0

高危漏洞

4

中危漏洞

2

低危漏洞

6

警告

文件名 Mysplash.3.6.4.apk
上传者 always
文件大小 4.5613594055176MB
MD5 33d99d7bfff7e91e3cf3854915490ec8
包名 com.wangdaye.mysplash
Main Activity com.wangdaye.mysplash.main.MainActivity
Min SDK 19
Target SDK 28

权限列表

# 名称 说明 提示
0 android.permission.RECEIVE_BOOT_COMPLETED 允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间,而且如果应用程序一直运行,会降低手机的整体速度。 注意
1 android.permission.ACCESS_NETWORK_STATE 允许应用程序查看所有网络的状态。 提示
2 android.permission.INTERNET 允许程序访问网络. 提示
3 android.permission.MOUNT_UNMOUNT_FILESYSTEMS 允许应用程序装载和卸载可移动存储器的文件系统。 提示
4 android.permission.SET_WALLPAPER 允许应用程序设置系统壁纸。 提示
5 android.permission.SET_WALLPAPER_HINTS 允许应用程序设置有关壁纸大小的提示。 提示
6 android.permission.WAKE_LOCK 允许应用程序防止手机进入休眠状态。 提示
7 android.permission.WRITE_EXTERNAL_STORAGE 允许应用程序写入SD卡。 提示

四大组件

组件名称

com.wangdaye.mysplash.main.MainActivity
com.wangdaye.mysplash.search.ui.SearchActivity
com.wangdaye.mysplash.photo3.ui.PhotoActivity3
com.wangdaye.mysplash.common.ui.activity.PreviewActivity
com.wangdaye.mysplash.collection.ui.CollectionActivity
com.wangdaye.mysplash.user.ui.UserActivity
com.wangdaye.mysplash.common.ui.activity.LoginActivity
com.wangdaye.mysplash.me.ui.MeActivity
com.wangdaye.mysplash.me.ui.MyFollowActivity
com.wangdaye.mysplash.common.ui.activity.UpdateMeActivity
com.wangdaye.mysplash.common.ui.activity.DownloadManageActivity
com.wangdaye.mysplash.common.ui.activity.SettingsActivity
com.wangdaye.mysplash.about.ui.AboutActivity
com.wangdaye.mysplash.common.ui.activity.IntroduceActivity
com.wangdaye.mysplash.common.ui.activity.CustomApiActivity
com.wangdaye.mysplash.common.ui.activity.SetWallpaperActivity
com.wangdaye.mysplash.common.ui.activity.muzei.MuzeiSettingsActivity
com.wangdaye.mysplash.common.ui.activity.muzei.MuzeiCollectionSourceConfigActivity
com.wangdaye.mysplash.common.ui.activity.invisible.RestartActivity
com.wangdaye.mysplash.common.ui.activity.invisible.DispatchBrowserActionActivity

com.wangdaye.mysplash.common.muzei.MysplashMuzeiArtSource
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
com.liulishuo.filedownloader.services.FileDownloadService$SharedMainProcessService
com.liulishuo.filedownloader.services.FileDownloadService$SeparateProcessService

com.wangdaye.mysplash.common.download.DownloadReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

com.wangdaye.mysplash.common.muzei.MysplashMuzeiArtProvider
androidx.core.content.FileProvider
androidx.work.impl.WorkManagerInitializer
androidx.lifecycle.ProcessLifecycleOwnerInitializer

第三方库

# 库名 介绍
0 retrofit2 Type-safe REST client for Android and Java by Square, Inc.
1 okhttp3 An HTTP+SPDY client for Android and Java applications.
2 com.bumptech.glide An image loading and caching library for Android focused on smooth scrolling
3 butterknife View "injection" library for Android.
4 dagger A fast dependency injector for Android and Java.
5 com.google.gson A Java serialization library that can convert Java Objects into JSON and back.

