Android审计平台,Android审计平台

中危

检测到当前标志被设置成true或没设置，这会导致adb调试备份允许恶意攻击者复制应用程序数据，造成数据泄露。

中危

该app需要移除大部分日志打印代码。

经扫描该包仍存在大量打日志代码，共发现176处打日志代码.(此处扫描的日志打印代码，是指调用android.util.Log.* 打印的.)

详情如下：

位置: classes.dex

androidx.fragment.app.FragmentActivity;->onActivityResult(I I Landroid/content/Intent;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.content.a.f;->a(Landroid/content/Context; Landroid/content/res/Resources; Landroid/util/TypedValue; I I Landroidx/core/content/a/f$a; Landroid/os/Handler; Z)Landroid/graphics/Typeface;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.app.AppCompatDelegateImpl;->l(I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.swiperefreshlayout.widget.SwipeRefreshLayout;->onInterceptTouchEvent(Landroid/view/MotionEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.MediaBrowserServiceCompat$d$5;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.app.AppCompatViewInflater;->themifyContext(Landroid/content/Context; Landroid/util/AttributeSet; Z Z)Landroid/content/Context;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.loader.a.b$b;->b()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.z;->a(Ljava/lang/String;)Landroid/graphics/drawable/Drawable;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->k(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

com.wangdaye.mysplash.common.c.g;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView$r;->d(I)Landroid/graphics/PointF;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView;->scrollTo(I I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.MediaBrowserServiceCompat$d$8;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.transition.ad;->a()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.work.h$a;->e(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Throwable;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.customview.a.c;->g(I)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.FragmentActivity;->onCreate(Landroid/os/Bundle;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.work.h$a;->b(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Throwable;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.b.a.f;->b(I I Landroid/graphics/Bitmap$Config;)Landroid/graphics/Bitmap;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.z;->b(Landroid/net/Uri;)Landroid/graphics/drawable/Drawable;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.coordinatorlayout.widget.CoordinatorLayout;->a(Landroid/view/View;)Landroidx/coordinatorlayout/widget/CoordinatorLayout$e;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.ag;->f()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->a(Landroidx/fragment/app/Fragment; I I I Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.preference.SeekBarPreference$2;->onKey(Landroid/view/View; I Landroid/view/KeyEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.h.g;->a(Landroid/view/MenuItem; Landroidx/core/h/b;)Landroid/view/MenuItem;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.session.MediaButtonReceiver;->a(Landroid/content/Context;)Landroid/content/ComponentName;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.view.g$b;->a(Landroid/view/MenuItem;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.i.a;->b()[B==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.preference.PreferenceGroup;->c(Landroidx/preference/Preference;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView;->b(I I)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.aj;->a(Landroid/view/View; I I Z Landroid/view/WindowManager$LayoutParams;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.b.b.i;->(Landroid/content/Context; Landroid/app/ActivityManager; Lcom/bumptech/glide/load/b/b/i$b;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView;->s()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.MediaBrowserServiceCompat$d$6;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.AppCompatSpinner$a;->a(Landroid/graphics/drawable/Drawable;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.d.k;->handleMessage(Landroid/os/Message;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.transition.y;->a(Landroid/animation/LayoutTransition;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.work.h$a;->a(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Throwable;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView;->onTouchEvent(Landroid/view/MotionEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->n(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.widget.NestedScrollView;->onInterceptTouchEvent(Landroid/view/MotionEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->a(Ljava/lang/RuntimeException;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.z;->b(Landroid/content/ComponentName;)Landroid/graphics/drawable/Drawable;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView;->a(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.b.a.f;->a(I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.a;->a(Z)I==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.h.b;->a(Landroidx/core/h/b$b;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.b.a;->f()Landroid/graphics/Bitmap;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->a(Landroidx/fragment/app/Fragment; Z)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.app.AppCompatDelegateImpl;->e(I Landroid/view/KeyEvent;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.resource.c.j;->a(Lcom/bumptech/glide/load/b/k; Ljava/io/OutputStream;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.session.MediaButtonReceiver;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.FragmentState;->a(Ljava/lang/ClassLoader; Landroidx/fragment/app/e;)Landroidx/fragment/app/Fragment;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.transition.y;->a(Landroid/view/ViewGroup; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.h.v;->d(Landroid/view/ViewConfiguration; Landroid/content/Context;)F==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView$LayoutManager;->c(Landroidx/recyclerview/widget/RecyclerView$o; Landroidx/recyclerview/widget/RecyclerView$s;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.app.i;->a()Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView$r$a;->a(Landroidx/recyclerview/widget/RecyclerView;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.b.i;->e()Lcom/bumptech/glide/load/b/k;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

