All Projects → blackarbiter → Android_code_arbiter

blackarbiter / Android_code_arbiter

Licence: lgpl-3.0
针对Android Studio的源码扫描工具

Programming Languages

java
68154 projects - #9 most used programming language

Projects that are alternatives of or similar to Android code arbiter

Graphql Retrofit Converter
A Retrofit 2 Converter.Factory for GraphQL.
Stars: ✭ 46 (-56.19%)
Mutual labels:  android-studio
The Freedom Wrapper Project
This is the Original Freedom Wrapper Project repository. It is developed and maintained by Matthew Benchimol. The Freedom Wrapper Project is an Open Source and Free Android source code project. The project has moved to an organization page at: https://github.com/The-Freedom-Wrapper-Project
Stars: ✭ 75 (-28.57%)
Mutual labels:  android-studio
Android Databinding
this is the databinding framework of android . help to binding data to the view.
Stars: ✭ 93 (-11.43%)
Mutual labels:  android-studio
Androidnote
安卓学习笔记
Stars: ✭ 8,486 (+7981.9%)
Mutual labels:  android-studio
Splashloginsignup
Source code for the Splash, Login and Signup Screen for Android | UI to Code - Timelapse YouTube Video
Stars: ✭ 69 (-34.29%)
Mutual labels:  android-studio
Android Circular Progress
Android custom view that loads a circular progress indicator using ImageView or FrameLayout
Stars: ✭ 75 (-28.57%)
Mutual labels:  android-studio
Nyaapantsu Android App
New android app, no google services inside! Cannot be built for ios though
Stars: ✭ 41 (-60.95%)
Mutual labels:  android-studio
Android Kubernetes Blockchain
WARNING: This repository is no longer maintained ⚠️ This repository will not be updated. The repository will be kept available in read-only mode. Refer to https://developer.ibm.com/patterns/category/blockchain/ for other blockchain code patterns.
Stars: ✭ 105 (+0%)
Mutual labels:  android-studio
Dagger2 Sample
A sample app to demo how to implement dagger in Android using Dagger Android Support library
Stars: ✭ 72 (-31.43%)
Mutual labels:  android-studio
Materialtabstemplate
MaterialTabsTemplate is solely created to reduce the burden of writing same boiler plate codes for Tab creation in Android.
Stars: ✭ 92 (-12.38%)
Mutual labels:  android-studio
Watbot
An Android ChatBot powered by IBM Watson Services (Assistant V1, Text-to-Speech, and Speech-to-Text with Speaker Recognition) on IBM Cloud.
Stars: ✭ 64 (-39.05%)
Mutual labels:  android-studio
Pebble Intellij
Pebble support for IntelliJ IDEA
Stars: ✭ 68 (-35.24%)
Mutual labels:  android-studio
Googledeveloperscolorscheme
Color scheme for Android Studio and IntelliJ, inspired by code snippets style seen on Google Developers website
Stars: ✭ 86 (-18.1%)
Mutual labels:  android-studio
Kotlin Android Scaffolding
An android project structure using kotlin and most common libraries.
Stars: ✭ 53 (-49.52%)
Mutual labels:  android-studio
Coursera Java For Android
Solutions for the course Java for Android
Stars: ✭ 94 (-10.48%)
Mutual labels:  android-studio
Animeflv
App no oficial de Animeflv
Stars: ✭ 44 (-58.1%)
Mutual labels:  android-studio
Debug Badge
Add badge(version code, version name, etc) for your DEBUG APK.
Stars: ✭ 75 (-28.57%)
Mutual labels:  android-studio
Mediapicker
Easy customizable picker for all your needs in Android application
Stars: ✭ 105 (+0%)
Mutual labels:  android-studio
Is Engine
SFML C++ game engine that allows to create games on Web (HTML 5 - CSS 3), Android and PC
Stars: ✭ 94 (-10.48%)
Mutual labels:  android-studio
Androidtraining
Training course repository for android app development
Stars: ✭ 1,295 (+1133.33%)
Mutual labels:  android-studio

Android Code Arbiter

介绍

根据Find Security Bugs:http://find-sec-bugs.github.io/ 改写,去除其中跟Android漏洞无关的漏洞,保留与Android相关的,同时增加其它一些检测项,从而形成了针对Android的源码审计工具。同时将检测结果设置成中文,方便开发者查看问题原因及修改建议。

检测项

  • 域名(Hostname)校验不严格
  • Webview证书错误未处理
  • 命令注入/动态加载
  • TrustManager未进行证书校验
  • MD2、MD4、MD5弱信息摘要算法使用
  • SHA-1弱信息摘要算法
  • 错误字符转换
  • DES/DESede使用
  • RSA Nopadding
  • RSA密钥长度问题
  • ECB模式
  • 加密无完整性校验
  • CBC/PKCS5Padding模式
  • 外部文件存储
  • 发送广播消息未设置接收权限
  • 发送粘性广播
  • 动态注册广播接收器未设置权限
  • 创建模式使用不当
  • Webview设置不当
  • Webview加载外部资源
  • 使用System.out/err输出信息
  • 本地拒绝服务
  • 本地潜在SQL注入
  • 硬编码

源码打包

进入根目录,运行 mvn clean install,如果没有错误,那么在plugin/target目录中就会发现生成的jar包。

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].