导航菜单

应用安全检测报告

应用安全检测报告,支持文件搜索、内容检索和AI代码分析

移动应用安全检测报告

应用图标

Bugko v9.2.6.0

Android APK bd0072f3...
57
安全评分

安全基线评分

57/100

低风险

综合风险等级

风险等级评定
  1. A
  2. B
  3. C
  4. F

应用存在一定安全风险,建议优化

漏洞与安全项分布

0 高危
16 中危
2 信息
2 安全

隐私风险评估

4
第三方跟踪器

中等隐私风险
检测到少量第三方跟踪器


检测结果分布

高危安全漏洞 0
中危安全漏洞 16
安全提示信息 2
已通过安全项 2
重点安全关注 0

中危安全漏洞 应用已启用明文网络流量

[android:usesCleartextTraffic=true]
应用允许明文网络流量(如 HTTP、FTP 协议、DownloadManager、MediaPlayer 等)。API 级别 27 及以下默认启用,28 及以上默认禁用。明文流量缺乏机密性、完整性和真实性保护,攻击者可窃听或篡改传输数据。建议关闭明文流量,仅使用加密协议。

中危安全漏洞 应用数据允许备份

[android:allowBackup=true]
该标志允许通过 adb 工具备份应用数据。启用 USB 调试的用户可直接复制应用数据,存在数据泄露风险。

中危安全漏洞 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护,但应检查权限保护级别。

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
检测到  Broadcast Receiver 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 Service (crc640190106674015c54.PushNotificationMessagingService) 未受保护。

[android:exported=true]
检测到  Service 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (crc6455d3dd4cdc9e7ca2.DropboxCallbackActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (crc6455d3dd4cdc9e7ca2.InitializeActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护,但应检查权限保护级别。

Permission: android.permission.DUMP [android:exported=true]
检测到  Broadcast Receiver 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护,但应检查权限保护级别。

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护,但应检查权限保护级别。

Permission: android.permission.DUMP [android:exported=true]
检测到  Broadcast Receiver 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 IP地址泄露