静态扫描发现风险点

风险等级 风险名称

中危

检测到当前标志被设置成true或没设置,这会导致adb调试备份允许恶意攻击者复制应用程序数据,造成数据泄露。

中危

该app需要移除大部分日志打印代码。
经扫描该包仍存在大量打日志代码,共发现176处打日志代码.(此处扫描的日志打印代码,是指调用android.util.Log.* 打印的.)
详情如下:

位置: classes.dex
androidx.fragment.app.FragmentActivity;->onActivityResult(I I Landroid/content/Intent;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.content.a.f;->a(Landroid/content/Context; Landroid/content/res/Resources; Landroid/util/TypedValue; I I Landroidx/core/content/a/f$a; Landroid/os/Handler; Z)Landroid/graphics/Typeface;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.app.AppCompatDelegateImpl;->l(I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.swiperefreshlayout.widget.SwipeRefreshLayout;->onInterceptTouchEvent(Landroid/view/MotionEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.MediaBrowserServiceCompat$d$5;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.app.AppCompatViewInflater;->themifyContext(Landroid/content/Context; Landroid/util/AttributeSet; Z Z)Landroid/content/Context;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.loader.a.b$b;->b()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.z;->a(Ljava/lang/String;)Landroid/graphics/drawable/Drawable;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->k(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.wangdaye.mysplash.common.c.g;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView$r;->d(I)Landroid/graphics/PointF;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView;->scrollTo(I I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.MediaBrowserServiceCompat$d$8;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.transition.ad;->a()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.work.h$a;->e(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Throwable;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.customview.a.c;->g(I)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.FragmentActivity;->onCreate(Landroid/os/Bundle;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.work.h$a;->b(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Throwable;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.b.a.f;->b(I I Landroid/graphics/Bitmap$Config;)Landroid/graphics/Bitmap;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.z;->b(Landroid/net/Uri;)Landroid/graphics/drawable/Drawable;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.coordinatorlayout.widget.CoordinatorLayout;->a(Landroid/view/View;)Landroidx/coordinatorlayout/widget/CoordinatorLayout$e;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.ag;->f()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->a(Landroidx/fragment/app/Fragment; I I I Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.preference.SeekBarPreference$2;->onKey(Landroid/view/View; I Landroid/view/KeyEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.h.g;->a(Landroid/view/MenuItem; Landroidx/core/h/b;)Landroid/view/MenuItem;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.session.MediaButtonReceiver;->a(Landroid/content/Context;)Landroid/content/ComponentName;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.view.g$b;->a(Landroid/view/MenuItem;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.i.a;->b()[B==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.preference.PreferenceGroup;->c(Landroidx/preference/Preference;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView;->b(I I)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.aj;->a(Landroid/view/View; I I Z Landroid/view/WindowManager$LayoutParams;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.b.b.i;->(Landroid/content/Context; Landroid/app/ActivityManager; Lcom/bumptech/glide/load/b/b/i$b;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView;->s()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.MediaBrowserServiceCompat$d$6;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.AppCompatSpinner$a;->a(Landroid/graphics/drawable/Drawable;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.d.k;->handleMessage(Landroid/os/Message;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.transition.y;->a(Landroid/animation/LayoutTransition;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.work.h$a;->a(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Throwable;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView;->onTouchEvent(Landroid/view/MotionEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->n(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.widget.NestedScrollView;->onInterceptTouchEvent(Landroid/view/MotionEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->a(Ljava/lang/RuntimeException;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.z;->b(Landroid/content/ComponentName;)Landroid/graphics/drawable/Drawable;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView;->a(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.b.a.f;->a(I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.a;->a(Z)I==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.h.b;->a(Landroidx/core/h/b$b;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.b.a;->f()Landroid/graphics/Bitmap;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->a(Landroidx/fragment/app/Fragment; Z)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.app.AppCompatDelegateImpl;->e(I Landroid/view/KeyEvent;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.resource.c.j;->a(Lcom/bumptech/glide/load/b/k; Ljava/io/OutputStream;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.session.MediaButtonReceiver;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.FragmentState;->a(Ljava/lang/ClassLoader; Landroidx/fragment/app/e;)Landroidx/fragment/app/Fragment;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.transition.y;->a(Landroid/view/ViewGroup; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.h.v;->d(Landroid/view/ViewConfiguration; Landroid/content/Context;)F==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView$LayoutManager;->c(Landroidx/recyclerview/widget/RecyclerView$o; Landroidx/recyclerview/widget/RecyclerView$s;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.app.i;->a()Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView$r$a;->a(Landroidx/recyclerview/widget/RecyclerView;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.b.i;->e()Lcom/bumptech/glide/load/b/k;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.wangdaye.mysplash.common.db.DaoMaster$OpenHelper;->onCreate(Lorg/a/a/b/a;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