com.wangdaye.mysplash.common.db.DaoMaster$OpenHelper;->onCreate(Lorg/a/a/b/a;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

org.a.a.e;->b(Ljava/lang/String;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.g.b.k$a$a;->onPreDraw()Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.graphics.f;->b()Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.preference.g;->a(Landroidx/preference/Preference;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.preference.SeekBarPreference;->a(Landroidx/preference/l;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.al;->()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.z;->a(Landroid/database/Cursor;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.loader.a.b$a;->a(Z)Landroidx/loader/b/a;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.f.a.c$a;->d(Landroidx/f/a/b;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.resource.bitmap.q;->a(Landroid/graphics/Bitmap; Lcom/bumptech/glide/load/b/a/c; I I)Landroid/graphics/Bitmap;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.MediaBrowserServiceCompat$1;->a(Ljava/util/List;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.MenuPopupWindow;->c(Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.SearchView;->h()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.g;->a(Ljava/lang/Class; Ljava/lang/Class; Landroid/content/Context;)Lcom/bumptech/glide/load/c/l;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.MediaBrowserServiceCompat$d$1;->run()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.ai;->a()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.MediaBrowserServiceCompat$1;->a(Ljava/util/List;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.b.a.f;->a()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.GridLayoutManager;->c(Landroidx/recyclerview/widget/RecyclerView$o; Landroidx/recyclerview/widget/RecyclerView$s; I)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.u;->()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.app.f;->a(Landroid/app/Activity;)Landroid/content/Intent;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.MenuPopupWindow;->()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->a(I Landroidx/fragment/app/a;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView;->onInterceptTouchEvent(Landroid/view/MotionEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView;->a(I I Landroid/view/animation/Interpolator;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.loader.a.b$b;->onChanged(Ljava/lang/Object;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView;->scrollBy(I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->onCreateView(Landroid/view/View; Ljava/lang/String; Landroid/content/Context; Landroid/util/AttributeSet;)Landroid/view/View;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->l()Landroid/os/Parcelable;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.resource.bitmap.ImageHeaderParser;->a(Lcom/bumptech/glide/load/resource/bitmap/ImageHeaderParser$a;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

dagger.android.support.a;->a(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView$v;->c(Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.resource.bitmap.n;->a(Ljava/io/InputStream; [B)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.b.a.f;->d()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.FragmentActivity;->onRequestPermissionsResult(I [Ljava/lang/String; [I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.u;->n()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