IP地址泄露


Files:
crc644f3901d6e2deaf74/BaseRecyclerViewViewHolder_1.java, line(s) 13,13,21,21
crc644f3901d6e2deaf74/CardRandomAbilityAbilityViewHolder.java, line(s) 12,12,20,20
crc64692a67b1ffd85ce9/ActivityLifecycleCallbacks.java, line(s) 12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58
crc648e35430423bd4943/GLTextureView.java, line(s) 14,14,14,14,14
crc648e35430423bd4943/SKGLSurfaceViewRenderer.java, line(s) 12,12,12
crc648e35430423bd4943/SKSurfaceView.java, line(s) 13,13,13
crc64a60a676139c23dc8/HideAnimatorListener.java, line(s) 11,11,11,11,23,23,23,23
crc64a60a676139c23dc8/ShowAnimatorListener.java, line(s) 11,11,11,11,23,23,23,23
crc64a60a676139c23dc8/ViewTouchListener.java, line(s) 11
crc64a60a676139c23dc8/VisionTextRecognizer.java, line(s) 13
crc64ba438d8f48cf7e75/ActivityLifecycleContextListener.java, line(s) 12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58
crc64bd4a3c52fec04726/AutoSuspendHelper_ObservableLifecycle.java, line(s) 12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58,58
crc64bd4a3c52fec04726/ContextExtensions_ServiceConnection_1.java, line(s) 12,12,12,12
crc64bd4a3c52fec04726/SharedPreferencesExtensions_OnSharedPreferenceChangeListener.java, line(s) 10
io/sentry/SpotlightIntegration.java, line(s) 89
mono/android/TypeManager.java, line(s) 11
mono/android/accessibilityservice/AccessibilityService_MagnificationController_OnMagnificationChangedListenerImplementor.java, line(s) 11
mono/android/accessibilityservice/AccessibilityService_SoftKeyboardController_OnShowModeChangedListenerImplementor.java, line(s) 10
mono/android/accounts/OnAccountsUpdateListenerImplementor.java, line(s) 11
mono/android/animation/AnimatorEventDispatcher.java, line(s) 10,10,10,10,22,22,22,22
mono/android/animation/Animator_AnimatorListenerImplementor.java, line(s) 10,10,10,10,22,22,22,22
mono/android/animation/Animator_AnimatorPauseListenerImplementor.java, line(s) 10,10
mono/android/animation/LayoutTransition_TransitionListenerImplementor.java, line(s) 12,12
mono/android/animation/TimeAnimator_TimeListenerImplementor.java, line(s) 10
mono/android/animation/ValueAnimator_AnimatorUpdateListenerImplementor.java, line(s) 10
mono/android/animation/ValueAnimator_DurationScaleChangeListenerImplementor.java, line(s) 10
mono/android/app/ActionBar_OnMenuVisibilityListenerImplementor.java, line(s) 10
mono/android/app/ActionBar_OnNavigationListenerImplementor.java, line(s) 10
mono/android/app/ActionBar_TabListenerImplementor.java, line(s) 11,11,11,21,21,21
mono/android/app/AlarmManager_OnAlarmListenerImplementor.java, line(s) 10
mono/android/app/AppOpsManager_OnOpActiveChangedListenerImplementor.java, line(s) 10,10
mono/android/app/AppOpsManager_OnOpChangedListenerImplementor.java, line(s) 10,10
mono/android/app/ApplicationRegistration.java, line(s) 8
mono/android/app/Application_OnProvideAssistDataListenerImplementor.java, line(s) 12
mono/android/app/DatePickerDialog_OnDateSetListenerImplementor.java, line(s) 11
mono/android/app/FragmentBreadCrumbs_OnBreadCrumbClickListenerImplementor.java, line(s) 11
mono/android/app/FragmentManager_OnBackStackChangedListenerImplementor.java, line(s) 10
mono/android/app/KeyguardManager_KeyguardLockedStateListenerImplementor.java, line(s) 10
mono/android/app/SearchManager_OnCancelListenerImplementor.java, line(s) 10
mono/android/app/SearchManager_OnDismissListenerImplementor.java, line(s) 10
mono/android/app/SharedElementCallback_OnSharedElementsReadyListenerImplementor.java, line(s) 10
mono/android/app/TabEventDispatcher.java, line(s) 11,11,11,21,21,21
mono/android/app/TimePickerDialog_OnTimeSetListenerImplementor.java, line(s) 11
mono/android/app/UiAutomation_OnAccessibilityEventListenerImplementor.java, line(s) 11
mono/android/app/UiModeManager_ContrastChangeListenerImplementor.java, line(s) 10
mono/android/app/WallpaperManager_OnColorsChangedListenerImplementor.java, line(s) 11
mono/android/app/admin/DevicePolicyManager_OnClearApplicationUserDataListenerImplementor.java, line(s) 10
mono/android/bluetooth/BluetoothProfile_ServiceListenerImplementor.java, line(s) 10,10
mono/android/companion/virtual/VirtualDeviceManager_VirtualDeviceListenerImplementor.java, line(s) 10,10
mono/android/database/sqlite/SQLiteTransactionListenerImplementor.java, line(s) 10,10,10
mono/android/drm/DrmManagerClient_OnErrorListenerImplementor.java, line(s) 11
