Scan "Jitsarg Scan"

Application summary

Platform: android

Package: appinventor.ai_pratibodhs.FitnessIndex

Version: 1.1

SHA1 Hash: aabeb4c724a40fe66c7f6ad36b05eac3aada64e1

Size: 3 MB

Scan summary


Date: Nov. 8, 2018, 12:47 p.m.

Vulnerability risk dashboard
Code coverage (% methods)

300/27446 methods

Risk Title Short description
Medium Redis Library detected Application is using Redis library
Medium Application code not obfuscated Application's source code is not obfuscated and could be decompiled to retrieve the initial source code
Low Insecure Network Configuration Settings The application does not specify a network security configuration or sets insecure settings
Potentially Backup mode enabled Application is enabling backup mode
Important Exported activites, services and broadcast receivers list List of all exported components (activities, services, broadcast receivers, content providers)
Important Decompiled source code Retrieved source using open-source decompilers
Info Call to XML parsing API List of XML parsing API calls
Info APK files list List of all files shipped in the application.
Info Obfuscated methods List of code obfuscation status of all application\s componenets
Info Implementation of a WebViewClient List of WebViewClient implementation
Info Call to Inter-Process-Communication (IPC) API List of Interp-Process Communication (IPC) calls
Info Call to External Storage API List of external storage API calls
Info Call to dangerous WebView settings API List of WebView API calls
Info Call to command execution API List of all command execution API calls
Info Call to Socket API List of Server Socket API calls
Info Call to logging API List of logging API calls
Info APK attack surface List of components potentially accepting user input
Info Application components list List application's components
Info Android Manifest APK Manifest in XML
Info Call to Reflection API List of reflection API calls
Info Call to Crypto API List of crypto API calls
Info Call to Random API List of random API calls
Info Call to dynamic code loading API List of dynamic code loading API calls