butterknife.ButterKnife;->bind(Ljava/lang/Object; Landroid/view/View;)Lbutterknife/Unbinder;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->a(Landroidx/fragment/app/Fragment; I I I Z)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.widget.i;->a(Ljava/lang/reflect/Field; Landroid/widget/TextView;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView$r;->a(Landroidx/recyclerview/widget/RecyclerView; Landroidx/recyclerview/widget/RecyclerView$LayoutManager;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.a.f;->a(Ljava/net/HttpURLConnection;)Ljava/io/InputStream;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.f.a.c$a;->a(Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.MediaBrowserServiceCompat$d$4;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->j(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.swiperefreshlayout.widget.SwipeRefreshLayout;->onTouchEvent(Landroid/view/MotionEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.room.c;->a(Landroidx/f/a/b;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.b.c;->a(Ljava/lang/String; J Lcom/bumptech/glide/load/c;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.app.AppCompatDelegateImpl;->h()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.g.b;->a()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->c(I)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.lifecycle.k;->d()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.viewpager.widget.ViewPager;->setOffscreenPageLimit(I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.AppCompatSpinner$a;->b(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.loader.a.b$a;->c()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.slidingpanelayout.widget.SlidingPaneLayout;->onMeasure(I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.ag;->g()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->a(Landroid/os/Parcelable;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.g.b;->a(Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.w;->a(Landroid/graphics/drawable/Drawable; Landroidx/appcompat/widget/ad; [I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

butterknife.ButterKnife;->findBindingConstructorForClass(Ljava/lang/Class;)Ljava/lang/reflect/Constructor;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.BackStackState;->a(Landroidx/fragment/app/h;)Landroidx/fragment/app/a;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.room.c;->a()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.c.a;->c()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.a;->b(I)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.GridLayoutManager;->a(Landroidx/recyclerview/widget/RecyclerView$o; Landroidx/recyclerview/widget/RecyclerView$s; I)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.al;->b(Landroid/view/View;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

org.a.a.e;->c(Ljava/lang/String;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.GridLayoutManager;->b(Landroidx/recyclerview/widget/RecyclerView$o; Landroidx/recyclerview/widget/RecyclerView$s; I)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.preference.ListPreference;->n()Ljava/lang/CharSequence;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.b.a.f;->a(Landroid/graphics/Bitmap;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.app.m;->a(Landroid/content/ComponentName;)Landroidx/core/app/m;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.graphics.i;->a(Ljava/io/File; Ljava/io/InputStream;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView;->a(J Landroidx/recyclerview/widget/RecyclerView$v; Landroidx/recyclerview/widget/RecyclerView$v;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView;->c(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.viewpager.widget.ViewPager;->c(I)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->l(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->p(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.u;->c(Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.a;->a(Ljava/util/ArrayList; Ljava/util/ArrayList;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.widget.NestedScrollView;->onTouchEvent(Landroid/view/MotionEvent;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.b.a.f;->b(I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.f.a.c$a;->a(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->o(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->m(Landroidx/fragment/app/Fragment;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.h.v;->()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

com.wangdaye.mysplash.common.db.MysplashOpenHelper;->onUpgrade(Lorg/a/a/b/a; I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.b.a.f;->b(I I Landroid/graphics/Bitmap$Config;)Landroid/graphics/Bitmap;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.app.j;->a(Landroid/app/Notification;)Landroid/os/Bundle;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView$r;->a(I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.u;->a(Landroid/view/View; I Z)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.MediaBrowserServiceCompat$d$9;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.work.h$a;->c(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Throwable;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

com.wangdaye.mysplash.common.db.DaoMaster$DevOpenHelper;->onUpgrade(Lorg/a/a/b/a; I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.AppCompatSpinner$a;->a(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.fragment.app.h;->a(Landroidx/fragment/app/a;)I==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.graphics.b$b;->a(Landroid/graphics/Path; F F F F F F F Z Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.view.g$b;->b(Landroid/util/AttributeSet;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.coordinatorlayout.widget.CoordinatorLayout;->b(I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.b.a.f;->b(I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.work.h$a;->d(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Throwable;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.MediaBrowserServiceCompat$d$3;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.MediaBrowserServiceCompat$g;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.widget.i;->a(Ljava/lang/String;)Ljava/lang/reflect/Field;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.room.e$d;->a(Landroidx/room/a/a;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.loader.a.b$a;->b()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

androidx.preference.PreferenceGroup;->g(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView$LayoutManager;->a(Landroidx/recyclerview/widget/RecyclerView; Landroidx/recyclerview/widget/RecyclerView$s; I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.widget.q;->a(Landroid/graphics/drawable/Drawable;)Landroid/graphics/Rect;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