mono/android/drm/DrmManagerClient_OnEventListenerImplementor.java, line(s) 11
mono/android/drm/DrmManagerClient_OnInfoListenerImplementor.java, line(s) 11
mono/android/gesture/GestureOverlayView_OnGestureListenerImplementor.java, line(s) 11,11,11,11
mono/android/gesture/GestureOverlayView_OnGesturePerformedListenerImplementor.java, line(s) 11
mono/android/gesture/GestureOverlayView_OnGesturingListenerImplementor.java, line(s) 10,10
mono/android/graphics/ImageDecoder_OnHeaderDecodedListenerImplementor.java, line(s) 10
mono/android/graphics/ImageDecoder_OnPartialImageListenerImplementor.java, line(s) 10
mono/android/graphics/SurfaceTexture_OnFrameAvailableListenerImplementor.java, line(s) 10
mono/android/graphics/drawable/Icon_OnDrawableLoadedListenerImplementor.java, line(s) 11
mono/android/hardware/Camera_FaceDetectionListenerImplementor.java, line(s) 10
mono/android/hardware/Camera_OnZoomChangeListenerImplementor.java, line(s) 10
mono/android/hardware/SensorEventListenerImplementor.java, line(s) 12,12
mono/android/hardware/SensorListenerImplementor.java, line(s) 10,10
mono/android/hardware/display/DisplayManager_DisplayListenerImplementor.java, line(s) 10,10,10
mono/android/hardware/input/InputManager_InputDeviceListenerImplementor.java, line(s) 10,10,10
mono/android/inputmethodservice/KeyboardView_OnKeyboardActionListenerImplementor.java, line(s) 10,10,10,10,10,10,10,10
mono/android/location/Geocoder_GeocodeListenerImplementor.java, line(s) 11,11
mono/android/location/GnssAntennaInfo_ListenerImplementor.java, line(s) 11
mono/android/location/GpsStatus_ListenerImplementor.java, line(s) 10
mono/android/location/GpsStatus_NmeaListenerImplementor.java, line(s) 10
mono/android/location/LocationListenerImplementor.java, line(s) 12,12,12,12,12
mono/android/location/OnNmeaMessageListenerImplementor.java, line(s) 10
mono/android/media/AudioManager_OnAudioFocusChangeListenerImplementor.java, line(s) 10
mono/android/media/AudioManager_OnCommunicationDeviceChangedListenerImplementor.java, line(s) 11
mono/android/media/AudioManager_OnModeChangedListenerImplementor.java, line(s) 10
mono/android/media/AudioManager_OnPreferredMixerAttributesChangedListenerImplementor.java, line(s) 13
mono/android/media/AudioRecord_OnRecordPositionUpdateListenerImplementor.java, line(s) 10,10
mono/android/media/AudioRouting_OnRoutingChangedListenerImplementor.java, line(s) 10
mono/android/media/AudioTrack_OnCodecFormatChangedListenerImplementor.java, line(s) 11
mono/android/media/AudioTrack_OnPlaybackPositionUpdateListenerImplementor.java, line(s) 10,10
mono/android/media/ImageReader_OnImageAvailableListenerImplementor.java, line(s) 10
mono/android/media/ImageWriter_OnImageReleasedListenerImplementor.java, line(s) 10
mono/android/media/JetPlayer_OnJetEventListenerImplementor.java, line(s) 10,10,10,10
mono/android/media/LoudnessCodecController_OnLoudnessCodecUpdateListenerImplementor.java, line(s) 12
mono/android/media/MediaCas_EventListenerImplementor.java, line(s) 10,10,10,10
mono/android/media/MediaCodec_OnFirstTunnelFrameReadyListenerImplementor.java, line(s) 10
mono/android/media/MediaCodec_OnFrameRenderedListenerImplementor.java, line(s) 10
mono/android/media/MediaDrm_OnEventListenerImplementor.java, line(s) 10
mono/android/media/MediaDrm_OnExpirationUpdateListenerImplementor.java, line(s) 10
mono/android/media/MediaDrm_OnKeyStatusChangeListenerImplementor.java, line(s) 11
mono/android/media/MediaDrm_OnSessionLostStateListenerImplementor.java, line(s) 10
mono/android/media/MediaPlayer_OnBufferingUpdateListenerImplementor.java, line(s) 10
mono/android/media/MediaPlayer_OnCompletionListenerImplementor.java, line(s) 10
mono/android/media/MediaPlayer_OnDrmInfoListenerImplementor.java, line(s) 10
mono/android/media/MediaPlayer_OnDrmPreparedListenerImplementor.java, line(s) 10
mono/android/media/MediaPlayer_OnErrorListenerImplementor.java, line(s) 10
mono/android/media/MediaPlayer_OnInfoListenerImplementor.java, line(s) 10
mono/android/media/MediaPlayer_OnMediaTimeDiscontinuityListenerImplementor.java, line(s) 11
mono/android/media/MediaPlayer_OnPreparedListenerImplementor.java, line(s) 10
mono/android/media/MediaPlayer_OnSeekCompleteListenerImplementor.java, line(s) 10
mono/android/media/MediaPlayer_OnSubtitleDataListenerImplementor.java, line(s) 11