org.a.a.e;->b(Ljava/lang/String;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.g.b.k$a$a;->onPreDraw()Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.graphics.f;->b()Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.preference.g;->a(Landroidx/preference/Preference;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.preference.SeekBarPreference;->a(Landroidx/preference/l;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.al;->()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.z;->a(Landroid/database/Cursor;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.loader.a.b$a;->a(Z)Landroidx/loader/b/a;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.f.a.c$a;->d(Landroidx/f/a/b;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.resource.bitmap.q;->a(Landroid/graphics/Bitmap; Lcom/bumptech/glide/load/b/a/c; I I)Landroid/graphics/Bitmap;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.MediaBrowserServiceCompat$1;->a(Ljava/util/List;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.MenuPopupWindow;->c(Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.SearchView;->h()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.g;->a(Ljava/lang/Class; Ljava/lang/Class; Landroid/content/Context;)Lcom/bumptech/glide/load/c/l;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.MediaBrowserServiceCompat$d$1;->run()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.ai;->a()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.MediaBrowserServiceCompat$1;->a(Ljava/util/List;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.b.a.f;->a()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.GridLayoutManager;->c(Landroidx/recyclerview/widget/RecyclerView$o; Landroidx/recyclerview/widget/RecyclerView$s; I)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.u;->()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.app.f;->a(Landroid/app/Activity;)Landroid/content/Intent;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.MenuPopupWindow;->()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->a(I Landroidx/fragment/app/a;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView;->onInterceptTouchEvent(Landroid/view/MotionEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView;->a(I I Landroid/view/animation/Interpolator;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.loader.a.b$b;->onChanged(Ljava/lang/Object;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView;->scrollBy(I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->onCreateView(Landroid/view/View; Ljava/lang/String; Landroid/content/Context; Landroid/util/AttributeSet;)Landroid/view/View;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->l()Landroid/os/Parcelable;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.resource.bitmap.ImageHeaderParser;->a(Lcom/bumptech/glide/load/resource/bitmap/ImageHeaderParser$a;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
dagger.android.support.a;->a(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView$v;->c(Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.resource.bitmap.n;->a(Ljava/io/InputStream; [B)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.b.a.f;->d()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.FragmentActivity;->onRequestPermissionsResult(I [Ljava/lang/String; [I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.u;->n()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
butterknife.ButterKnife;->bind(Ljava/lang/Object; Landroid/view/View;)Lbutterknife/Unbinder;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->a(Landroidx/fragment/app/Fragment; I I I Z)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.widget.i;->a(Ljava/lang/reflect/Field; Landroid/widget/TextView;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView$r;->a(Landroidx/recyclerview/widget/RecyclerView; Landroidx/recyclerview/widget/RecyclerView$LayoutManager;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.a.f;->a(Ljava/net/HttpURLConnection;)Ljava/io/InputStream;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.f.a.c$a;->a(Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.MediaBrowserServiceCompat$d$4;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->j(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.swiperefreshlayout.widget.SwipeRefreshLayout;->onTouchEvent(Landroid/view/MotionEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.room.c;->a(Landroidx/f/a/b;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.b.c;->a(Ljava/lang/String; J Lcom/bumptech/glide/load/c;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.app.AppCompatDelegateImpl;->h()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.g.b;->a()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->c(I)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.lifecycle.k;->d()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.viewpager.widget.ViewPager;->setOffscreenPageLimit(I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.AppCompatSpinner$a;->b(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.loader.a.b$a;->c()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.slidingpanelayout.widget.SlidingPaneLayout;->onMeasure(I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.ag;->g()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->a(Landroid/os/Parcelable;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.g.b;->a(Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.w;->a(Landroid/graphics/drawable/Drawable; Landroidx/appcompat/widget/ad; [I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