androidx.media.MediaBrowserServiceCompat$d$1;->run()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.b.a;->a(Ljava/lang/String; J)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

org.a.a.e;->a(Ljava/lang/String;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

androidx.core.graphics.e;->a()Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.recyclerview.widget.RecyclerView;->setScrollingTouchSlop(I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

androidx.appcompat.app.d;->d(I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.resource.bitmap.b;->a(Lcom/bumptech/glide/load/b/k; Ljava/io/OutputStream;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I

com.bumptech.glide.load.resource.bitmap.ImageHeaderParser;->d()[B==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I

中危

检测到67条敏感明文信息，建议移除。

位置: classes.dex

'fedec96@gmail.com' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'http://localhost/' used in: Lretrofit2/Response;->success(Ljava/lang/Object; Lokhttp3/Headers;)Lretrofit2/Response;

'http://localhost/' used in: Lretrofit2/Response;->success(Ljava/lang/Object;)Lretrofit2/Response;

'http://localhost/' used in: Lretrofit2/Response;->error(I Lokhttp3/ResponseBody;)Lretrofit2/Response;

'http://localhost/' used in: Lretrofit2/Response;->success(I Ljava/lang/Object;)Lretrofit2/Response;

'http://schemas.android.com/apk/res-auto' used in: Lcom/google/android/material/chip/a;->a(Landroid/util/AttributeSet; I I)V

'http://schemas.android.com/apk/res/android' used in: Landroidx/core/content/a/g;->a(Lorg/xmlpull/v1/XmlPullParser; Ljava/lang/String;)Z

'http://schemas.android.com/apk/res/android' used in: Lcom/google/android/material/chip/Chip;->a(Landroid/util/AttributeSet;)V

'https://api.getstream.io/' used in: Lcom/wangdaye/mysplash/common/network/d/h;->(Lokhttp3/OkHttpClient; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://api.unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/o;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://api.unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/j;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://api.unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/b;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://api.unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/l;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://api.unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/n;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://avatars0.githubusercontent.com/u/3891063?v=3&s=400' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://avatars1.githubusercontent.com/u/22525368?v=3&s=400' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://avatars2.githubusercontent.com/u/14093922?v=3&s=460' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://avatars2.githubusercontent.com/u/22666602?v=3&s=460' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://avatars2.githubusercontent.com/u/8462938?v=3&s=460' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/Bakumon/NumberAnimTextView' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/DavidPacioianu/InkPageIndicator' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/JakeWharton/butterknife' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/OffifialMITX' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/ReactiveX/RxAndroid' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/ReactiveX/RxJava' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/Ulop' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/WangDaYeeeeee' used in: Lcom/wangdaye/mysplash/about/ui/holder/AppHolder;->clickItem()V

'https://github.com/WangDaYeeeeee/MySplash' used in: Lcom/wangdaye/mysplash/about/ui/holder/AppHolder;->clickItem()V

'https://github.com/bm-x/PhotoView' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/bumptech/glide' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/google/dagger' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/greenrobot/greenDAO' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/hdodenhof/CircleImageView' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/lingochamp/FileDownloader' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/mueller-ma' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/naofum' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/rahatarmanahmed/CircularProgressView' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/square/retrofit' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/valentind44' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://github.com/zhihu/RxLifecycle' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://images.unsplash.com/photo-1451847487946-99830706c22d?ixlib=rb-0.3.5&q=80&fm=jpg&crop=entropy&cs=tinysrgb&w=1080&fit=max&s=334b584fa099b256b9e755cd3b75fd45' used in: Lcom/wangdaye/mysplash/common/db/WallpaperSource;->mysplashSource()Lcom/wangdaye/mysplash/common/db/WallpaperSource;