mono/android/media/MediaPlayer_OnTimedMetaDataAvailableListenerImplementor.java, line(s) 11
mono/android/media/MediaPlayer_OnTimedTextListenerImplementor.java, line(s) 11
mono/android/media/MediaPlayer_OnVideoSizeChangedListenerImplementor.java, line(s) 10
mono/android/media/MediaRecorder_OnErrorListenerImplementor.java, line(s) 10
mono/android/media/MediaRecorder_OnInfoListenerImplementor.java, line(s) 10
mono/android/media/MediaRouter2_OnGetControllerHintsListenerImplementor.java, line(s) 12
mono/android/media/MediaScannerConnection_OnScanCompletedListenerImplementor.java, line(s) 11
mono/android/media/MediaSync_OnErrorListenerImplementor.java, line(s) 10
mono/android/media/RemoteControlClient_OnGetPlaybackPositionListenerImplementor.java, line(s) 10
mono/android/media/RemoteControlClient_OnMetadataUpdateListenerImplementor.java, line(s) 10
mono/android/media/RemoteControlClient_OnPlaybackPositionUpdateListenerImplementor.java, line(s) 10
mono/android/media/RemoteController_OnClientUpdateListenerImplementor.java, line(s) 10,10,10,10,10
mono/android/media/SoundPool_OnLoadCompleteListenerImplementor.java, line(s) 10
mono/android/media/Spatializer_OnHeadTrackerAvailableListenerImplementor.java, line(s) 10
mono/android/media/Spatializer_OnSpatializerStateChangedListenerImplementor.java, line(s) 10,10
mono/android/media/audiofx/AudioEffect_OnControlStatusChangeListenerImplementor.java, line(s) 10
mono/android/media/audiofx/AudioEffect_OnEnableStatusChangeListenerImplementor.java, line(s) 10
mono/android/media/audiofx/BassBoost_OnParameterChangeListenerImplementor.java, line(s) 10
mono/android/media/audiofx/EnvironmentalReverb_OnParameterChangeListenerImplementor.java, line(s) 10
mono/android/media/audiofx/Equalizer_OnParameterChangeListenerImplementor.java, line(s) 10
mono/android/media/audiofx/PresetReverb_OnParameterChangeListenerImplementor.java, line(s) 10
mono/android/media/audiofx/Virtualizer_OnParameterChangeListenerImplementor.java, line(s) 10
mono/android/media/audiofx/Visualizer_OnDataCaptureListenerImplementor.java, line(s) 10,10
mono/android/media/effect/EffectUpdateListenerImplementor.java, line(s) 11
mono/android/media/midi/MidiManager_OnDeviceOpenedListenerImplementor.java, line(s) 11
mono/android/media/session/MediaSessionManager_OnActiveSessionsChangedListenerImplementor.java, line(s) 11
mono/android/media/session/MediaSessionManager_OnMediaKeyEventSessionChangedListenerImplementor.java, line(s) 11
mono/android/media/session/MediaSessionManager_OnSession2TokensChangedListenerImplementor.java, line(s) 11
mono/android/media/tv/TvView_OnUnhandledInputEventListenerImplementor.java, line(s) 11
mono/android/media/tv/interactive/TvInteractiveAppView_OnUnhandledInputEventListenerImplementor.java, line(s) 11
mono/android/net/ConnectivityManager_OnNetworkActiveListenerImplementor.java, line(s) 10
mono/android/net/http/UrlRequest_StatusListenerImplementor.java, line(s) 10
mono/android/net/nsd/NsdManager_DiscoveryListenerImplementor.java, line(s) 11,11,11,11,11,11
mono/android/net/nsd/NsdManager_RegistrationListenerImplementor.java, line(s) 11,11,11,11
mono/android/net/nsd/NsdManager_ResolveListenerImplementor.java, line(s) 11,11,11,11
mono/android/net/sip/SipRegistrationListenerImplementor.java, line(s) 10,10,10
mono/android/net/wifi/WifiManager_LocalOnlyConnectionFailureListenerImplementor.java, line(s) 11
mono/android/net/wifi/WifiManager_SuggestionConnectionStatusListenerImplementor.java, line(s) 11
mono/android/net/wifi/WifiManager_SuggestionUserApprovalStatusListenerImplementor.java, line(s) 10
mono/android/net/wifi/p2p/WifiP2pManager_ActionListenerImplementor.java, line(s) 10,10
mono/android/net/wifi/p2p/WifiP2pManager_ChannelListenerImplementor.java, line(s) 10
mono/android/net/wifi/p2p/WifiP2pManager_ConnectionInfoListenerImplementor.java, line(s) 11
mono/android/net/wifi/p2p/WifiP2pManager_DeviceInfoListenerImplementor.java, line(s) 11
mono/android/net/wifi/p2p/WifiP2pManager_DiscoveryStateListenerImplementor.java, line(s) 10
mono/android/net/wifi/p2p/WifiP2pManager_DnsSdServiceResponseListenerImplementor.java, line(s) 11
mono/android/net/wifi/p2p/WifiP2pManager_DnsSdTxtRecordListenerImplementor.java, line(s) 12
mono/android/net/wifi/p2p/WifiP2pManager_ExternalApproverRequestListenerImplementor.java, line(s) 13,13,13,13