butterknife.ButterKnife;->findBindingConstructorForClass(Ljava/lang/Class;)Ljava/lang/reflect/Constructor;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.BackStackState;->a(Landroidx/fragment/app/h;)Landroidx/fragment/app/a;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.room.c;->a()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.c.a;->c()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.a;->b(I)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.GridLayoutManager;->a(Landroidx/recyclerview/widget/RecyclerView$o; Landroidx/recyclerview/widget/RecyclerView$s; I)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.al;->b(Landroid/view/View;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
org.a.a.e;->c(Ljava/lang/String;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.GridLayoutManager;->b(Landroidx/recyclerview/widget/RecyclerView$o; Landroidx/recyclerview/widget/RecyclerView$s; I)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.preference.ListPreference;->n()Ljava/lang/CharSequence;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.b.a.f;->a(Landroid/graphics/Bitmap;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.app.m;->a(Landroid/content/ComponentName;)Landroidx/core/app/m;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.graphics.i;->a(Ljava/io/File; Ljava/io/InputStream;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView;->a(J Landroidx/recyclerview/widget/RecyclerView$v; Landroidx/recyclerview/widget/RecyclerView$v;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView;->c(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.viewpager.widget.ViewPager;->c(I)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->l(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->p(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.u;->c(Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.a;->a(Ljava/util/ArrayList; Ljava/util/ArrayList;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.widget.NestedScrollView;->onTouchEvent(Landroid/view/MotionEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.b.a.f;->b(I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.f.a.c$a;->a(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->o(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->m(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.h.v;->()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.wangdaye.mysplash.common.db.MysplashOpenHelper;->onUpgrade(Lorg/a/a/b/a; I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.b.a.f;->b(I I Landroid/graphics/Bitmap$Config;)Landroid/graphics/Bitmap;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.app.j;->a(Landroid/app/Notification;)Landroid/os/Bundle;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView$r;->a(I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.u;->a(Landroid/view/View; I Z)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.MediaBrowserServiceCompat$d$9;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.work.h$a;->c(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Throwable;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.wangdaye.mysplash.common.db.DaoMaster$DevOpenHelper;->onUpgrade(Lorg/a/a/b/a; I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.AppCompatSpinner$a;->a(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.fragment.app.h;->a(Landroidx/fragment/app/a;)I==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.graphics.b$b;->a(Landroid/graphics/Path; F F F F F F F Z Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.view.g$b;->b(Landroid/util/AttributeSet;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.coordinatorlayout.widget.CoordinatorLayout;->b(I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.b.a.f;->b(I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.work.h$a;->d(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Throwable;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.MediaBrowserServiceCompat$d$3;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.MediaBrowserServiceCompat$g;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.widget.i;->a(Ljava/lang/String;)Ljava/lang/reflect/Field;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.room.e$d;->a(Landroidx/room/a/a;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.loader.a.b$a;->b()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
androidx.preference.PreferenceGroup;->g(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView$LayoutManager;->a(Landroidx/recyclerview/widget/RecyclerView; Landroidx/recyclerview/widget/RecyclerView$s; I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.widget.q;->a(Landroid/graphics/drawable/Drawable;)Landroid/graphics/Rect;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
androidx.media.MediaBrowserServiceCompat$d$1;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.b.a;->a(Ljava/lang/String; J)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
org.a.a.e;->a(Ljava/lang/String;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
androidx.core.graphics.e;->a()Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.recyclerview.widget.RecyclerView;->setScrollingTouchSlop(I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
androidx.appcompat.app.d;->d(I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.resource.bitmap.b;->a(Lcom/bumptech/glide/load/b/k; Ljava/io/OutputStream;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.resource.bitmap.ImageHeaderParser;->d()[B==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

