导航菜单
平台声明

本平台专为移动应用安全风险研究与合规评估设计,严禁用于任何非法用途。 如有疑问或建议,欢迎加入微信群交流

应用基础信息

文件基本信息

文件名称 4d476485e245de7b637121f67331eee72ce279909677d0163de89167c69d8c73 v3.4.0.apk
文件大小 64.93MB
MD5 a4d861cd158e1438cdc1a0be862efb35
SHA1 40548040935e12853ca3dfc4f81c87e0a6559f78
SHA256 4d476485e245de7b637121f67331eee72ce279909677d0163de89167c69d8c73

应用基础信息

应用名称 Populife
包名 com.populstay.populife
主活动 com.populstay.populife.activity.SplashActivity
目标SDK 34
最小SDK 21
版本号 3.4.0
子版本号 340
加固信息 未加壳
开发框架 Java/Kotlin

Google Play 应用市场信息

标题 波普生活
评分 2.8205128
安装 5,000+   次下载
价格 0
Android版本支持
分类 生活时尚
Play 商店链接 com.populstay.populife
开发者 Populife
开发者 ID 6234339232177808674
开发者 地址 None
开发者 主页 https://www.populife.co/
开发者 Email [email protected]
发布日期 2018年12月5日
隐私政策 Privacy link

关于此应用
波普生活App是波普生活智能设备的管理应用程序。
- 只需几个简单的步骤就能实现智能设备的配对
- 离线远程生成解锁密码或电子钥匙
- 与您的客人、家人和朋友分享智能设备
- 随时随地查看智能设备的操作记录

反编译与源码导出

Manifest文件 查看
Java源代码 查看 -- 下载

文件结构与资源列表

    应用签名证书信息

    APK已签名
    v1 签名: True
    v2 签名: True
    v3 签名: False
    v4 签名: False
    主题: C=86, ST=Guangdong, L=Shenzhen, O=Populstay, OU=company, CN=Populstay
    签名算法: rsassa_pkcs1v15
    有效期自: 2018-11-28 08:02:08+00:00
    有效期至: 2048-11-20 08:02:08+00:00
    发行人: C=86, ST=Guangdong, L=Shenzhen, O=Populstay, OU=company, CN=Populstay
    序列号: 0x7c61b61
    哈希算法: sha256
    证书MD5: d05ff4ee7c19036de9a1d21c25ec4f99
    证书SHA1: 2f5a3cd095b45a4b564ce1e645f86557f827be44
    证书SHA256: 577eb6228541fc84545fae0ddb91b1a4ae68ff4597580c37914d7f0183ebba3a
    证书SHA512: 854803ca931d4464d14b8a7d63b4725cae7e253a8da8f6538658e1be1b3edb81e80bf1cdced5d0c0c1ca78ae24aa6b7bd2f35030e048b75c4d35747b27108c3c
    公钥算法: rsa
    密钥长度: 2048
    指纹: b36b1ab503cade55e6b13c89e800560fa6690de98ccf7989c5d8844b407d955e
    共检测到 1 个唯一证书

    权限声明与风险分级

    权限名称 安全等级 权限内容 权限描述 关联代码
    android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
    android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
    android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
    android.permission.CHANGE_NETWORK_STATE 危险 改变网络连通性 允许应用程序改变网络连通性。
    android.permission.CHANGE_WIFI_STATE 危险 改变Wi-Fi状态 允许应用程序改变Wi-Fi状态。
    android.permission.READ_PHONE_STATE 危险 读取手机状态和标识 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。
    android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
    android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
    android.permission.READ_MEDIA_IMAGES 危险 允许从外部存储读取图像文件 允许应用程序从外部存储读取图像文件。
    android.permission.CAMERA 危险 拍照和录制视频 允许应用程序拍摄照片和视频,且允许应用程序收集相机在任何时候拍到的图像。
    android.permission.VIBRATE 普通 控制振动器 允许应用程序控制振动器,用于消息通知振动功能。
    android.permission.USE_FINGERPRINT 普通 允许使用指纹 此常量在 API 级别 28 中已弃用。应用程序应改为请求USE_BIOMETRIC
    android.permission.BLUETOOTH 危险 创建蓝牙连接 允许应用程序查看或创建蓝牙连接。
    android.permission.BLUETOOTH_ADMIN 危险 管理蓝牙 允许程序发现和配对新的蓝牙设备。
    android.permission.BLUETOOTH_SCAN 危险 新蓝牙运行时权限 Android 12 系统引入了新的运行时权限,需要能够发现和配对附近的蓝牙设备。
    android.permission.BLUETOOTH_CONNECT 危险 新蓝牙运行时权限 Android 12 系统引入了新的运行时权限,需要能够连接到配对的蓝牙设备。
    android.permission.ACCESS_FINE_LOCATION 危险 获取精确位置 通过GPS芯片接收卫星的定位信息,定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
    android.permission.ACCESS_COARSE_LOCATION 危险 获取粗略位置 通过WiFi或移动基站的方式获取用户粗略的经纬度信息,定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
    android.permission.RECORD_AUDIO 危险 获取录音权限 允许应用程序获取录音权限。
    android.permission.FOREGROUND_SERVICE 普通 创建前台Service Android 9.0以上允许常规应用程序使用 Service.startForeground,用于podcast播放(推送悬浮播放,锁屏播放)
    android.permission.USE_BIOMETRIC 普通 使用生物识别 允许应用使用设备支持的生物识别方式。

    证书安全合规分析

    高危
    0
    警告
    1
    信息
    1
    标题 严重程度 描述信息
    已签名应用 信息 应用已使用代码签名证书进行签名。

    Manifest 配置安全分析

    高危
    0
    警告
    9
    信息
    0
    屏蔽
    0
    序号 问题 严重程度 描述信息 操作
    1 应用已配置网络安全策略
    [android:networkSecurityConfig=@xml/network_security_config]
    信息 网络安全配置允许应用通过声明式配置文件自定义网络安全策略,无需修改代码。可针对特定域名或应用范围进行灵活配置。
    2 应用数据允许备份
    [android:allowBackup=true]
    警告 该标志允许通过 adb 工具备份应用数据。启用 USB 调试的用户可直接复制应用数据,存在数据泄露风险。
    3 Service (com.populock.manhattan.sdk.service.BleService) 未受保护。
    [android:exported=true]
    警告 检测到 Service 已导出,未受任何权限保护,任意应用均可访问。
    4 Service (com.ttlock.bl.sdk.service.BluetoothLeService) 未受保护。
    [android:exported=true]
    警告 检测到 Service 已导出,未受任何权限保护,任意应用均可访问。
    5 Service (com.ttlock.bl.sdk.service.DfuService) 未受保护。
    [android:exported=true]
    警告 检测到 Service 已导出,未受任何权限保护,任意应用均可访问。
    6 Service (com.populstay.populife.push.EventPushService) 未受保护。
    [android:exported=true]
    警告 检测到 Service 已导出,未受任何权限保护,任意应用均可访问。
    7 Activity (com.populstay.populife.activity.MainActivity) 未受保护。
    [android:exported=true]
    警告 检测到 Activity 已导出,未受任何权限保护,任意应用均可访问。
    8 Activity (com.meiqia.meiqiasdk.activity.MQConversationActivity) 未受保护。
    [android:exported=true]
    警告 检测到 Activity 已导出,未受任何权限保护,任意应用均可访问。
    9 Activity (com.meiqia.meiqiasdk.activity.MQMessageFormActivity) 未受保护。
    [android:exported=true]
    警告 检测到 Activity 已导出,未受任何权限保护,任意应用均可访问。
    10 Activity (com.meiqia.meiqiasdk.activity.MQWebViewActivity) 未受保护。
    [android:exported=true]
    警告 检测到 Activity 已导出,未受任何权限保护,任意应用均可访问。

    可浏览 Activity 组件分析

    ACTIVITY INTENT
    com.populstay.populife.activity.SplashActivity Schemes: share://,
    Hosts: com.populstay.populife,
    Paths: /key,