'https://images.unsplash.com/photo-1544979407-1204ff29f490?ixlib=rb-0.3.5&q=80&fm=jpg&crop=entropy&cs=tinysrgb&w=1080&fit=max&s=334b584fa099b256b9e755cd3b75fd45' used in: Lcom/wangdaye/mysplash/common/db/WallpaperSource;->unsplashSource()Lcom/wangdaye/mysplash/common/db/WallpaperSource;

'https://lh3.googleusercontent.com/-G62rc78uq2Q/AAAAAAAAAAI/AAAAAAAAB14/IDC70nBA63U/s128-p-k-rw-no/photo.jpg' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://lh3.googleusercontent.com/-zf-IZfbNHg4/AAAAAAAAAAI/AAAAAAAANfM/-0-pEtFp5a8/s60-p-rw-no/photo.jpg' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://lh3.googleusercontent.com/3fnKvLj0v3uhsxzSDBwUBzN-ppW9LbaAi7opuGqav7QEIDd5Kl0Fm5GYTPX6oQ-wSb_9FFo7PD2WPg=w1920-h1080-rw-no' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://plus.google.com/+SakshamBarsaiyan' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://qr.alipay.com/a6x003871ksdfhcaplh7iab' used in: Lcom/wangdaye/mysplash/common/c/b/b;->a(Landroid/content/Context;)V

'https://ssl.gstatic.com/bt/C3341AA7A1A076756462EE2E5CD71C11/avatars/avatar_tile_s_80.png' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'https://unsplash.com' used in: Lcom/wangdaye/mysplash/common/network/b/d;->intercept(Lokhttp3/Interceptor$Chain;)Lokhttp3/Response;

'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/b/d;->intercept(Lokhttp3/Interceptor$Chain;)Lokhttp3/Response;

'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/j;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/o;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/f;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/b;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/i;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/a;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/l;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://unsplash.com/' used in: Lcom/wangdaye/mysplash/common/network/d/d;->(Lokhttp3/OkHttpClient; Lretrofit2/converter/gson/GsonConverterFactory; Lretrofit2/adapter/rxjava2/RxJava2CallAdapterFactory; Lb/a/b/a;)V

'https://unsplash.com/@' used in: Lcom/wangdaye/mysplash/common/c/h;->a(Lcom/wangdaye/mysplash/common/network/json/User;)V

'https://unsplash.com/collections/' used in: Lcom/wangdaye/mysplash/common/c/h;->a(Lcom/wangdaye/mysplash/common/network/json/Collection;)V

'https://unsplash.com/collections/curated/' used in: Lcom/wangdaye/mysplash/common/c/h;->a(Lcom/wangdaye/mysplash/common/network/json/Collection;)V

'https://unsplash.com/join' used in: Lcom/wangdaye/mysplash/common/ui/activity/LoginActivity;->join()V

'https://unsplash.com/oauth/authorize?client_id=' used in: Lcom/wangdaye/mysplash/Mysplash;->c(Landroid/content/Context;)Ljava/lang/String;

'https://unsplash.com/photos/' used in: Lcom/wangdaye/mysplash/common/c/h;->a(Lcom/wangdaye/mysplash/common/network/json/Photo;)V

'https://unsplash.com/submit' used in: Lcom/wangdaye/mysplash/me/ui/MeActivity;->h(I)V

'memcos@gmail.com' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

'oton.translator@gmail.com' used in: Lcom/wangdaye/mysplash/about/a;->a(Landroid/content/Context;)Ljava/util/List;

中危

检测到1使用全局可读写操作文件。

位置: classes.dex

androidx.preference.j;->c()Landroid.content.SharedPreferences;===>getSharedPreferences

在使用getDir、getSharedPreferences(SharedPreference)或openFileOutput时，如果设置了全局的可读权限，攻击者恶意读取文件内容，获取敏感信息。在设置文件属性时如果设置全局可写，攻击者可能会篡改、伪造内容，可以能会进行诈骗等行为，造成用户财产损失。建议：

