webview-remote-code-execution-vulnerability-analysis
https://developer.android.com/reference/android/webkit/WebView.html

中危

检测到2条敏感明文信息,建议移除。

位置: classes.dex
'http://android.bugly.qq.com/rqd/async' used in: Lcom/tencent/bugly/yaq/crashreport/common/strategy/StrategyBean;->()V
'http://rqd.uu.qq.com/rqd/sync' used in: Lcom/tencent/bugly/yaq/crashreport/common/strategy/StrategyBean;->()V

中危

检测到1处setSavePassword密码明文存储漏洞。

位置: classes.dex
com.tencent.bugly.yaq.crashreport.CrashReport$1;

webview的保存密码功能默认设置为true。Webview会明文保存网站上的密码到本地私有文件”databases/webview.db”中。对于可以被root的系统环境或者配合其他漏洞(如webview的同源绕过漏洞),攻击者可以获取到用户密码。
建议:显示设置webView.getSetting().setSavePassword(false)。

参考案例:
www.wooyun.org/bugs/wooyun-2010-021420
www.wooyun.org/bugs/wooyun-2013-020246

参考资料:
http://wolfeye.baidu.com/blog/
www.claudxiao.net/2013/03/android-webview-cache/

低危

检测到2处使用了DES弱加密算法。

位置: classes.dex
'DES/CBC/PKCS5Padding' used in: Lcom/tencent/bugly/yaq/proguard/af;->a([B)[B
'DES/CBC/PKCS5Padding' used in: Lcom/tencent/bugly/yaq/proguard/af;->b([B)[B

使用弱加密算法会大大增加黑客攻击的概率,黑客可能会破解隐私数据、猜解密钥、中间人攻击等,造成隐私信息的泄漏,甚至造成财产损失。建议使用AES加密算法。

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

低危

非debug包,需要通过打包平台proguard脚本,移除大部分系统输出代码。
经扫描该包仍存在大量系统输出代码,共发现2处系统输出代码.(此处扫描的系统输出代码,是指调用System.out.print*输出的,本应在打包平台移除的系统输出代码.)
各个bundle系统输出代码详情如下:

位置: classes.dex
com.tencent.bugly.yaq.proguard.f;
com.wrapper.proxyapplication.CustomerClassLoader;

警告

检测到17个导出的组件接收其他app的消息,这些组件会被其他app引用并导致dos攻击。

activity com.mosoink.teach.wxapi.WXPayEntryActivity
activity com.tencent.tauth.AuthActivity
activity com.mosoink.teach.wxapi.WXEntryActivity
activity com.sina.weibo.sdk.share.WbShareTransActivity
activity com.mosoink.teach.FileReceiveActivity
activity cn.jpush.android.service.JNotifyActivity
activity com.alipay.sdk.app.PayResultActivity
activity com.alipay.sdk.app.AlipayResultActivity
service com.hyphenate.chat.EMChatService
service cn.jpush.android.service.DaemonService
service com.mosoink.teach.PushService
service com.xiaomi.mipush.sdk.PushMessageHandler
receiver com.hyphenate.chat.EMMonitorReceiver
receiver com.mosoink.teach.PushMessageReceiver
receiver com.mosoink.teach.MsgReceiver
receiver com.xiaomi.push.service.receivers.NetworkStatusReceiver
receiver cn.jpush.android.service.PluginXiaomiPlatformsReceiver

建议:
(1)最小化组件暴露。对不会参与跨应用调用的组件建议显示添加android:exported="false"属性。
(2)设置组件访问权限。对provider设置权限,同时将权限的protectionLevel设置为"signature"或"signatureOrSystem"。
(3)组件传输数据验证。对组件之间,特别是跨应用的组件之间的数据传入与返回做验证和增加异常处理,防止恶意调试数据传入,更要防止敏感数据返回。

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0169746
http://www.wooyun.org/bugs/wooyun-2010-0104965

参考资料:
http://jaq.alibaba.com/blog.htm?spm=0.0.0.0.Wz4OeC&id=55
《Android安全技术解密与防范》

警告

检测到2个导出的隐式Service组件。
service cn.jpush.android.service.DaemonService
service com.mosoink.teach.PushService