    网络通信安全风险分析

    高危
    1
    警告
    0
    信息
    0
    安全
    0
    序号 范围 严重级别 描述
    1 *
    高危 基本配置不安全地配置为允许到所有域的明文流量。

    API调用分析

    API功能 源码文件
    加密解密-> Crypto加解密组件
    一般功能-> 文件操作
    cn/ittiger/player/Config.java
    cn/ittiger/player/VideoPlayerView.java
    cn/ittiger/player/media/EventLogger.java
    cn/ittiger/player/util/Utils.java
    com/danikula/videocache/ByteArrayCache.java
    com/danikula/videocache/ByteArraySource.java
    com/danikula/videocache/CacheListener.java
    com/danikula/videocache/Config.java
    com/danikula/videocache/GetRequest.java
    com/danikula/videocache/HttpProxyCache.java
    com/danikula/videocache/HttpProxyCacheServer.java
    com/danikula/videocache/HttpProxyCacheServerClients.java
    com/danikula/videocache/HttpUrlSource.java
    com/danikula/videocache/IgnoreHostProxySelector.java
    com/danikula/videocache/Pinger.java
    com/danikula/videocache/ProxyCacheUtils.java
    com/danikula/videocache/StorageUtils.java
    com/danikula/videocache/file/DiskUsage.java
    com/danikula/videocache/file/FileCache.java
    com/danikula/videocache/file/Files.java
    com/danikula/videocache/file/LruDiskUsage.java
    com/danikula/videocache/file/TotalCountLruDiskUsage.java
    com/danikula/videocache/file/TotalSizeLruDiskUsage.java
    com/danikula/videocache/file/UnlimitedDiskUsage.java
    com/example/smartlinklib/SmartLinkManipulator.java
    com/github/barteksc/pdfviewer/PDFView.java
    com/github/barteksc/pdfviewer/source/AssetSource.java
    com/github/barteksc/pdfviewer/source/ByteArraySource.java
    com/github/barteksc/pdfviewer/source/DocumentSource.java
    com/github/barteksc/pdfviewer/source/FileSource.java
    com/github/barteksc/pdfviewer/source/InputStreamSource.java
    com/github/barteksc/pdfviewer/source/UriSource.java
    com/github/barteksc/pdfviewer/util/FileUtils.java
    com/github/barteksc/pdfviewer/util/Util.java
    com/hiflying/smartlink/AbstractSmartLinker.java
    com/hiflying/smartlink/SmartLinkedModule.java
    com/hiflying/smartlink/v3/SnifferSmartLinkerSendAction.java
    com/hiflying/smartlink/v7/MulticastSmartLinkerSendAction.java
    com/meiqia/core/MeiQiaService.java
    com/meiqia/core/a.java
    com/meiqia/core/b5.java
    com/meiqia/core/d.java
    com/meiqia/core/e6.java
    com/meiqia/core/k4.java
    com/meiqia/core/l.java
    com/meiqia/core/m4.java
    com/meiqia/core/q3.java
    com/meiqia/core/r3.java
    com/meiqia/core/t2.java
    com/meiqia/core/v3.java
    com/meiqia/core/v6.java
    com/meiqia/core/x6.java
    com/meiqia/core/z1.java
    com/meiqia/core/z6.java
    com/orhanobut/logger/CsvFormatStrategy.java
    com/orhanobut/logger/DiskLogStrategy.java
    com/orhanobut/logger/LoggerPrinter.java
    com/orhanobut/logger/Utils.java
    com/paypal/android/sdk/a.java
    com/paypal/android/sdk/aj.java
    com/paypal/android/sdk/ao.java
    com/paypal/android/sdk/at.java
    com/paypal/android/sdk/aw.java
    com/paypal/android/sdk/ax.java
    com/paypal/android/sdk/ay.java
    com/paypal/android/sdk/az.java
    com/paypal/android/sdk/bf.java
    com/paypal/android/sdk/bm.java
    com/paypal/android/sdk/ce.java
    com/paypal/android/sdk/cf.java
    com/paypal/android/sdk/cm.java
    com/paypal/android/sdk/cn.java
    com/paypal/android/sdk/cq.java
    com/paypal/android/sdk/cr.java
    com/paypal/android/sdk/d.java
    com/paypal/android/sdk/eg.java
    com/populock/manhattan/sdk/net/OkHttpRequest.java
    com/populock/manhattan/sdk/net/RestClient.java
    com/populock/manhattan/sdk/net/RestClientBuilder.java
    com/populstay/populife/app/CrashHandler.java
    com/populstay/populife/app/CustomUncaughtExceptionHandler.java
    com/populstay/populife/base/BaseApplication.java
    com/populstay/populife/entity/LockVersionObj.java
    com/populstay/populife/fragment/MainMeFragment.java
    com/populstay/populife/fragment/MainMeFragment00.java
    com/populstay/populife/fragment/MainMeFragment_backup.java
    com/populstay/populife/maintservice/MaintenanceRequestActivity.java
    com/populstay/populife/me/PersonalCenterActivity.java
    com/populstay/populife/net/RestClient.java
    com/populstay/populife/net/RestClientBuilder.java
    com/populstay/populife/net/download/SaveFileTask.java
    com/populstay/populife/net/interceptor/AddCookiesInterceptor.java
    com/populstay/populife/net/interceptor/ReceivedCookiesInterceptor.java
    com/populstay/populife/util/Utils.java
    com/populstay/populife/util/file/FileUtil.java
    com/populstay/populife/util/locale/LanguageUtil.java
    com/populstay/populife/util/locale/SPUtils.java
    com/populstay/populife/util/log/LogToFile.java
    com/populstay/populife/util/log/MyDiskLogStrategy.java
    com/rilixtech/widget/countrycodepicker/CountryUtils.java
    com/shockwave/pdfium/PdfPasswordException.java
    com/shockwave/pdfium/PdfiumCore.java
    com/sun/jna/ELFAnalyser.java
    com/sun/jna/Native.java
    com/sun/jna/NativeLibrary.java
    com/sun/jna/Platform.java
    com/sun/jna/Pointer.java
    com/ttlock/bl/sdk/api/DeviceFirmwareUpdateApi.java
    com/ttlock/bl/sdk/entity/LockData.java
    com/ttlock/bl/sdk/net/OkHttpRequest.java
    com/ttlock/gateway/sdk/api/G2GatewayAPI.java
    com/ttlock/gateway/sdk/api/GatewayAPI.java
    com/ttlock/gateway/sdk/model/ConfigureGatewayInfo.java
    com/yalantis/ucrop/task/BitmapCropTask.java
    com/yalantis/ucrop/task/BitmapLoadTask.java
    com/yalantis/ucrop/util/BitmapLoadUtils.java
    com/yalantis/ucrop/util/FileUtils.java
    com/yalantis/ucrop/util/ImageHeaderParser.java
    io/michaelrocks/libphonenumber/android/AssetsMetadataLoader.java
    io/michaelrocks/libphonenumber/android/MetadataLoader.java
    io/michaelrocks/libphonenumber/android/MetadataManager.java
    io/michaelrocks/libphonenumber/android/Phonemetadata.java
    io/michaelrocks/libphonenumber/android/Phonenumber.java
    io/michaelrocks/libphonenumber/android/ResourceMetadataLoader.java
    no/nordicsemi/android/dfu/BaseCustomDfuImpl.java
    no/nordicsemi/android/dfu/BaseDfuImpl.java
    no/nordicsemi/android/dfu/DfuBaseService.java
    no/nordicsemi/android/dfu/DfuService.java
    no/nordicsemi/android/dfu/ExperimentalButtonlessDfuImpl.java
    no/nordicsemi/android/dfu/SecureDfuImpl.java
    no/nordicsemi/android/dfu/internal/ArchiveInputStream.java
    no/nordicsemi/android/dfu/internal/HexInputStream.java
    no/nordicsemi/android/dfu/internal/exception/HexFileValidationException.java
    no/nordicsemi/android/dfu/internal/exception/SizeValidationException.java
    redis/clients/jedis/BinaryJedis.java
    redis/clients/jedis/BinaryJedisCluster.java
    redis/clients/jedis/Connection.java
    redis/clients/jedis/HostAndPort.java
    redis/clients/jedis/JedisClusterConnectionHandler.java
    redis/clients/jedis/Pipeline.java
    redis/clients/jedis/Protocol.java
    redis/clients/jedis/ShardedJedis.java
    redis/clients/jedis/Transaction.java
    redis/clients/util/IOUtils.java
    redis/clients/util/JedisByteHashMap.java
    redis/clients/util/Pool.java
    redis/clients/util/RedisInputStream.java
    redis/clients/util/RedisOutputStream.java
    redis/clients/util/SafeEncoder.java
    加密解密-> Base64 加密
    加密解密-> Base64 解密
    一般功能-> IPC通信
    com/hiflying/smartlink/AbstractSmartLinkerActivity.java
    com/hiflying/smartlink/AbstractSmartLinkerFragment.java
    com/meiqia/core/MQManager.java
    com/meiqia/core/MeiQiaService.java
    com/meiqia/core/a4.java
    com/meiqia/core/g.java
    com/meiqia/core/g4.java
    com/meiqia/core/j.java
    com/meiqia/core/k.java
    com/meiqia/core/l6.java
    com/meiqia/core/n2.java
    com/meiqia/core/o2.java
    com/meiqia/core/p2.java
    com/meiqia/core/t1.java
    com/meiqia/core/z6.java
    com/paypal/android/sdk/an.java
    com/paypal/android/sdk/aw.java
    com/paypal/android/sdk/dq.java
    com/paypal/android/sdk/k.java
    com/paypal/android/sdk/l.java
    com/paypal/android/sdk/m.java
    com/paypal/android/sdk/n.java
    com/paypal/android/sdk/payments/FuturePaymentConsentActivity.java
    com/paypal/android/sdk/payments/FuturePaymentInfoActivity.java
    com/paypal/android/sdk/payments/LoginActivity.java
    com/paypal/android/sdk/payments/PayPalFuturePaymentActivity.java
    com/paypal/android/sdk/payments/PayPalPayment.java
    com/paypal/android/sdk/payments/PayPalProfileSharingActivity.java
    com/paypal/android/sdk/payments/PayPalService.java