mono/android/net/wifi/p2p/WifiP2pManager_GroupInfoListenerImplementor.java, line(s) 11
mono/android/net/wifi/p2p/WifiP2pManager_NetworkInfoListenerImplementor.java, line(s) 11
mono/android/net/wifi/p2p/WifiP2pManager_P2pStateListenerImplementor.java, line(s) 10
mono/android/net/wifi/p2p/WifiP2pManager_PeerListListenerImplementor.java, line(s) 11
mono/android/net/wifi/p2p/WifiP2pManager_ServiceResponseListenerImplementor.java, line(s) 11
mono/android/net/wifi/p2p/WifiP2pManager_UpnpServiceResponseListenerImplementor.java, line(s) 12
mono/android/net/wifi/p2p/WifiP2pManager_WifiP2pListenerImplementor.java, line(s) 14,14,14,14,14,14,14,14,14,14,14,14,14
mono/android/nfc/NfcAdapter_OnTagRemovedListenerImplementor.java, line(s) 10
mono/android/os/ActionHandlerCallback.java, line(s) 11
mono/android/os/CancellationSignal_OnCancelListenerImplementor.java, line(s) 10
mono/android/os/FileUtils_ProgressListenerImplementor.java, line(s) 10
mono/android/os/MessageQueue_OnFileDescriptorEventListenerImplementor.java, line(s) 11
mono/android/os/ParcelFileDescriptor_OnCloseListenerImplementor.java, line(s) 11
mono/android/os/PowerManager_OnThermalStatusChangedListenerImplementor.java, line(s) 10
mono/android/os/PowerManager_WakeLockStateListenerImplementor.java, line(s) 10
mono/android/os/RecoverySystem_ProgressListenerImplementor.java, line(s) 10
mono/android/os/StrictMode_OnThreadViolationListenerImplementor.java, line(s) 11
mono/android/os/StrictMode_OnVmViolationListenerImplementor.java, line(s) 11
mono/android/preference/PreferenceManager_OnActivityDestroyListenerImplementor.java, line(s) 10
mono/android/preference/PreferenceManager_OnActivityResultListenerImplementor.java, line(s) 11
mono/android/preference/PreferenceManager_OnActivityStopListenerImplementor.java, line(s) 10
mono/android/preference/Preference_OnPreferenceChangeListenerImplementor.java, line(s) 10
mono/android/preference/Preference_OnPreferenceClickListenerImplementor.java, line(s) 10
mono/android/renderscript/Allocation_OnBufferAvailableListenerImplementor.java, line(s) 10
mono/android/sax/EndElementListenerImplementor.java, line(s) 10
mono/android/sax/EndTextElementListenerImplementor.java, line(s) 10
mono/android/sax/StartElementListenerImplementor.java, line(s) 11
mono/android/se/omapi/SEService_OnConnectedListenerImplementor.java, line(s) 10
mono/android/speech/ModelDownloadListenerImplementor.java, line(s) 10,10,10,10
mono/android/speech/RecognitionListenerImplementor.java, line(s) 11,11,11,11,11,11,11,11,11,11,11,11
mono/android/speech/tts/TextToSpeech_OnInitListenerImplementor.java, line(s) 10
mono/android/speech/tts/TextToSpeech_OnUtteranceCompletedListenerImplementor.java, line(s) 10
mono/android/telephony/CarrierConfigManager_CarrierConfigChangeListenerImplementor.java, line(s) 10
mono/android/telephony/TelephonyCallback_ActiveDataSubscriptionIdListenerImplementor.java, line(s) 10
mono/android/telephony/TelephonyCallback_BarringInfoListenerImplementor.java, line(s) 11
mono/android/telephony/TelephonyCallback_CallDisconnectCauseListenerImplementor.java, line(s) 10
mono/android/telephony/TelephonyCallback_CallForwardingIndicatorListenerImplementor.java, line(s) 10
mono/android/telephony/TelephonyCallback_CallStateListenerImplementor.java, line(s) 10
mono/android/telephony/TelephonyCallback_CarrierNetworkListenerImplementor.java, line(s) 10
mono/android/telephony/TelephonyCallback_CellInfoListenerImplementor.java, line(s) 11
mono/android/telephony/TelephonyCallback_CellLocationListenerImplementor.java, line(s) 11
mono/android/telephony/TelephonyCallback_DataActivationStateListenerImplementor.java, line(s) 10
mono/android/telephony/TelephonyCallback_DataActivityListenerImplementor.java, line(s) 10
mono/android/telephony/TelephonyCallback_DataConnectionStateListenerImplementor.java, line(s) 10
mono/android/telephony/TelephonyCallback_DisplayInfoListenerImplementor.java, line(s) 11
mono/android/telephony/TelephonyCallback_EmergencyNumberListListenerImplementor.java, line(s) 11
mono/android/telephony/TelephonyCallback_ImsCallDisconnectCauseListenerImplementor.java, line(s) 11
mono/android/telephony/TelephonyCallback_MessageWaitingIndicatorListenerImplementor.java, line(s) 10
mono/android/telephony/TelephonyCallback_PhysicalChannelConfigListenerImplementor.java, line(s) 11