(1)使用MODE_PRIVATE模式创建内部存储文件。

(2)加密存储敏感数据。

(3)避免在文件中存储明文和敏感信息。

参考案例：

http://wooyun.org/bugs/wooyun-2010-047172

http://wooyun.org/bugs/wooyun-2010-054438

http://wooyun.org/bugs/wooyun-2010-0151270

参考资料：

https://jaq.alibaba.com/blog.htm?id=56

https://jaq.alibaba.com/blog.htm?id=58

http://wolfeye.baidu.com/blog/global-rw-of-file

http://wolfeye.baidu.com/blog/global-rw-of-sharepreference/

低危

检测3处Intent Scheme URI漏洞。

位置: classes.dex

Lcom/google/android/apps/muzei/api/Artwork;->fromBundle(Landroid/os/Bundle;)Lcom/google/android/apps/muzei/api/Artwork;

Lcom/google/android/apps/muzei/api/Artwork;->fromCursor(Landroid/database/Cursor;)Lcom/google/android/apps/muzei/api/Artwork;

Lcom/google/android/apps/muzei/api/Artwork;->fromJson(Lorg/json/JSONObject;)Lcom/google/android/apps/muzei/api/Artwork;

Intent Scheme URI是一种特殊的URL格式，用来通过Web页面启动已安装应用的Activity组件，大多数主流浏览器都支持此功能。如果在app中，没有检查获取到的load_url的值，攻击者可以构造钓鱼网站，诱导用户点击加载，就可以盗取用户信息。所以，对Intent URI的处理不当时，就会导致基于Intent的攻击。建议：

如果使用了Intent.parseUri函数，获取的intent必须严格过滤，intent至少包含addCategory(“android.intent.category.BROWSABLE”)，setComponent(null)，setSelector(null)3个策略。

参考资料：

http://wolfeye.baidu.com/blog/intent-scheme-url/

http://drops.wooyun.org/papers/2893

http://drops.wooyun.org/mobile/15202

低危

非debug包,需要通过打包平台proguard脚本，移除大部分系统输出代码。

经扫描该包仍存在大量系统输出代码，共发现2处系统输出代码.(此处扫描的系统输出代码，是指调用System.out.print*输出的，本应在打包平台移除的系统输出代码.)

各个bundle系统输出代码详情如下：

位置: classes.dex

b.a.c.a$c;

com.bumptech.glide.a.a;

警告

检测到8处addFlags使用Intent.FLAG_ACTIVITY_NEW_TASK。

位置: classes.dex

androidx.core.app.m;->a

com.wangdaye.mysplash.common.c.b.c;->b

com.wangdaye.mysplash.common.c.b.c;->a

androidx.appcompat.widget.SearchView;->androidx.appcompat.widget.SearchView;->a

com.wangdaye.mysplash.common.download.a.b;->i

com.wangdaye.mysplash.common.download.a.b;->h

com.google.android.apps.muzei.api.provider.MuzeiArtProvider;->openArtworkInfo

APP创建Intent传递数据到其他Activity，如果创建的Activity不是在同一个Task中打开，就很可能被其他的Activity劫持读取到Intent内容，跨Task的Activity通过Intent传递敏感信息是不安全的。建议：

尽量避免使用包含FLAG_ACTIVITY_NEW_TASK标志的Intent来传递敏感信息。

参考资料：

http://wolfeye.baidu.com/blog/intent-data-leak

警告

检测到9个导出的组件接收其他app的消息，这些组件会被其他app引用并导致dos攻击。

activitycom.wangdaye.mysplash.common.ui.activity.LoginActivity

activitycom.wangdaye.mysplash.me.ui.MeActivity

activitycom.wangdaye.mysplash.common.ui.activity.DownloadManageActivity

activitycom.wangdaye.mysplash.common.ui.activity.SetWallpaperActivity

activitycom.wangdaye.mysplash.common.ui.activity.muzei.MuzeiSettingsActivity

activitycom.wangdaye.mysplash.common.ui.activity.muzei.MuzeiCollectionSourceConfigActivity