    com/paypal/android/sdk/payments/PaymentActivity.java
    com/paypal/android/sdk/payments/PaymentConfirmActivity.java
    com/paypal/android/sdk/payments/PaymentMethodActivity.java
    com/paypal/android/sdk/payments/ProfileSharingConsentActivity.java
    com/paypal/android/sdk/payments/ProofOfPayment.java
    com/paypal/android/sdk/payments/aa.java
    com/paypal/android/sdk/payments/ac.java
    com/paypal/android/sdk/payments/ad.java
    com/paypal/android/sdk/payments/ap.java
    com/paypal/android/sdk/payments/b.java
    com/paypal/android/sdk/payments/bl.java
    com/paypal/android/sdk/payments/bu.java
    com/paypal/android/sdk/payments/bx.java
    com/paypal/android/sdk/payments/by.java
    com/paypal/android/sdk/payments/ca.java
    com/paypal/android/sdk/payments/ck.java
    com/paypal/android/sdk/payments/co.java
    com/paypal/android/sdk/payments/cp.java
    com/paypal/android/sdk/payments/cw.java
    com/paypal/android/sdk/payments/d.java
    com/paypal/android/sdk/payments/dc.java
    com/paypal/android/sdk/payments/dq.java
    com/paypal/android/sdk/payments/m.java
    com/paypal/android/sdk/payments/u.java
    com/paypal/android/sdk/payments/z.java
    com/paypal/android/sdk/r.java
    com/populock/manhattan/sdk/api/PPLock.java
    com/populock/manhattan/sdk/service/BleService.java
    com/populstay/populife/activity/AccountBindActivity.java
    com/populstay/populife/activity/ActivateDeviceActivity.java
    com/populstay/populife/activity/AddDeviceFailActivity.java
    com/populstay/populife/activity/AddDeviceSuccessActivity.java
    com/populstay/populife/activity/ChangeLanguageActivity.java
    com/populstay/populife/activity/CommonQuestionDetailActivity.java
    com/populstay/populife/activity/CustomerServiceActivity.java
    com/populstay/populife/activity/DeleteAccountActivity.java
    com/populstay/populife/activity/EkeyDetailActivity.java
    com/populstay/populife/activity/EkeyPeriodModifyActivity.java
    com/populstay/populife/activity/EkeyPermissionModifyActivity.java
    com/populstay/populife/activity/EkeyRecordActivity.java
    com/populstay/populife/activity/EkeyShareModifyActivity.java
    com/populstay/populife/activity/FeedbackListActivity.java
    com/populstay/populife/activity/FingerprintIcCardAddConfigActivity.java
    com/populstay/populife/activity/FoundDeviceActivity.java
    com/populstay/populife/activity/GatewayAddGuideActivity.java
    com/populstay/populife/activity/GatewayBindedLockDetailActivity.java
    com/populstay/populife/activity/GatewayBindedLockListActivity.java
    com/populstay/populife/activity/IcCardBluetoothAddActivity.java
    com/populstay/populife/activity/IcCardKeyboardOperateActivity.java
    com/populstay/populife/activity/LockAddGuideActivity.java
    com/populstay/populife/activity/LockAutoLockingActivity.java
    com/populstay/populife/activity/LockDetailActivity.java
    com/populstay/populife/activity/LockGroupEditActivity.java
    com/populstay/populife/activity/LockGroupListActivity.java
    com/populstay/populife/activity/LockGroupSelectActivity.java
    com/populstay/populife/activity/LockManageBluetoothKeyActivity.java
    com/populstay/populife/activity/LockManagePasswordActivity.java
    com/populstay/populife/activity/LockNameAddActivity.java
    com/populstay/populife/activity/LockOperateRecordActivity.java
    com/populstay/populife/activity/LockOperateRecordSearchActivity.java
    com/populstay/populife/activity/LockRemoteUnlockConfigActivity.java
    com/populstay/populife/activity/LockSendEkeyActivity.java
    com/populstay/populife/activity/LockSendPasscodeActivity.java
    com/populstay/populife/activity/LockSettingsActivity.java
    com/populstay/populife/activity/LockSoundActivity.java
    com/populstay/populife/activity/LockTimeActivity.java
    com/populstay/populife/activity/LockUserDetailActivity.java
    com/populstay/populife/activity/LoginVerifyActivity.java
    com/populstay/populife/activity/MainActivity.java
    com/populstay/populife/activity/MessageDetailActivity.java
    com/populstay/populife/activity/ModifyAdminPasscodeActivity.java
    com/populstay/populife/activity/ModifyCommonPasscodeActivity.java
    com/populstay/populife/activity/ModifyLockNameActivity.java
    com/populstay/populife/activity/ModifyNicknameActivity.java
    com/populstay/populife/activity/PDFActivity.java
    com/populstay/populife/activity/PasscodeDetailActivity.java
    com/populstay/populife/activity/PasscodePeriodModifyActivity.java
    com/populstay/populife/activity/PasscodeRecordActivity.java
    com/populstay/populife/activity/SignActivity.java
    com/populstay/populife/activity/SplashActivity.java
    com/populstay/populife/activity/SubmitNewFeedbackActivity.java
    com/populstay/populife/app/MyApplication.java
    com/populstay/populife/base/BaseActivity.java
    com/populstay/populife/base/BaseFragment.java
    com/populstay/populife/base/BluetoothBaseActivity.java
    com/populstay/populife/fragment/LockDetailFragment.java
    com/populstay/populife/fragment/LockSendPasscodeFragment.java
    com/populstay/populife/fragment/MainMeFragment.java
    com/populstay/populife/fragment/MainMeFragment00.java
    com/populstay/populife/fragment/MainMeFragment_backup.java
    com/populstay/populife/home/HomeCreateActivity.java
    com/populstay/populife/home/HomeDetailsActivity.java
    com/populstay/populife/home/HomeListActivity.java
    com/populstay/populife/keypwdmanage/KeyCreateSuccessActivity.java
    com/populstay/populife/keypwdmanage/KeyPwdListFragment.java
    com/populstay/populife/keypwdmanage/KeyPwdManageActivity.java
    com/populstay/populife/keypwdmanage/KeyPwdMoreActivity.java
    com/populstay/populife/keypwdmanage/KeyPwdTypeSelectActivity.java
    com/populstay/populife/maintservice/MaintDeviceListActivity.java
    com/populstay/populife/maintservice/MaintRequestListActivity.java
    com/populstay/populife/maintservice/MaintSearchActivity.java
    com/populstay/populife/maintservice/MaintServiceActivity.java
    com/populstay/populife/maintservice/MaintServiceDetailsActivity.java
    com/populstay/populife/maintservice/MaintServicePopuCarePayActivity.java
    com/populstay/populife/maintservice/MaintenanceRequestActivity.java
    com/populstay/populife/me/PersonalCenterActivity.java
    com/populstay/populife/me/ServiceSupportActivity.java
    com/populstay/populife/net/download/SaveFileTask.java
    com/populstay/populife/pay/paypal/PayPalHelper.java
    com/populstay/populife/push/EventPushService.java
    com/populstay/populife/util/Utils.java
    com/populstay/populife/util/email/EmailUtil.java
    com/populstay/populife/util/file/FileUtil.java
    com/populstay/populife/util/locale/LanguageUtil.java
    com/populstay/populife/util/notification/NotificationUtil.java
    com/populstay/populife/util/pkg/ThirdAppUtil.java
    com/rilixtech/widget/countrycodepicker/ex/CountryCodeActivity.java
    com/ttlock/bl/sdk/api/DeviceFirmwareUpdateApi.java
    com/ttlock/bl/sdk/api/TTLockAPI.java
    com/ttlock/bl/sdk/service/BluetoothLeService.java
    com/ttlock/gateway/sdk/api/G2GatewayAPI.java
    com/yalantis/ucrop/UCrop.java
    com/yalantis/ucrop/UCropActivity.java
    com/yalantis/ucrop/UCropFragment.java
    no/nordicsemi/android/dfu/BaseCustomDfuImpl.java
    no/nordicsemi/android/dfu/BaseDfuImpl.java
    no/nordicsemi/android/dfu/DfuBaseService.java
    no/nordicsemi/android/dfu/DfuService.java
    no/nordicsemi/android/dfu/DfuServiceController.java
    no/nordicsemi/android/dfu/DfuServiceInitiator.java
    no/nordicsemi/android/dfu/DfuServiceListenerHelper.java
    no/nordicsemi/android/dfu/DfuServiceProvider.java
    no/nordicsemi/android/dfu/ExperimentalButtonlessDfuImpl.java
    no/nordicsemi/android/dfu/LegacyDfuImpl.java
    no/nordicsemi/android/dfu/SecureDfuImpl.java
    网络通信-> OkHttpClient Connection
    一般功能-> 获取系统服务(getSystemService)
    cn/ittiger/player/VideoPlayerView.java
    cn/ittiger/player/ui/FullScreenGestureView.java
    cn/ittiger/player/util/Utils.java
    com/example/smartlinklib/SmartLinkManipulator.java
    com/hiflying/smartlink/AbstractSmartLinker.java
    com/hiflying/smartlink/AbstractSmartLinkerActivity.java
    com/hiflying/smartlink/AbstractSmartLinkerFragment.java
    com/hiflying/smartlink/v3/SnifferSmartLinkerSendAction.java
    com/meiqia/core/z6.java
    com/paypal/android/sdk/a.java
    com/paypal/android/sdk/ao.java
    com/populock/manhattan/sdk/api/PPLock.java