mono/android/telephony/TelephonyCallback_PreciseDataConnectionStateListenerImplementor.java, line(s) 11
mono/android/telephony/TelephonyCallback_RegistrationFailedListenerImplementor.java, line(s) 11
mono/android/telephony/TelephonyCallback_ServiceStateListenerImplementor.java, line(s) 11
mono/android/telephony/TelephonyCallback_SignalStrengthsListenerImplementor.java, line(s) 11
mono/android/telephony/TelephonyCallback_UserMobileDataStateListenerImplementor.java, line(s) 10
mono/android/text/TextWatcherImplementor.java, line(s) 12,12,12
mono/android/transition/Transition_TransitionListenerImplementor.java, line(s) 10,10,10,10,10
mono/android/view/ActionProvider_VisibilityListenerImplementor.java, line(s) 10
mono/android/view/AttachedSurfaceControl_OnBufferTransformHintChangedListenerImplementor.java, line(s) 10
mono/android/view/GestureDetector_OnContextClickListenerImplementor.java, line(s) 11
mono/android/view/GestureDetector_OnDoubleTapListenerImplementor.java, line(s) 11,11,11
mono/android/view/GestureDetector_OnGestureListenerImplementor.java, line(s) 11,11,11,11,11,11
mono/android/view/MenuItem_OnActionExpandListenerImplementor.java, line(s) 10,10
mono/android/view/MenuItem_OnMenuItemClickListenerImplementor.java, line(s) 10
mono/android/view/OnReceiveContentListenerImplementor.java, line(s) 12
mono/android/view/PixelCopy_OnPixelCopyFinishedListenerImplementor.java, line(s) 10
mono/android/view/ScaleGestureDetector_OnScaleGestureListenerImplementor.java, line(s) 10,10,10
mono/android/view/SurfaceControl_TransactionCommittedListenerImplementor.java, line(s) 10
mono/android/view/TextureView_SurfaceTextureListenerImplementor.java, line(s) 11,11,11,11
mono/android/view/ViewGroup_OnHierarchyChangeListenerImplementor.java, line(s) 11,11
mono/android/view/ViewStub_OnInflateListenerImplementor.java, line(s) 11
mono/android/view/ViewTreeObserver_OnDrawListenerImplementor.java, line(s) 10
mono/android/view/ViewTreeObserver_OnGlobalFocusChangeListenerImplementor.java, line(s) 11
mono/android/view/ViewTreeObserver_OnGlobalLayoutListenerImplementor.java, line(s) 10
mono/android/view/ViewTreeObserver_OnPreDrawListenerImplementor.java, line(s) 10
mono/android/view/ViewTreeObserver_OnScrollChangedListenerImplementor.java, line(s) 10
mono/android/view/ViewTreeObserver_OnTouchModeChangeListenerImplementor.java, line(s) 10
mono/android/view/ViewTreeObserver_OnWindowAttachListenerImplementor.java, line(s) 10,10
mono/android/view/ViewTreeObserver_OnWindowFocusChangeListenerImplementor.java, line(s) 10
mono/android/view/ViewTreeObserver_OnWindowVisibilityChangeListenerImplementor.java, line(s) 10
mono/android/view/View_OnApplyWindowInsetsListenerImplementor.java, line(s) 11
mono/android/view/View_OnAttachStateChangeListenerImplementor.java, line(s) 10,10
mono/android/view/View_OnCapturedPointerListenerImplementor.java, line(s) 11
mono/android/view/View_OnClickListenerImplementor.java, line(s) 10
mono/android/view/View_OnContextClickListenerImplementor.java, line(s) 10
mono/android/view/View_OnCreateContextMenuListenerImplementor.java, line(s) 11
mono/android/view/View_OnDragListenerImplementor.java, line(s) 11
mono/android/view/View_OnFocusChangeListenerImplementor.java, line(s) 10
mono/android/view/View_OnGenericMotionListenerImplementor.java, line(s) 11
mono/android/view/View_OnHoverListenerImplementor.java, line(s) 11
mono/android/view/View_OnKeyListenerImplementor.java, line(s) 11
mono/android/view/View_OnLayoutChangeListenerImplementor.java, line(s) 10
mono/android/view/View_OnLongClickListenerImplementor.java, line(s) 10,10
mono/android/view/View_OnScrollChangeListenerImplementor.java, line(s) 10
mono/android/view/View_OnSystemUiVisibilityChangeListenerImplementor.java, line(s) 10
mono/android/view/View_OnTouchListenerImplementor.java, line(s) 11
mono/android/view/View_OnUnhandledKeyEventListenerImplementor.java, line(s) 11
mono/android/view/WindowInsetsAnimationControlListenerImplementor.java, line(s) 11,11,11
mono/android/view/WindowInsetsController_OnControllableInsetsChangedListenerImplementor.java, line(s) 10
mono/android/view/Window_OnFrameMetricsAvailableListenerImplementor.java, line(s) 11
mono/android/view/Window_OnRestrictedCaptionAreaChangedListenerImplementor.java, line(s) 11
mono/android/view/accessibility/AccessibilityManager_AccessibilityServicesStateChangeListenerImplementor.java, line(s) 10