中危

检测到67条敏感明文信息,建议移除。

位置: classes.dex
'fedec96@gmail.com' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'http://localhost/' used in: Lretrofit2/Response;->success(Ljava/lang/Object; Lokhttp3/Headers;)Lretrofit2/Response;
'http://localhost/' used in: Lretrofit2/Response;->success(Ljava/lang/Object;)Lretrofit2/Response;
'http://localhost/' used in: Lretrofit2/Response;->error(I Lokhttp3/ResponseBody;)Lretrofit2/Response;
'http://localhost/' used in: Lretrofit2/Response;->success(I Ljava/lang/Object;)Lretrofit2/Response;
'http://schemas.android.com/apk/res-auto' used in: Lcom/google/android/material/chip/a;->a(Landroid/util/AttributeSet; I I)V
'http://schemas.android.com/apk/res/android' used in: Landroidx/core/content/a/g;->a(Lorg/xmlpull/v1/XmlPullParser; Ljava/lang/String;)Z
'http://schemas.android.com/apk/res/android' used in: Lcom/google/android/material/chip/Chip;->a(Landroid/util/AttributeSet;)V
'https://api.getstream.io/' used in: Lcom/wangdaye/mysplash/common/network/d/h;->(Lokhttp3/OkHttpClient; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://api.unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/o;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://api.unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/j;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://api.unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/b;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://api.unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/l;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://api.unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/n;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://avatars0.githubusercontent.com/u/3891063?v=3&s=400' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://avatars1.githubusercontent.com/u/22525368?v=3&s=400' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://avatars2.githubusercontent.com/u/14093922?v=3&s=460' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://avatars2.githubusercontent.com/u/22666602?v=3&s=460' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://avatars2.githubusercontent.com/u/8462938?v=3&s=460' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/Bakumon/NumberAnimTextView' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/DavidPacioianu/InkPageIndicator' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/JakeWharton/butterknife' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/OffifialMITX' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/ReactiveX/RxAndroid' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/ReactiveX/RxJava' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/Ulop' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/WangDaYeeeeee' used in: Lcom/wangdaye/mysplash/about/ui/holder/AppHolder;->clickItem()V
'https://github.com/WangDaYeeeeee/MySplash' used in: Lcom/wangdaye/mysplash/about/ui/holder/AppHolder;->clickItem()V
'https://github.com/bm-x/PhotoView' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/bumptech/glide' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/google/dagger' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/greenrobot/greenDAO' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/hdodenhof/CircleImageView' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/lingochamp/FileDownloader' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/mueller-ma' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/naofum' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/rahatarmanahmed/CircularProgressView' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/square/retrofit' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/valentind44' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://github.com/zhihu/RxLifecycle' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://images.unsplash.com/photo-1451847487946-99830706c22d?ixlib=rb-0.3.5&q=80&fm=jpg&crop=entropy&cs=tinysrgb&w=1080&fit=max&s=334b584fa099b256b9e755cd3b75fd45' used