    com/populock/manhattan/sdk/service/BleService.java
    com/populstay/populife/activity/SplashActivity.java
    com/populstay/populife/base/BaseActivity.java
    com/populstay/populife/base/BluetoothBaseActivity.java
    com/populstay/populife/ui/AutoHideIMEFrameLayout.java
    com/populstay/populife/util/Utils.java
    com/populstay/populife/util/device/DeviceUtil.java
    com/populstay/populife/util/device/DisplayManager.java
    com/populstay/populife/util/device/FingerprintUtil.java
    com/populstay/populife/util/device/KeyboardUtil.java
    com/populstay/populife/util/locale/LanguageUtil.java
    com/populstay/populife/util/net/NetworkUtil.java
    com/populstay/populife/util/notification/NotificationUtil.java
    com/rilixtech/widget/countrycodepicker/CountryCodeDialog.java
    com/rilixtech/widget/countrycodepicker/CountryCodePicker.java
    com/rilixtech/widget/countrycodepicker/ex/CountryCodeActivity.java
    com/ttlock/bl/sdk/api/TTLockAPI.java
    com/ttlock/bl/sdk/service/BluetoothLeService.java
    com/ttlock/bl/sdk/util/NetworkUtil.java
    com/ttlock/gateway/sdk/api/G2GatewayAPI.java
    com/yalantis/ucrop/util/BitmapLoadUtils.java
    me/yokeyword/fragmentation/SupportHelper.java
    me/yokeyword/fragmentation/debug/DebugStackDelegate.java
    moe/feng/support/biometricprompt/BiometricPromptApi23Impl.java
    moe/feng/support/biometricprompt/BiometricPromptCompat.java
    no/nordicsemi/android/dfu/DfuBaseService.java
    网络通信-> UDP数据包
    网络通信-> UDP数据报套接字 com/example/smartlinklib/SmartLinkManipulator.java
    com/hiflying/smartlink/AbstractSmartLinker.java
    com/hiflying/smartlink/v3/SnifferSmartLinkerSendAction.java
    组件-> 启动 Activity
    com/paypal/android/sdk/payments/FuturePaymentConsentActivity.java
    com/paypal/android/sdk/payments/LoginActivity.java
    com/paypal/android/sdk/payments/PaymentConfirmActivity.java
    com/paypal/android/sdk/payments/PaymentMethodActivity.java
    com/paypal/android/sdk/payments/ProfileSharingConsentActivity.java
    com/paypal/android/sdk/payments/b.java
    com/paypal/android/sdk/payments/m.java
    com/populock/manhattan/sdk/api/PPLock.java
    com/populstay/populife/activity/ActivateDeviceActivity.java
    com/populstay/populife/activity/AddDeviceFailActivity.java
    com/populstay/populife/activity/AddDeviceSuccessActivity.java
    com/populstay/populife/activity/ChangeLanguageActivity.java
    com/populstay/populife/activity/CommonQuestionDetailActivity.java
    com/populstay/populife/activity/CustomerServiceActivity.java
    com/populstay/populife/activity/DeleteAccountActivity.java
    com/populstay/populife/activity/EkeyDetailActivity.java
    com/populstay/populife/activity/EkeyRecordActivity.java
    com/populstay/populife/activity/EkeyShareModifyActivity.java
    com/populstay/populife/activity/FeedbackListActivity.java
    com/populstay/populife/activity/FingerprintIcCardAddConfigActivity.java
    com/populstay/populife/activity/FoundDeviceActivity.java
    com/populstay/populife/activity/GatewayAddGuideActivity.java
    com/populstay/populife/activity/GatewayBindedLockDetailActivity.java
    com/populstay/populife/activity/GatewayBindedLockListActivity.java
    com/populstay/populife/activity/IcCardBluetoothAddActivity.java
    com/populstay/populife/activity/IcCardKeyboardOperateActivity.java
    com/populstay/populife/activity/LockAddGuideActivity.java
    com/populstay/populife/activity/LockAutoLockingActivity.java
    com/populstay/populife/activity/LockDetailActivity.java
    com/populstay/populife/activity/LockGroupListActivity.java
    com/populstay/populife/activity/LockGroupSelectActivity.java
    com/populstay/populife/activity/LockManageBluetoothKeyActivity.java
    com/populstay/populife/activity/LockManagePasswordActivity.java
    com/populstay/populife/activity/LockOperateRecordActivity.java
    com/populstay/populife/activity/LockOperateRecordSearchActivity.java
    com/populstay/populife/activity/LockSendEkeyActivity.java
    com/populstay/populife/activity/LockSendPasscodeActivity.java
    com/populstay/populife/activity/LockSettingsActivity.java
    com/populstay/populife/activity/LockSoundActivity.java
    com/populstay/populife/activity/LockTimeActivity.java
    com/populstay/populife/activity/LockUserDetailActivity.java
    com/populstay/populife/activity/LoginVerifyActivity.java
    com/populstay/populife/activity/MessageDetailActivity.java
    com/populstay/populife/activity/ModifyCommonPasscodeActivity.java
    com/populstay/populife/activity/PDFActivity.java
    com/populstay/populife/activity/PasscodeDetailActivity.java
    com/populstay/populife/activity/PasscodeRecordActivity.java
    com/populstay/populife/activity/SignActivity.java
    com/populstay/populife/base/BaseActivity.java
    com/populstay/populife/base/BaseFragment.java
    com/populstay/populife/fragment/LockSendPasscodeFragment.java
    com/populstay/populife/fragment/MainMeFragment00.java
    com/populstay/populife/fragment/MainMeFragment_backup.java
    com/populstay/populife/home/HomeCreateActivity.java
    com/populstay/populife/home/HomeDetailsActivity.java
    com/populstay/populife/home/HomeListActivity.java
    com/populstay/populife/keypwdmanage/KeyCreateSuccessActivity.java
    com/populstay/populife/keypwdmanage/KeyPwdListFragment.java
    com/populstay/populife/keypwdmanage/KeyPwdManageActivity.java
    com/populstay/populife/keypwdmanage/KeyPwdMoreActivity.java
    com/populstay/populife/keypwdmanage/KeyPwdTypeSelectActivity.java
    com/populstay/populife/maintservice/MaintDeviceListActivity.java
    com/populstay/populife/maintservice/MaintRequestListActivity.java
    com/populstay/populife/maintservice/MaintServiceActivity.java
    com/populstay/populife/maintservice/MaintenanceRequestActivity.java
    com/populstay/populife/me/PersonalCenterActivity.java
    com/populstay/populife/me/ServiceSupportActivity.java
    com/populstay/populife/net/download/SaveFileTask.java
    com/populstay/populife/pay/paypal/PayPalHelper.java
    com/populstay/populife/util/Utils.java
    com/populstay/populife/util/email/EmailUtil.java
    com/populstay/populife/util/locale/LanguageUtil.java
    com/populstay/populife/util/pkg/ThirdAppUtil.java
    com/ttlock/bl/sdk/api/TTLockAPI.java
    com/ttlock/gateway/sdk/api/G2GatewayAPI.java
    com/yalantis/ucrop/UCrop.java
    一般功能-> 获取WiFi相关信息
    一般功能-> 获取活动网路信息
    网络通信-> 蓝牙连接
    组件-> 启动 Service
    进程操作-> 杀死进程
    网络通信-> TCP套接字
    网络通信-> SSL证书处理
    一般功能-> 设置手机铃声,媒体音量 cn/ittiger/player/ui/FullScreenGestureView.java
    调用java反射机制
    加密解密-> 信息摘要算法
    隐私数据-> 获取GPS位置信息 com/paypal/android/sdk/ao.java
    com/paypal/android/sdk/aw.java
    com/paypal/android/sdk/ba.java
    隐私数据-> 获取已安装的应用程序 com/paypal/android/sdk/an.java
    com/paypal/android/sdk/aw.java
    一般功能-> 获取网络接口信息 com/paypal/android/sdk/aw.java
    一般功能-> 加载so文件
    命令执行-> getRuntime.exec() com/sun/jna/NativeLibrary.java
    网络通信-> WebView GET请求 com/paypal/android/sdk/payments/ah.java
    组件-> 发送广播
    进程操作-> 获取运行的进程\服务 com/populstay/populife/util/Utils.java
    隐私数据-> 读写通讯录 com/populstay/populife/activity/EkeyShareModifyActivity.java
    一般功能-> Android通知 com/populstay/populife/util/notification/NotificationUtil.java
    no/nordicsemi/android/dfu/DfuBaseService.java
    网络通信-> WebView JavaScript接口 com/populstay/populife/activity/CommonQuestionDetailActivity.java
    com/populstay/populife/activity/PrivacyPolicyActivity.java
    网络通信-> WebView 相关 com/populstay/populife/activity/CommonQuestionDetailActivity.java
    com/populstay/populife/activity/PrivacyPolicyActivity.java
    设备指纹-> getSimOperator com/paypal/android/sdk/a.java
    com/paypal/android/sdk/ao.java
    设备指纹-> 查看运营商信息 com/paypal/android/sdk/a.java
    com/paypal/android/sdk/ao.java
    网络通信-> URLConnection com/ttlock/bl/sdk/api/DeviceFirmwareUpdateApi.java
    网络通信-> HTTPS建立连接 com/paypal/android/sdk/bf.java
    com/paypal/android/sdk/bm.java
    网络通信-> HTTP建立连接 com/danikula/videocache/HttpUrlSource.java
    网络通信-> TCP服务器套接字 com/danikula/videocache/HttpProxyCacheServer.java
    进程操作-> 获取进程pid com/meiqia/core/u2.java
    com/populstay/populife/app/CrashHandler.java
    com/populstay/populife/app/CustomUncaughtExceptionHandler.java
    组件-> ContentProvider com/meiqia/core/MQInitializeContentProvider.java
    DEX-> 动态加载 com/sun/jna/Native.java
    一般功能-> 传感器相关操作 me/yokeyword/fragmentation/debug/DebugStackDelegate.java

