SUMMARY
ISSUES SEVERITY
MANIFEST SCANNER
exported activity
MEDIUM
resources/AndroidManifest.xml
VULNERABILITIES
weak crypto algorithms
LOW
sources/de/robv/android/xposed/XposedHelpers.java
STRINGS
facebook oauth
MEDIUM
resources/res/values/strings.xml
ASSETS
file path
LOW
resources/res/values-am/strings.xml
0 CRITICAL severity MANIFEST issues present
0 HIGH severity MANIFEST issues present
21 MEDIUM severity MANIFEST issues present
0 LOW severity MANIFEST issues present
0 INFO severity MANIFEST issues present
0 RESILIENCE severity MANIFEST issues present
0 CRITICAL severity VULNERABILITIES issues present
0 HIGH severity VULNERABILITIES issues present
8 MEDIUM severity VULNERABILITIES issues present
4 LOW severity VULNERABILITIES issues present
6 INFO severity VULNERABILITIES issues present
0 RESILIENCE severity VULNERABILITIES issues present
0 CRITICAL severity STRINGS issues present
0 HIGH severity STRINGS issues present
2 MEDIUM severity STRINGS issues present
468 LOW severity STRINGS issues present
0 INFO severity STRINGS issues present
0 RESILIENCE severity STRINGS issues present
0 CRITICAL severity ASSETS issues present
0 HIGH severity ASSETS issues present
0 MEDIUM severity ASSETS issues present
1120 LOW severity ASSETS issues present
0 INFO severity ASSETS issues present
0 RESILIENCE severity ASSETS issues present
ISSUES
Weak Crypto Algorithms - 2 issues
Possible Object Deserialization - 2 issues
Possible Task Hijacking - 8 issues
Insecure Random Used - 6 issues
MALWARES
0
MALWARES
APKiD
3
APKiD
STRINGS
Facebook Oauth - 1 matches
Google API Key - 2 matches
Facebook Client Token - 1 matches
Possible Secret Detected - 20 matches
Unknown High Entropy String - 446 matches
ASSETS
File path - 148 matches
Relative Endpoint - 4 matches
REST API - 8 matches
URL - 638 matches
Hostname - 175 matches
Email Address Detection - 146 matches
PERMISSIONS SUMMARY
Permissions
Count
Safe
13
Risky
5
Dangerous
0
ASSETS WORDCLOUD
support.spotify.com - 74 count
www.spotify.com - 82 count
pushka-notifications.firebaseio.com - 1 count
party.spotify.com - 1 count
play.google.com - 1 count
accounts.spotify.com - 1 count
accounts-gew4.spotify.com - 1 count
accounts-gue1.spotify.com - 1 count
accounts-gew1.spotify.com - 1 count
accounts-guc3.spotify.com - 1 count
accounts-gae2.spotify.com - 1 count
auth-callback.spotify.com - 1 count
wwwmarketing.scdn.co - 5 count
i.scdn.co - 3 count
github.com - 1 count
TRACKERS
0
TRACKERS
THIRD PARTY LIBRARIES
4
THIRD PARTY LIBRARIES
CONTACT
Website
Email
HIDE REPORT
Are you the developer or owner of this app? Choose to keep your report private from BeVigil's Search for 30 days.