in: Lcom/wangdaye/mysplash/common/db/WallpaperSource;->mysplashSource()Lcom/wangdaye/mysplash/common/db/WallpaperSource;
'https://images.unsplash.com/photo-1544979407-1204ff29f490?ixlib=rb-0.3.5&q=80&fm=jpg&crop=entropy&cs=tinysrgb&w=1080&fit=max&s=334b584fa099b256b9e755cd3b75fd45' used in: Lcom/wangdaye/mysplash/common/db/WallpaperSource;->unsplashSource()Lcom/wangdaye/mysplash/common/db/WallpaperSource;
'https://lh3.googleusercontent.com/-G62rc78uq2Q/AAAAAAAAAAI/AAAAAAAAB14/IDC70nBA63U/s128-p-k-rw-no/photo.jpg' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://lh3.googleusercontent.com/-zf-IZfbNHg4/AAAAAAAAAAI/AAAAAAAANfM/-0-pEtFp5a8/s60-p-rw-no/photo.jpg' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://lh3.googleusercontent.com/3fnKvLj0v3uhsxzSDBwUBzN-ppW9LbaAi7opuGqav7QEIDd5Kl0Fm5GYTPX6oQ-wSb_9FFo7PD2WPg=w1920-h1080-rw-no' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://plus.google.com/+SakshamBarsaiyan' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://qr.alipay.com/a6x003871ksdfhcaplh7iab' used in: Lcom/wangdaye/mysplash/common/c/b/b;->a(Landroid/content/Context;)V
'https://ssl.gstatic.com/bt/C3341AA7A1A076756462EE2E5CD71C11/avatars/avatar_tile_s_80.png' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'https://unsplash.com' used in: Lcom/wangdaye/mysplash/common/network/b/d;->intercept(Lokhttp3/Interceptor$Chain;)Lokhttp3/Response;
'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/b/d;->intercept(Lokhttp3/Interceptor$Chain;)Lokhttp3/Response;
'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/j;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/o;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/f;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/b;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/i;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/a;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/l;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/d;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V
'https://unsplash.com/@' used in: Lcom/wangdaye/mysplash/common/c/h;->a(Lcom/wangdaye/mysplash/common/network/json/User;)V
'https://unsplash.com/collections/' used in: Lcom/wangdaye/mysplash/common/c/h;->a(Lcom/wangdaye/mysplash/common/network/json/Collection;)V
'https://unsplash.com/collections/curated/' used in: Lcom/wangdaye/mysplash/common/c/h;->a(Lcom/wangdaye/mysplash/common/network/json/Collection;)V
'https://unsplash.com/join' used in: Lcom/wangdaye/mysplash/common/ui/activity/LoginActivity;->join()V
'https://unsplash.com/oauth/authorize?client_id=' used in: Lcom/wangdaye/mysplash/Mysplash;->c(Landroid/content/Context;)Ljava/lang/String;
'https://unsplash.com/photos/' used in: Lcom/wangdaye/mysplash/common/c/h;->a(Lcom/wangdaye/mysplash/common/network/json/Photo;)V
'https://unsplash.com/submit' used in: Lcom/wangdaye/mysplash/me/ui/MeActivity;->h(I)V
'memcos@gmail.com' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;
'oton.translator@gmail.com' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