    安全漏洞检测

    高危
    3
    警告
    8
    信息
    1
    安全
    2
    屏蔽
    0
    序号 问题 等级 参考标准 文件位置 操作
    1 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 高危 CWE: CWE-649: 依赖于混淆或加密安全相关输入而不进行完整性检查
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-3
    升级会员:解锁高级权限
    2 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
    OWASP MASVS: MSTG-STORAGE-3
    升级会员:解锁高级权限
    3 IP地址泄露 警告 CWE: CWE-200: 信息泄露
    OWASP MASVS: MSTG-CODE-2
    升级会员:解锁高级权限
    4 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
    OWASP Top 10: M2: Insecure Data Storage
    OWASP MASVS: MSTG-STORAGE-2
    升级会员:解锁高级权限
    5 应用程序使用不安全的随机数生成器 警告 CWE: CWE-330: 使用不充分的随机数
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-6
    升级会员:解锁高级权限
    6 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
    OWASP Top 10: M9: Reverse Engineering
    OWASP MASVS: MSTG-STORAGE-14
    升级会员:解锁高级权限
    7 使用弱加密算法 高危 CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4
    升级会员:解锁高级权限
    8 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 警告 CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当('SQL 注入')
    OWASP Top 10: M7: Client Code Quality
    升级会员:解锁高级权限
    9 MD5是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4
    升级会员:解锁高级权限
    10 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 安全
    OWASP MASVS: MSTG-NETWORK-4
    升级会员:解锁高级权限
    11 SHA-1是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4
    升级会员:解锁高级权限
    12 此应用程序可能具有Root检测功能 安全
    OWASP MASVS: MSTG-RESILIENCE-1
    升级会员:解锁高级权限
    13 应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式,因为它对相同的明文块[UNK]产生相同的密文 高危 CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-2
    升级会员:解锁高级权限
    14 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 警告 CWE: CWE-276: 默认权限不正确
    OWASP Top 10: M2: Insecure Data Storage
    OWASP MASVS: MSTG-STORAGE-2
    升级会员:解锁高级权限

