JuiceSSH - SSH Client

com.sonelli.juicessh (3.2.2)

Security Rating

6.0

AVERAGE

DOWNLOAD REPORT

VIEW CERTIFICATE

HIDE REPORT

SHARE

Use BeVigil on your Phone

Download the BeVigil App

OPEN REPORT MENU

SUMMARY

ISSUES SEVERITY

MANIFEST SCANNER

exported activity

MEDIUM

resources/AndroidManifest.xml

VULNERABILITIES

Weak Crypto Algorithms

MEDIUM

sources/com/sonelli/sg0.java

STRINGS

google api key

LOW

resources/res/values/strings.xml

ASSETS

file path

LOW

resources/AndroidManifest.xml

0 CRITICAL severity MANIFEST issues present

0 HIGH severity MANIFEST issues present

9 MEDIUM severity MANIFEST issues present

0 LOW severity MANIFEST issues present

0 INFO severity MANIFEST issues present

0 RESILIENCE severity MANIFEST issues present

0 CRITICAL severity VULNERABILITIES issues present

0 HIGH severity VULNERABILITIES issues present

30 MEDIUM severity VULNERABILITIES issues present

6 LOW severity VULNERABILITIES issues present

10 INFO severity VULNERABILITIES issues present

0 RESILIENCE severity VULNERABILITIES issues present

0 CRITICAL severity STRINGS issues present

0 HIGH severity STRINGS issues present

20 MEDIUM severity STRINGS issues present

422 LOW severity STRINGS issues present

0 INFO severity STRINGS issues present

0 RESILIENCE severity STRINGS issues present

0 CRITICAL severity ASSETS issues present

0 HIGH severity ASSETS issues present

1 MEDIUM severity ASSETS issues present

287 LOW severity ASSETS issues present

0 INFO severity ASSETS issues present

0 RESILIENCE severity ASSETS issues present

ISSUES

Weak Crypto Algorithms - 2 issues

Non-parameterized SQL Query - 1 issues

Possible Object Deserialization - 2 issues

CBC Padding Oracle Attack Possible - 2 issues

Accept Self Signed Certificate - 1 issues

Insecure Pending Intent - 24 issues

Insecure Random Used - 10 issues

Check for rooted device by app - 2 issues

Sensitive Information in Logs - 2 issues

MALWARES

0

MALWARES

APKiD

1

APKiD

STRINGS

Google API Key - 2 matches

Generic API Key - 1 matches

Possible Secret Detected - 20 matches

Unknown High Entropy String - 419 matches

ASSETS

File path - 56 matches

URL - 96 matches

Hostname - 47 matches

REST API - 7 matches

IP Address disclosure - 21 matches

Email - 60 matches

PERMISSIONS SUMMARY

Permissions

Count

Safe

6

Risky

2

Dangerous

0

ASSETS WORDCLOUD

juicessh.com - 21 count

sonelli-com-juicessh.firebaseio.com - 1 count

www.libssh.org - 1 count

www.openssl.org - 1 count

github.com - 1 count

mosh.mit.edu - 1 count

www.gnu.org - 1 count

ormlite.com - 1 count

ethanschoonover.com - 1 count

firebase-settings.crashlytics.com - 1 count

accounts.google.com - 1 count

pagead2.googlesyndication.com - 1 count

plus.google.com - 1 count

api.sonelli.com - 2 count

sonelli.com - 2 count

TRACKERS

4

TRACKERS

THIRD PARTY LIBRARIES

38

THIRD PARTY LIBRARIES

CONTACT

Website

https://juicessh.com

Email

[email protected]

HIDE REPORT

Are you the developer or owner of this app? Choose to keep your report private from BeVigil's Search for 30 days.

HIDE

The all in one terminal client for Android including SSH, Local Shell, Mosh and Telnet support.<br> <br>Features: <br>- Full color terminal / ssh client<br>- Popup keyboard with all those normally hard to find characters<br>- Use the volume keys to quickly change font size<br>- External keyboard support<br>- Gestures for irssi, weechat, tmux and screen<br>- Community and third party plugins<br>- Official Mosh support (http://mosh.mit.edu)<br>- Telnet support<br>- Local Android terminal support<br>- Dark, Light, 80&#39;s hacker, Molokai, Solarized Dark and Solarized Light terminal color themes<br> For an overview of solarized color scheme and why it rocks for terminal usage check out http://ethanschoonover.com/solarized<br>- Click URLs to open in a browser<br>- Copy &amp; Paste within sessions<br>- Save / Share SSH transcripts<br>- UTF-8 character support<br>- Easily organize your connections by group<br>- Keep multiple SSH sessions running in the background<br>- Seamlessly connect &#39;via&#39; other SSH connections with one click<br>- Immediate access when you open the app to your frequently used connections<br>- IPv6 support<br>- Password &amp; OpenSSH private key support (ed25519, ECDSA, RSA and DSA)<br>- SSH key generator (optional passphrase encryption supported)<br>- Identities (users/password/keys) are abstracted from connections. Instead of updating every connection when you change your password - just update the identity and any connections linked to it will use the new password/key.<br>- zlib compression to improve SSH sessions on high latency connections<br><br><br>Pro Features (optional in-app purchase):<br>- Quick and easy port forwards that can be connected to via the app or widget and can automatically open in a browser if required.<br>- Integrate with Amazon AWS / EC2, synchronize connections and automatically group servers based on their class or security groups.<br>- Securely keep everything in sync between multiple devices<br>- Automated AES-256 encrypted backups of all of your connections and settings<br>- A beautiful widget for fast access to either your frequently used connections, or a specific group<br>- Team collaboration. Share your groups of connections with team members and start working together instead of separately.<br>- Handy snippets library for quick access to your frequently used commands<br>- Security lock to automatically protect JuiceSSH after a period of inactivity