建议:为了确保应用的安全性,启动Service时,请始终使用显式Intent,且不要为服务声明Intent过滤器。使用隐式Intent启动服务存在安全隐患,因为您无法确定哪些服务将响应Intent,且用户无法看到哪些服务已启动。从Android 5.0(API 级别 21)开始,如果使用隐式 Intent 调用 bindService(),系统会抛出异常。

参考资料:
https://developer.android.com/guide/components/intents-filters.html#Types

警告

检测1处組件設置了android.intent.category.BROWSABLE属性。
com.tencent.tauth.AuthActivity


在AndroidManifest文件中定义了android.intent.category.BROWSABLE属性的组件,可以通过浏览器唤起,这会导致远程命令执行漏洞攻击。建议:
(1)APP中任何接收外部输入数据的地方都是潜在的攻击点,过滤检查来自网页的参数。
(2)不要通过网页传输敏感信息,有的网站为了引导已经登录的用户到APP上使用,会使用脚本动态的生成URL Scheme的参数,其中包括了用户名、密码或者登录态token等敏感信息,让用户打开APP直接就登录了。恶意应用也可以注册相同的URL Sechme来截取这些敏感信息。Android系统会让用户选择使用哪个应用打开链接,但是如果用户不注意,就会使用恶意应用打开,导致敏感信息泄露或者其他风险。

參考案例:
http://www.wooyun.org/bugs/wooyun-2014-073875
http://www.wooyun.org/bugs/wooyun-2014-067798

参考资料:
http://wolfeye.baidu.com/blog/intent-scheme-url/
http://www.jssec.org/dl/android_securecoding_en.pdf
http://drops.wooyun.org/mobile/15202
http://blog.csdn.net/l173864930/article/details/36951805
http://drops.wooyun.org/papers/2893

警告

检测到1潜在的XSS漏洞。

位置: classes.dex
com.tencent.bugly.yaq.crashreport.CrashReport$1;->setJavaScriptEnabled(Z)V

允许WebView执行JavaScript(setJavaScriptEnabled),有可能导致XSS攻击。建议尽量避免使用。
(1)API等于高高于17的Android系统。出于安全考虑,为了防止Java层的函数被随意调用,Google在4.2版本之后,规定允许被调用的函数必须以@JavascriptInterface进行注解。
(2)API等于高高于17的Android系统。建议不要使用addJavascriptInterface接口,以免带来不必要的安全隐患,如果一定要使用该接口,建议使用证书校验。
u(3)使用removeJavascriptInterface移除Android系统内部的默认内置接口:searchBoxJavaBridge_、accessibility、accessibilityTraversal。

参考案例:
www.wooyun.org/bugs/wooyun-2015-0140708
www.wooyun.org/bugs/wooyun-2016-0188252

参考资料:
http://jaq.alibaba.com/blog.htm?id=48
http://blog.nsfocus.net/android-webview-remote-code-execution-vulnerability-analysis

警告

检测到5处IvParameterSpec的使用。

位置: classes.dex
com.tencent.bugly.yaq.proguard.ae;->a([B)[B
com.tencent.bugly.yaq.proguard.ae;->b([B)[B
com.tencent.bugly.yaq.proguard.af;->a([B)[B
com.tencent.bugly.yaq.proguard.af;->b([B)[B
com.tencent.bugly.yaq.proguard.z;->a(I [B [B)[B

使用IVParameterSpec函数,如果使用了固定的初始化向量,那么密码文本可预测性高得多,容易受到字典攻击等。建议禁止使用常量初始化矢量构造IVParameterSpec,使用聚安全提供的安全组件。

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

警告

检测到3处使用了加解密算法。密钥处理不当可能会导致信息泄露。

位置: classes.dex
com.tencent.bugly.yaq.proguard.z;->a(I [B [B)[B
com.tencent.bugly.yaq.proguard.ae;->b([B)[B
com.tencent.bugly.yaq.proguard.ae;->a([B)[B

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0105766
http://www.wooyun.org/bugs/wooyun-2015-0162907
http://www.wooyun.org/bugs/wooyun-2010-0187287

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html


动态扫描发现风险点

风险等级 风险名称

服务端分析

风险等级 风险名称

警告

检测到?处XSS漏洞。
开发中...

警告

检测到?处XSS跨站漏洞。
开发中...

应用证书