    Native库安全分析

    序号 动态库 NX(堆栈禁止执行) PIE STACK CANARY(栈保护) RELRO RPATH(指定SO搜索路径) RUNPATH(指定SO搜索路径) FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)
    1 arm64-v8a/libLockCore.so True
    info
    二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
    动态共享对象 (DSO)
    info
    共享库是使用 -fPIC 标志构建的,该标志启用与地址无关的代码。这使得面向返回的编程 (ROP) 攻击更难可靠地执行。
    True
    info
    这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
    Full RELRO
    info
    此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
    None
    info
    二进制文件没有设置运行时搜索路径或RPATH
    None
    info
    二进制文件没有设置 RUNPATH
    False
    warning
    二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
    True
    info
    符号被剥离
    2 arm64-v8a/libmodft2.so True
    info
    二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
    动态共享对象 (DSO)
    info
    共享库是使用 -fPIC 标志构建的,该标志启用与地址无关的代码。这使得面向返回的编程 (ROP) 攻击更难可靠地执行。
    True
    info
    这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
    Full RELRO
    info
    此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
    None
    info
    二进制文件没有设置运行时搜索路径或RPATH
    None
    info
    二进制文件没有设置 RUNPATH
    True
    info
    二进制文件有以下加固函数: ['__strcat_chk', '__strlen_chk', '__strrchr_chk']
    True
    info
    符号被剥离
    3 arm64-v8a/libygl_aes.so True
    info
    二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
    动态共享对象 (DSO)
    info
    共享库是使用 -fPIC 标志构建的,该标志启用与地址无关的代码。这使得面向返回的编程 (ROP) 攻击更难可靠地执行。
    True
    info
    这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
    Full RELRO
    info
    此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
    None
    info
    二进制文件没有设置运行时搜索路径或RPATH
    None
    info
    二进制文件没有设置 RUNPATH
    True
    info
    二进制文件有以下加固函数: ['__memcpy_chk']
    True
    info
    符号被剥离

    文件分析

    序号 问题 文件

    行为分析

    编号 行为 标签 文件
    00063 隐式意图(查看网页、拨打电话等) 控制
    升级会员:解锁高级权限
    00022 从给定的文件绝对路径打开文件 文件
    升级会员:解锁高级权限
    00162 创建 InetSocketAddress 对象并连接到它 socket
    升级会员:解锁高级权限
    00163 创建新的 Socket 并连接到它 socket
    升级会员:解锁高级权限
    00056 修改语音音量 控制
    升级会员:解锁高级权限
    00004 获取文件名并将其放入 JSON 对象 文件
    信息收集
    升级会员:解锁高级权限
    00137 获取设备的最后已知位置 位置
    信息收集
    升级会员:解锁高级权限
    00036 从 res/raw 目录获取资源文件 反射
    升级会员:解锁高级权限
    00130 获取当前WIFI信息 WiFi
    信息收集
    升级会员:解锁高级权限
    00016 获取设备的位置信息并将其放入 JSON 对象 位置
    信息收集
    升级会员:解锁高级权限
    00051 通过setData隐式意图(查看网页、拨打电话等) 控制
    升级会员:解锁高级权限
    00189 获取短信内容 短信
    升级会员:解锁高级权限
    00188 获取短信地址 短信
    升级会员:解锁高级权限
    00200 从联系人列表中查询数据 信息收集
    联系人
    升级会员:解锁高级权限
    00201 从通话记录中查询数据 信息收集
    通话记录
    升级会员:解锁高级权限
    00112 获取日历事件的日期 信息收集
    日历
    升级会员:解锁高级权限
    00091 从广播中检索数据 信息收集
    升级会员:解锁高级权限
    00013 读取文件并将其放入流中 文件
    升级会员:解锁高级权限
    00018 准备好 JSON 对象并填写位置信息 位置
    信息收集
    升级会员:解锁高级权限
    00076 获取当前WiFi信息并放入JSON中 信息收集
    WiFi
    升级会员:解锁高级权限
    00191 获取短信收件箱中的消息 短信
    升级会员:解锁高级权限
    00065 获取SIM卡提供商的国家代码 信息收集
    升级会员:解锁高级权限
    00132 查询ISO国家代码 电话服务
    信息收集
    升级会员:解锁高级权限
    00094 连接到 URL 并从中读取数据 命令
    网络
    升级会员:解锁高级权限
    00005 获取文件的绝对路径并将其放入 JSON 对象 文件
    升级会员:解锁高级权限
    00089 连接到 URL 并接收来自服务器的输入流 命令
    网络
    升级会员:解锁高级权限
    00109 连接到 URL 并获取响应代码 网络
    命令
    升级会员:解锁高级权限
    00108 从给定的 URL 读取输入流 网络
    命令
    升级会员:解锁高级权限
    00054 从文件安装其他APK 反射
    升级会员:解锁高级权限
    00092 发送广播 命令
    升级会员:解锁高级权限
    00125 检查给定的文件路径是否存在 文件
    升级会员:解锁高级权限
    00046 方法反射 反射
    升级会员:解锁高级权限

    敏感权限分析

    恶意软件常用权限 6/30
    android.permission.READ_PHONE_STATE
    android.permission.CAMERA
    android.permission.VIBRATE
    android.permission.ACCESS_FINE_LOCATION
    android.permission.ACCESS_COARSE_LOCATION
    android.permission.RECORD_AUDIO
    其它常用权限 11/46
    android.permission.INTERNET
    android.permission.ACCESS_NETWORK_STATE
    android.permission.ACCESS_WIFI_STATE
    android.permission.CHANGE_NETWORK_STATE
    android.permission.CHANGE_WIFI_STATE
    android.permission.WRITE_EXTERNAL_STORAGE
    android.permission.READ_EXTERNAL_STORAGE
    android.permission.READ_MEDIA_IMAGES
    android.permission.BLUETOOTH
    android.permission.BLUETOOTH_ADMIN
    android.permission.FOREGROUND_SERVICE

    恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
    其它常用权限 是已知恶意软件经常滥用的权限。

    IP地理位置

    恶意域名检测

    域名 状态 中国境内 位置信息 解析
    api-m.paypal.com 安全
    IP地址: 151.101.3.1
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    eco-push-api-client.meiqia.com 安全
    IP地址: 114.117.133.42
    国家: 中国
    地区: 北京
    城市: 北京
    查看: 高德地图

    www.paypal.jp 安全
    IP地址: 151.101.195.1
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    www.paypalobjects.com 安全
    IP地址: 104.18.34.93
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    www.stage2std019.stage 安全
    没有可用的地理位置信息。
    www.paypal.co.uk 安全
    IP地址: 151.101.67.1
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    v2.server.populife.co 安全
    IP地址: 47.254.73.159
    国家: 美国
    地区: 加利福尼亚
    城市: 洛杉矶
    查看: Google 地图

    svcs.paypal.com 安全
    IP地址: 173.0.88.76
    国家: 美国
    地区: 加利福尼亚
    城市: 圣何塞
    查看: Google 地图

    api-m.sandbox.paypal.com 安全
    IP地址: 151.101.3.1
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    www.paypal.dk 安全
    IP地址: 151.101.3.1
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    api.sandbox.paypal.com 安全
    IP地址: 173.0.93.242
    国家: 美国
    地区: 伊利诺伊州
    城市: 内珀维尔
    查看: Google 地图

    www.paypal.comで 安全
    没有可用的地理位置信息。
    www.populife.co 安全
    IP地址: 23.227.38.74
    国家: 加拿大
    地区: 安大略
    城市: 渥太华
    查看: Google 地图

    api.paypal.com 安全
    IP地址: 66.211.168.123
    国家: 美国
    地区: 纽约
    城市: 纽约市
    查看: Google 地图