activitycom.wangdaye.mysplash.common.ui.activity.invisible.DispatchBrowserActionActivity

servicecom.wangdaye.mysplash.common.muzei.MysplashMuzeiArtSource

receivercom.wangdaye.mysplash.common.download.DownloadReceiver

建议：

(1)最小化组件暴露。对不会参与跨应用调用的组件建议显示添加android:exported="false"属性。

(2)设置组件访问权限。对provider设置权限，同时将权限的protectionLevel设置为"signature"或"signatureOrSystem"。

(3)组件传输数据验证。对组件之间，特别是跨应用的组件之间的数据传入与返回做验证和增加异常处理，防止恶意调试数据传入，更要防止敏感数据返回。

参考案例：

http://www.wooyun.org/bugs/wooyun-2010-0169746

http://www.wooyun.org/bugs/wooyun-2010-0104965

参考资料：

http://jaq.alibaba.com/blog.htm?spm=0.0.0.0.Wz4OeC&id=55

《Android安全技术解密与防范》

警告

检测到1个导出的隐式Service组件。

servicecom.wangdaye.mysplash.common.muzei.MysplashMuzeiArtSource

建议：为了确保应用的安全性，启动Service时，请始终使用显式Intent，且不要为服务声明Intent过滤器。使用隐式Intent启动服务存在安全隐患，因为您无法确定哪些服务将响应Intent，且用户无法看到哪些服务已启动。从Android 5.0(API 级别 21)开始，如果使用隐式 Intent 调用 bindService()，系统会抛出异常。

参考资料：

https://developer.android.com/guide/components/intents-filters.html#Types

警告

检测2处組件設置了android.intent.category.BROWSABLE属性。

com.wangdaye.mysplash.common.ui.activity.LoginActivity

com.wangdaye.mysplash.common.ui.activity.invisible.DispatchBrowserActionActivity

在AndroidManifest文件中定义了android.intent.category.BROWSABLE属性的组件，可以通过浏览器唤起，这会导致远程命令执行漏洞攻击。建议：

(1)APP中任何接收外部输入数据的地方都是潜在的攻击点，过滤检查来自网页的参数。

(2)不要通过网页传输敏感信息，有的网站为了引导已经登录的用户到APP上使用，会使用脚本动态的生成URL Scheme的参数，其中包括了用户名、密码或者登录态token等敏感信息，让用户打开APP直接就登录了。恶意应用也可以注册相同的URL Sechme来截取这些敏感信息。Android系统会让用户选择使用哪个应用打开链接，但是如果用户不注意，就会使用恶意应用打开，导致敏感信息泄露或者其他风险。

參考案例：

http://www.wooyun.org/bugs/wooyun-2014-073875

http://www.wooyun.org/bugs/wooyun-2014-067798

参考资料：

http://wolfeye.baidu.com/blog/intent-scheme-url/

http://www.jssec.org/dl/android_securecoding_en.pdf

http://drops.wooyun.org/mobile/15202

http://blog.csdn.net/l173864930/article/details/36951805

http://drops.wooyun.org/papers/2893

警告

检测到1处provider的grantUriPermissions设置为true。

androidx.core.content.FileProvider

grant-uri-permission若设置为true，可被其它程序员通过uri访问到content provider的内容，容易造成信息泄露。

参考资料：

https://security.tencent.com/index.php/blog/msg/6

警告

检测到4处使用了加解密算法。密钥处理不当可能会导致信息泄露。

位置: classes.dex

okio.ByteString;->hmac(Ljava.lang.String; Lokio.ByteString;)Lokio.ByteString;

okio.HashingSource;->(Lokio.Source; Lokio.ByteString; Ljava.lang.String;)V

okio.Buffer;->hmac(Ljava.lang.String; Lokio.ByteString;)Lokio.ByteString;

okio.HashingSink;->