mono/android/view/accessibility/AccessibilityManager_AccessibilityStateChangeListenerImplementor.java, line(s) 10
mono/android/view/accessibility/AccessibilityManager_AudioDescriptionRequestedChangeListenerImplementor.java, line(s) 10
mono/android/view/accessibility/AccessibilityManager_TouchExplorationStateChangeListenerImplementor.java, line(s) 10
mono/android/view/animation/Animation_AnimationListenerImplementor.java, line(s) 10,10,10
mono/android/view/textservice/SpellCheckerSession_SpellCheckerSessionListenerImplementor.java, line(s) 12,12
mono/android/webkit/DownloadListenerImplementor.java, line(s) 10
mono/android/webkit/WebIconDatabase_IconListenerImplementor.java, line(s) 11
mono/android/webkit/WebView_FindListenerImplementor.java, line(s) 10
mono/android/webkit/WebView_PictureListenerImplementor.java, line(s) 11
mono/android/widget/AbsListView_OnScrollListenerImplementor.java, line(s) 10,10
mono/android/widget/AbsListView_RecyclerListenerImplementor.java, line(s) 11
mono/android/widget/ActionMenuView_OnMenuItemClickListenerImplementor.java, line(s) 11
mono/android/widget/AdapterView_OnItemClickListenerImplementor.java, line(s) 11
mono/android/widget/AdapterView_OnItemLongClickListenerImplementor.java, line(s) 11
mono/android/widget/AdapterView_OnItemSelectedListenerImplementor.java, line(s) 11,11
mono/android/widget/AutoCompleteTextView_OnDismissListenerImplementor.java, line(s) 10
mono/android/widget/CalendarView_OnDateChangeListenerImplementor.java, line(s) 10
mono/android/widget/Chronometer_OnChronometerTickListenerImplementor.java, line(s) 10
mono/android/widget/CompoundButton_OnCheckedChangeListenerImplementor.java, line(s) 10
mono/android/widget/DatePicker_OnDateChangedListenerImplementor.java, line(s) 10
mono/android/widget/ExpandableListView_OnChildClickListenerImplementor.java, line(s) 11
mono/android/widget/ExpandableListView_OnGroupClickListenerImplementor.java, line(s) 11
mono/android/widget/ExpandableListView_OnGroupCollapseListenerImplementor.java, line(s) 10
mono/android/widget/ExpandableListView_OnGroupExpandListenerImplementor.java, line(s) 10
mono/android/widget/Filter_FilterListenerImplementor.java, line(s) 10
mono/android/widget/NumberPicker_OnScrollListenerImplementor.java, line(s) 10
mono/android/widget/NumberPicker_OnValueChangeListenerImplementor.java, line(s) 10
mono/android/widget/PopupMenu_OnDismissListenerImplementor.java, line(s) 10
mono/android/widget/PopupMenu_OnMenuItemClickListenerImplementor.java, line(s) 11
mono/android/widget/PopupWindow_OnDismissListenerImplementor.java, line(s) 10
mono/android/widget/RadioGroup_OnCheckedChangeListenerImplementor.java, line(s) 10
mono/android/widget/RatingBar_OnRatingBarChangeListenerImplementor.java, line(s) 10
mono/android/widget/SearchView_OnCloseListenerImplementor.java, line(s) 10
mono/android/widget/SearchView_OnQueryTextListenerImplementor.java, line(s) 10,10
mono/android/widget/SearchView_OnSuggestionListenerImplementor.java, line(s) 10,10
mono/android/widget/SeekBar_OnSeekBarChangeListenerImplementor.java, line(s) 10,10,10
mono/android/widget/ShareActionProvider_OnShareTargetSelectedListenerImplementor.java, line(s) 11
mono/android/widget/SlidingDrawer_OnDrawerCloseListenerImplementor.java, line(s) 10
mono/android/widget/SlidingDrawer_OnDrawerOpenListenerImplementor.java, line(s) 10
mono/android/widget/SlidingDrawer_OnDrawerScrollListenerImplementor.java, line(s) 10,10
mono/android/widget/TabHost_OnTabChangeListenerImplementor.java, line(s) 10
mono/android/widget/TextView_OnEditorActionListenerImplementor.java, line(s) 11
mono/android/widget/TimePicker_OnTimeChangedListenerImplementor.java, line(s) 10
mono/android/widget/Toolbar_OnMenuItemClickListenerImplementor.java, line(s) 11
mono/android/widget/ZoomButtonsController_OnZoomListenerImplementor.java, line(s) 10,10
mono/android/window/SplashScreen_OnExitAnimationListenerImplementor.java, line(s) 11
xamarin/android/net/ServerCertificateCustomValidator_AlwaysAcceptingHostnameVerifier.java, line(s) 11
xamarin/android/net/ServerCertificateCustomValidator_TrustManager.java, line(s) 12,12,12
xamarin/android/net/ServerCertificateCustomValidator_TrustManager_FakeSSLSession.java, line(s) 14,14,14,14,14,14,14,14,14,14,14,14,14,14,14,14,14,14,14,14,14