    new-api.meiqia.com 安全
    IP地址: 114.117.133.42
    国家: 中国
    地区: 北京
    城市: 北京
    查看: 高德地图

    www.paypal.it 安全
    IP地址: 151.101.195.1
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    gateway.plop.szmuen.cn 安全
    没有可用的地理位置信息。
    b.stats.paypal.com 安全
    IP地址: 66.211.168.123
    国家: 美国
    地区: 加利福尼亚
    城市: 洛杉矶
    查看: Google 地图

    www.paypal.com의 安全
    没有可用的地理位置信息。
    www.paypal.pl 安全
    IP地址: 151.101.131.1
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    www.paypal.com으로 安全
    没有可用的地理位置信息。
    www.stage2std019.stage.pewxhy 安全
    没有可用的地理位置信息。
    www.paypal.co.il 安全
    IP地址: 151.101.3.1
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    item.taobao.com 安全
    IP地址: 122.225.217.184
    国家: 中国
    地区: 广东
    城市: 深圳
    查看: 高德地图

    www.stage2std019.stage.paypal 安全
    没有可用的地理位置信息。
    www.paypal.com.br 安全
    IP地址: 151.101.67.1
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    cms.paypal.com 安全
    没有可用的地理位置信息。
    www.paypal.com.au 安全
    IP地址: 151.101.3.1
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    edge-api2.meiqia.com 安全
    IP地址: 114.117.133.42
    国家: 中国
    地区: 北京
    城市: 北京
    查看: 高德地图

    www.paypal.com 安全
    IP地址: 151.101.193.21
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图

    uri.paypal.com 安全
    没有可用的地理位置信息。
    api.ttlock.com.cn 安全
    IP地址: 47.114.147.192
    国家: 中国
    地区: 浙江
    城市: 杭州
    查看: 高德地图

    手机号提取

    URL链接分析

    URL信息 源码文件
    http://www.geoplugin.net/javascript.gp
    自研引擎-A
    https://api-m.paypal.com/v1/
    https://api-m.sandbox.paypal.com/v1/
    com/paypal/android/sdk/payments/PayPalService.java
    http://returnurl
    http://cancelurl
    com/paypal/android/sdk/fg.java
    https://www.paypal.com/signup/account?country.x=%s&locale.x=%s
    com/paypal/android/sdk/payments/ea.java
    https://v2.server.populife.co
    com/populstay/populife/common/Urls.java
    https://www.paypal.com/%s/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy-outside
    com/paypal/android/sdk/payments/m.java
    https://www.populife.co/products/gateway
    com/populstay/populife/activity/LockRemoteUnlockConfigActivity.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/x.java
    http://%s:%d/%s
    com/danikula/videocache/Pinger.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/i.java
    https://api.paypal.com/v1/vault/credit-card/.*
    https://api.paypal.com/v1/vault/credit-card
    https://api.paypal.com/v1/payments/.*
    com/paypal/android/sdk/fr.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/w.java
    https://api.sandbox.paypal.com/v1/vault/credit-card/card-50y58962ph1899901kffbsda
    com/paypal/android/sdk/fs.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    www.paypal.dk
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/j.java
    https://svcs.paypal.com/accesscontrol/logriskmetadata
    com/paypal/android/sdk/ax.java
    https://api.paypal.com/v1/payments/.*
    com/paypal/android/sdk/fm.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/k.java
    255.255.255.255
    com/hiflying/smartlink/v3/SnifferSmartLinkerSendAction.java
    https://api.paypal.com/v1/vault/credit-card/.*
    https://api.paypal.com/v1/vault/credit-card
    https://api.paypal.com/v1/payments/.*
    com/paypal/android/sdk/fk.java
    https://uri.paypal.com/services/payments/futurepayments
    https://uri.paypal.com/services/paypalattributes
    com/paypal/android/sdk/ak.java
    https://www.populife.co/products/smart-keybox
    https://item.taobao.com/item.htm?id=626624880701
    https://www.populife.co/products/smart-deadbolt
    https://item.taobao.com/item.htm?id=634528797082
    https://www.populife.co/products/gateway
    https://item.taobao.com/item.htm?id=642013674650
    com/populstay/populife/find/MallListFragment.java
    www.paypal.com으로
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    www.paypal.com의
    com/paypal/android/sdk/u.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/y.java
    https://new-api.meiqia.com/
    wss://eco-push-api-client.meiqia.com/pusher/websocket
    https://edge-api2.meiqia.com/summer/sdk/
    com/meiqia/core/v6.java
    https://v2.server.populife.co/
    com/populock/manhattan/sdk/constant/LockUrls.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/ai.java
    http://gateway.plop.szmuen.cn/auth/user/get
    http://gateway.plop.szmuen.cn/auth/admin/get
    http://gateway.plop.szmuen.cn/auth/c1/get
    com/populock/manhattan/sdk/net/ResponseService.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/q.java
    https://v2.server.populife.co/user/avatar/upload
    com/populstay/populife/fragment/MainMeFragment00.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/ae.java
    https://v2.server.populife.co/user/avatar/upload
    com/populstay/populife/fragment/MainMeFragment_backup.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/l.java
    https://uri.paypal.com/services/payments/futurepayments
    com/paypal/android/sdk/ff.java
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    www.paypal.pl
    com/paypal/android/sdk/z.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    www.paypal.it
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/s.java
    https://www.paypal.com/%s/webapps/mpp/ua/useragreement-full
    com/paypal/android/sdk/payments/ah.java
    https://api.paypal.com/v1/tracking/events
    com/paypal/android/sdk/bv.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/o.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    www.paypal.co.uk
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/n.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/af.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/ah.java
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    www.paypal.comで
    www.paypal.comにアクセスしてただちにpaypalアカウントのロックを解除してください
    www.paypal.comにアクセスしてpaypalアカウントのセキュリティに関する問題に対応してください
    com/paypal/android/sdk/t.java
    255.255.255.255
    com/example/smartlinklib/SmartLinkManipulator.java
    https://www.paypalobjects.com/webstatic/risk/dyson_config_android_v3.json
    https://b.stats.paypal.com/counter.cgi?p=
    com/paypal/android/sdk/ao.java
    https://uri.paypal.com/services/mis/customer
    https://uri.paypal.com/services/wallet/sendmoney
    https://uri.paypal.com/services/payments/funding-options
    https://uri.paypal.com/services/pos/payments
    https://uri.paypal.com/services/loyalty/memberships/update
    https://uri.paypal.com/services/wallet/money-request/requests
    https://uri.paypal.com/services/expresscheckout
    https://uri.paypal.com/services/wallet/financial-instruments/view
    com/paypal/android/sdk/dj.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/ad.java
    255.255.255.255
    com/hiflying/smartlink/AbstractSmartLinker.java
    http://%s:%d/%s
    127.0.0.1
    com/danikula/videocache/HttpProxyCacheServer.java
    https://v2.server.populife.co/
    com/populock/manhattan/sdk/net/RestCreator.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    www.paypal.com.br
    com/paypal/android/sdk/ab.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    www.paypal.com:
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/ac.java
    www.paypal.co.il
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/r.java
    https://www.stage2std019.stage
    https://www.stage2std019.stage.paypal
    https://www.stage2std019.stage.pewxhy
    com/paypal/android/sdk/fd.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    www.paypal.com.au
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/m.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/aa.java
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    www.paypal.com解决任何与您的paypal账户相关的安全问题
    www.paypal.com立即解锁您的paypal账户
    www.paypal.com
    com/paypal/android/sdk/ag.java
    https://www.populife.co/pages/populife-app-privacy-policy-cn
    https://www.populife.co/pages/populife-app-privacy-policy
    com/populstay/populife/activity/PrivacyPolicyActivity.java
    https://www.paypal.jp/jp/contents/regulation/info/overseas-remittance/
    https://cms.paypal.com/jp/cgi-bin/marketingweb?cmd=_render-content&content_id=ua/legal_hub_full&locale.x=en_us
    https://cms.paypal.com/jp/cgi-bin/marketingweb?cmd=_render-content&content_id=ua/legal_hub_full&locale.x=ja_jp
    com/paypal/android/sdk/d.java
    https://uri.paypal.com/services/payments/basic
    com/paypal/android/sdk/payments/PaymentConfirmActivity.java
    https://www.paypal.com/%s/cgi-bin/webscr?cmd=_account-recovery&from=%s&locale.x=%s
    https://www.paypal.com/webapps/accountrecovery/passwordrecovery
    com/paypal/android/sdk/payments/ae.java
    www.paypal.com
    https://cms.paypal.com/c2/cgi-bin/?cmd=_render-content&content_id=ua/useragreement_full'
    https://www.paypal.com/webapps/mpp/ua/recurringpymts-full'
    com/paypal/android/sdk/p.java
    https://v2.server.populife.co/repair-apply/submit
    com/populstay/populife/maintservice/MaintenanceRequestActivity.java
    https://v2.server.populife.co/user/avatar/upload
    com/populstay/populife/me/PersonalCenterActivity.java
    https://v2.server.populife.co
    com/populstay/populife/net/RestCreator.java
    https://api.ttlock.com.cn
    com/ttlock/bl/sdk/net/ResponseService.java
    127.0.0.1
    redis/clients/jedis/HostAndPort.java