中危

检测到1使用全局可读写操作文件。

位置: classes.dex
androidx.preference.j;->c()Landroid.content.SharedPreferences;===>getSharedPreferences

在使用getDir、getSharedPreferences(SharedPreference)或openFileOutput时,如果设置了全局的可读权限,攻击者恶意读取文件内容,获取敏感信息。在设置文件属性时如果设置全局可写,攻击者可能会篡改、伪造内容,可以能会进行诈骗等行为,造成用户财产损失。建议:
(1)使用MODE_PRIVATE模式创建内部存储文件。
(2)加密存储敏感数据。
(3)避免在文件中存储明文和敏感信息。

参考案例:
http://wooyun.org/bugs/wooyun-2010-047172
http://wooyun.org/bugs/wooyun-2010-054438
http://wooyun.org/bugs/wooyun-2010-0151270

参考资料:
https://jaq.alibaba.com/blog.htm?id=56
https://jaq.alibaba.com/blog.htm?id=58
http://wolfeye.baidu.com/blog/global-rw-of-file
http://wolfeye.baidu.com/blog/global-rw-of-sharepreference/

低危

检测3处Intent Scheme URI漏洞。

位置: classes.dex
Lcom/google/android/apps/muzei/api/Artwork;->fromBundle(Landroid/os/Bundle;)Lcom/google/android/apps/muzei/api/Artwork;
Lcom/google/android/apps/muzei/api/Artwork;->fromCursor(Landroid/database/Cursor;)Lcom/google/android/apps/muzei/api/Artwork;
Lcom/google/android/apps/muzei/api/Artwork;->fromJson(Lorg/json/JSONObject;)Lcom/google/android/apps/muzei/api/Artwork;


Intent Scheme URI是一种特殊的URL格式,用来通过Web页面启动已安装应用的Activity组件,大多数主流浏览器都支持此功能。如果在app中,没有检查获取到的load_url的值,攻击者可以构造钓鱼网站,诱导用户点击加载,就可以盗取用户信息。所以,对Intent URI的处理不当时,就会导致基于Intent的攻击。建议:
如果使用了Intent.parseUri函数,获取的intent必须严格过滤,intent至少包含addCategory(“android.intent.category.BROWSABLE”),setComponent(null),setSelector(null)3个策略。

参考资料:
http://wolfeye.baidu.com/blog/intent-scheme-url/
http://drops.wooyun.org/papers/2893
http://drops.wooyun.org/mobile/15202

低危

非debug包,需要通过打包平台proguard脚本,移除大部分系统输出代码。
经扫描该包仍存在大量系统输出代码,共发现2处系统输出代码.(此处扫描的系统输出代码,是指调用System.out.print*输出的,本应在打包平台移除的系统输出代码.)
各个bundle系统输出代码详情如下:

位置: classes.dex
b.a.c.a$c;
com.bumptech.glide.a.a;

警告

检测到8处addFlags使用Intent.FLAG_ACTIVITY_NEW_TASK。

位置: classes.dex
androidx.core.app.m;->a
com.wangdaye.mysplash.common.c.b.c;->b
com.wangdaye.mysplash.common.c.b.c;->a
androidx.appcompat.widget.SearchView;->
androidx.appcompat.widget.SearchView;->a
com.wangdaye.mysplash.common.download.a.b;->i
com.wangdaye.mysplash.common.download.a.b;->h
com.google.android.apps.muzei.api.provider.MuzeiArtProvider;->openArtworkInfo

APP创建Intent传递数据到其他Activity,如果创建的Activity不是在同一个Task中打开,就很可能被其他的Activity劫持读取到Intent内容,跨Task的Activity通过Intent传递敏感信息是不安全的。建议:
尽量避免使用包含FLAG_ACTIVITY_NEW_TASK标志的Intent来传递敏感信息。

参考资料:
http://wolfeye.baidu.com/blog/intent-data-leak

警告

检测到9个导出的组件接收其他app的消息,这些组件会被其他app引用并导致dos攻击。

activity com.wangdaye.mysplash.common.ui.activity.LoginActivity
activity com.wangdaye.mysplash.me.ui.MeActivity
activity com.wangdaye.mysplash.common.ui.activity.DownloadManageActivity
activity com.wangdaye.mysplash.common.ui.activity.SetWallpaperActivity
activity com.wangdaye.mysplash.common.ui.activity.muzei.MuzeiSettingsActivity
activity com.wangdaye.mysplash.common.ui.activity.muzei.MuzeiCollectionSourceConfigActivity
activity com.wangdaye.mysplash.common.ui.activity.invisible.DispatchBrowserActionActivity
service com.wangdaye.mysplash.common.muzei.MysplashMuzeiArtSource
receiver com.wangdaye.mysplash.common.download.DownloadReceiver