中危安全漏洞 SHA-1是已知存在哈希冲突的弱哈希

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
io/sentry/util/StringUtils.java, line(s) 73

中危安全漏洞 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据

应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
io/sentry/android/core/DeviceInfoUtil.java, line(s) 164,339

中危安全漏洞 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等

文件可能包含硬编码的敏感信息,如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
io/sentry/Baggage.java, line(s) 35
io/sentry/SpanDataConvention.java, line(s) 4,5,8,9,15,17,16,20,18
io/sentry/TraceContext.java, line(s) 25
io/sentry/protocol/User.java, line(s) 41

中危安全漏洞 此应用程序可能会请求root(超级用户)权限

此应用程序可能会请求root(超级用户)权限
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
io/sentry/android/core/internal/util/RootChecker.java, line(s) 22,22,22,22,22

中危安全漏洞 应用程序包含隐私跟踪程序

此应用程序有多个4隐私跟踪程序。跟踪器可以跟踪设备或用户,是终端用户的隐私问题。

中危安全漏洞 此应用可能包含硬编码机密信息

从应用程序中识别出以下机密确保这些不是机密或私人信息
AdMob广告平台的=> "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-0646444153861496~6958753653"
"firebase_database_url" : "https://bugko-com.firebaseio.com"
"google_api_key" : "AIzaSyC_3or491Z50TnyQAJvotKOGAdcNzdJaM8"
"google_app_id" : "1:676853876661:android:d15840cb41d4a8d4"
"google_crash_reporting_api_key" : "AIzaSyC_3or491Z50TnyQAJvotKOGAdcNzdJaM8"

安全提示信息 应用程序记录日志信息,不得记录敏感信息

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
io/sentry/SystemOutLogger.java, line(s) 14,22,31
io/sentry/android/core/AndroidLogger.java, line(s) 86,82,74,78,84
io/sentry/android/core/SentryLogcatAdapter.java, line(s) 43,48,78,83,53,58,33,38,63,68,73,88,93,98
io/sentry/transport/StdoutTransport.java, line(s) 51
mono/android/incrementaldeployment/IncrementalClassLoader.java, line(s) 44,45

安全提示信息 应用与Firebase数据库通信

该应用与位于 https://bugko-com.firebaseio.com 的 Firebase 数据库进行通信

已通过安全项 此应用程序可能具有Root检测功能

此应用程序可能具有Root检测功能
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
io/sentry/android/core/DeviceInfoUtil.java, line(s) 135
io/sentry/android/core/internal/util/RootChecker.java, line(s) 40,22,22,22,22,22,22,34

已通过安全项 Firebase远程配置已禁用

Firebase远程配置URL ( https://firebaseremoteconfig.googleapis.com/v1/projects/676853876661/namespaces/firebase:fetch?key=AIzaSyC_3or491Z50TnyQAJvotKOGAdcNzdJaM8 ) 已禁用。响应内容如下所示:

{
    "state": "NO_TEMPLATE"
}

综合安全基线评分总结

应用图标

Bugko v9.2.6.0

Android APK
57
综合安全评分
中风险