    Firebase配置检测

    第三方追踪器

    敏感凭证泄露

    已显示 72 个secrets
    1、 "common_question_group_keyboard" : "Tastierino"
    2、 "pwd_type_name_cyclic" : "Cyclique"
    3、 "country_turkey_name" : "Turquia"
    4、 "pwd_type_name_clear" : "Effacer"
    5、 "country_turkey_number" : "90"
    6、 "wifi_pwd" : "WiFi-Passwort"
    7、 "pwd_type_name_cyclic" : "Ciclico"
    8、 "lock_type_keybox" : "Keybox"
    9、 "pwd_type_name_one_time" : "One-time"
    10、 "pwd_type_name_permanent" : "Permanent"
    11、 "key_created_time" : "Creato"
    12、 "ic_card_keyboard_command_add" : "*85#"
    13、 "pwd_type_name_clear" : "Clear"
    14、 "key_status" : "Status"
    15、 "pwd_type_name_custom" : "Custom"
    16、 "key_created_time" : "Created"
    17、 "key_status" : "Statut"
    18、 "password_detail" : "Kenncode-Details"
    19、 "common_question_group_keyboard" : "Clavier"
    20、 "pwd_type_name_custom" : "Benutzerdefiniert"
    21、 "pwd_type_name_cyclic" : "Cyclic"
    22、 "common_question_group_keyboard" : "Teclado"
    23、 "key_status" : "Estado"
    24、 "key_created_time" : "Creada"
    25、 "ic_card_keyboard_command_clear" : "*69#"
    26、 "pwd_type_name_custom" : "Personalizado"
    27、 "fingerprint_user_name" : "Benutzername"
    28、 "country_turkey_name" : "Turki"
    29、 "admin_password" : "Administratorkenncode"
    30、 "pwd_type_name_time_limited" : "Time-limited"
    31、 "country_turkey_name" : "Turkey"
    32、 "pwd_type_name_permanent" : "Dauerhaft"
    33、 "country_turkey_code" : "tr"
    34、 "key_pwd_status_invalid" : "Invalid"
    35、 "pwd_type_name_clear" : "Limpiar"
    36、 "key_pwd_status_not_activated" : "Pendiente"
    37、 "common_question_group_keyboard" : "Keypad"
    38、 "common_question_group_password" : "Password"
    39、 "country_turkey_name" : "Turcja"
    40、 "country_turkey_name" : "Turquie"
    41、 "mq_auth_code" : "CAPTCHA"
    42、 "pwd_type_name_permanent" : "Permanente"
    43、 "key_pwd_status_not_activated" : "Pending"
    44、 "key_created_time" : "Erstellt"
    45、 "share_key_through_sms_link" : "SMS-Link"
    46、 "password" : "Password"
    47、 "key_pwd_status_invalid" : "Invalido"
    48、 "pwd_type_name_one_time" : "Einmalig"
    49、 "key_pwd_status_not_activated" : "Ausstehend"
    50、 "common_question_group_password" : "Passwort"
    51、 "key_pwd_status_invalid" : "Invalide"
    52、 "pwd_type_name_custom" : "Personalizzato"
    53、 "share_key_through_account" : "Populife-Konto"
    54、 "key_status" : "Stato"
    55、 "pwd_type_name_cyclic" : "Zyklisch"
    56、 "pwd_type_name_clear" : "Cancella"
    57、 "common_question_group_keyboard" : "Tastatur"
    58、 "password" : "Passwort"
    59、 ae9801332af752b9d267531885ad6f39
    60、 6e400003-b5a3-f393-e0a9-e50e24dcca9e
    61、 Ir6u2LUVVdyLKonwTtdFw9qhBaMb4NZuZHKS0bGxdZlRAB3
    62、 6e400001-b5a3-f393-e0a9-e50e24dcca9e
    63、 6e400001-b5a3-f393-e0a9-e50e24dcca1e
    64、 EOTHbvqh0vwM2ldM2QIXbjVw0hZNuZEJLqdWmfTBLLSvGfqgyy9GKvjGybIxyGMd7gHXCXVtymqFQHS
    65、 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
    66、 6e400002-b5a3-f393-e0a9-e50e24dcca9e
    67、 6e400002-b5a3-f393-e0a9-e50e24dcca1e
    68、 6bzXGvSlP76ZiHOudKaAvoxrW8Cg5pA6EjIPpiz4zlw
    69、 EJhi9jOPswug9TDOv93qg4Y28xIlqPDpAoqd7biDLpeGCPvORHjP1Fh4CbFPgKMGCHejdDwe9w1uDWnjPCp1lkaFBjVmjvjpFtnr6z1YeBbmfZYqa9faQT
    70、 AQaN46hZ5LzGV5wNVKJCQdQ2tzIzBibTOYZCBHCE8bocEdhY
    71、 6e400003-b5a3-f393-e0a9-e50e24dcca1e
    72、 0c6bb86ed382d6a0d2e28afa9d024a10e7a129b5

    字符串信息

    建议导出为TXT,方便查看。

    活动列表

    显示所有 109 个 activities

    广播接收者列表

    第三方SDK

    SDK名称 开发者 描述信息
    Bugly Tencent 腾讯 Bugly,为移动开发者提供专业的异常上报和运营统计,帮助开发者快速发现并解决异常,同时掌握产品运营动态,及时跟进用户反馈。
    Pdfium Google Pdfium Android binding.
    uCrop Yalantis Android 图片裁剪库。
    File Provider Android FileProvider 是 ContentProvider 的特殊子类,它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
    Jetpack Media Google 与其他应用共享媒体内容和控件。已被 media2 取代。
    美洽客服 SDK 美洽 在线客服,连接一切客户。
    PayPal Android SDK Paypal PayPal 安卓 SDK 可以轻松地将 PayPal 支付服务集成到移动应用中。

    污点分析

    当apk较大时,代码量会很大,造成数据流图(ICFG)呈现爆炸式增长,所以该功能比较耗时,请先喝杯咖啡,耐心等待……
    规则名称 描述信息 操作
    病毒分析 使用安卓恶意软件常用的API进行污点分析 开始分析  
    漏洞挖掘 漏洞挖掘场景下的污点分析 开始分析  
    隐私合规 隐私合规场景下的污点分析:组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 开始分析  
    密码分析 分析加密算法是否使用常量密钥、静态初始化的向量(IV)、加密模式是否使用ECB等 开始分析  
    Callback 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用,所以如果需要分析Callback方法需要在声明文件中将其声明,这里提供一份AndroidCallbacks.txt文件,里面是一些常见的原生回调接口或类,如果有特殊接口需求,可以联系管理员 开始分析