建议:
(1)最小化组件暴露。对不会参与跨应用调用的组件建议显示添加android:exported="false"属性。
(2)设置组件访问权限。对provider设置权限,同时将权限的protectionLevel设置为"signature"或"signatureOrSystem"。
(3)组件传输数据验证。对组件之间,特别是跨应用的组件之间的数据传入与返回做验证和增加异常处理,防止恶意调试数据传入,更要防止敏感数据返回。

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0169746
http://www.wooyun.org/bugs/wooyun-2010-0104965

参考资料:
http://jaq.alibaba.com/blog.htm?spm=0.0.0.0.Wz4OeC&id=55
《Android安全技术解密与防范》

警告

检测到1个导出的隐式Service组件。
service com.wangdaye.mysplash.common.muzei.MysplashMuzeiArtSource

建议:为了确保应用的安全性,启动Service时,请始终使用显式Intent,且不要为服务声明Intent过滤器。使用隐式Intent启动服务存在安全隐患,因为您无法确定哪些服务将响应Intent,且用户无法看到哪些服务已启动。从Android 5.0(API 级别 21)开始,如果使用隐式 Intent 调用 bindService(),系统会抛出异常。

参考资料:
https://developer.android.com/guide/components/intents-filters.html#Types

警告

检测2处組件設置了android.intent.category.BROWSABLE属性。
com.wangdaye.mysplash.common.ui.activity.LoginActivity
com.wangdaye.mysplash.common.ui.activity.invisible.DispatchBrowserActionActivity


在AndroidManifest文件中定义了android.intent.category.BROWSABLE属性的组件,可以通过浏览器唤起,这会导致远程命令执行漏洞攻击。建议:
(1)APP中任何接收外部输入数据的地方都是潜在的攻击点,过滤检查来自网页的参数。
(2)不要通过网页传输敏感信息,有的网站为了引导已经登录的用户到APP上使用,会使用脚本动态的生成URL Scheme的参数,其中包括了用户名、密码或者登录态token等敏感信息,让用户打开APP直接就登录了。恶意应用也可以注册相同的URL Sechme来截取这些敏感信息。Android系统会让用户选择使用哪个应用打开链接,但是如果用户不注意,就会使用恶意应用打开,导致敏感信息泄露或者其他风险。

參考案例:
http://www.wooyun.org/bugs/wooyun-2014-073875
http://www.wooyun.org/bugs/wooyun-2014-067798

参考资料:
http://wolfeye.baidu.com/blog/intent-scheme-url/
http://www.jssec.org/dl/android_securecoding_en.pdf
http://drops.wooyun.org/mobile/15202
http://blog.csdn.net/l173864930/article/details/36951805
http://drops.wooyun.org/papers/2893

警告

检测到1处provider的grantUriPermissions设置为true。
androidx.core.content.FileProvider


grant-uri-permission若设置为true,可被其它程序员通过uri访问到content provider的内容,容易造成信息泄露。

参考资料:
https://security.tencent.com/index.php/blog/msg/6

警告

检测到4处使用了加解密算法。密钥处理不当可能会导致信息泄露。

位置: classes.dex
okio.ByteString;->hmac(Ljava.lang.String; Lokio.ByteString;)Lokio.ByteString;
okio.HashingSource;->(Lokio.Source; Lokio.ByteString; Ljava.lang.String;)V
okio.Buffer;->hmac(Ljava.lang.String; Lokio.ByteString;)Lokio.ByteString;
okio.HashingSink;->(Lokio.Sink; Lokio.ByteString; Ljava.lang.String;)V

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0105766
http://www.wooyun.org/bugs/wooyun-2015-0162907
http://www.wooyun.org/bugs/wooyun-2010-0187287

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html


动态扫描发现风险点

风险等级 风险名称

服务端分析

风险等级 风险名称

警告

检测到?处XSS漏洞。
开发中...

警告

检测到?处XSS跨站漏洞。
开发中...

应用证书