{ "schema": "csint-public-tool-verification/v1", "testedAt": "2026-08-22T09:00:08.000Z", "sources": [ { "name": "F-Droid client 1.23.1", "url": "https://f-droid.org/repo/org.fdroid.fdroid_1023051.apk", "repository": "https://gitlab.com/fdroid/fdroidclient", "revision": "1.23.1 / d1b4730958e9bb5f9f3c58002930841e8e28376f", "sha256": "1dfce4269081693f10350dbabd26991a59d7c2bb81f870de54e5b113f4785b7a", "license": "GNU GPL v3 license file", "licenseUrl": "https://gitlab.com/fdroid/fdroidclient/-/blob/1.23.1/LICENSE", "maxBytes": 16777216 }, { "name": "F-Droid client 1.23.2", "url": "https://f-droid.org/repo/org.fdroid.fdroid_1023052.apk", "repository": "https://gitlab.com/fdroid/fdroidclient", "revision": "1.23.2 / 684dcb0999a0efe6bdd3711cb0d8bac5bec0e00a", "sha256": "985f5181d48bb6bafd54083a048b391271e0ab28385881cc41294fb01a222762", "license": "GNU GPL v3 license file", "licenseUrl": "https://gitlab.com/fdroid/fdroidclient/-/blob/1.23.2/LICENSE", "maxBytes": 16777216 } ], "execution": { "apkInstalled": false, "apkExecuted": false, "filesUploaded": false }, "baseline": { "schema": "csint-mobile-exposure/v1", "reportId": "meg-1dfce4269081693f", "generatedAt": "2026-08-22T09:00:08.000Z", "artifact": { "fileName": "org.fdroid.fdroid-1.23.1.apk", "fileSize": 12426276, "sha256": "1dfce4269081693f10350dbabd26991a59d7c2bb81f870de54e5b113f4785b7a", "packageName": "org.fdroid.fdroid", "versionName": "1.23.1", "versionCode": "1023051" }, "boundary": { "processing": "local-browser", "sampleUploaded": false, "sampleExecuted": false, "dynamicAnalysis": false, "malwareVerdict": false, "signatureValidityChecked": false }, "coverage": { "status": "limited", "manifest": "binary-xml-parsed", "stringScan": "bounded-partial", "scannedBytes": 12489764, "stringsInspected": 20000, "note": { "tr": "En az bir statik analiz alanı kaynak sınırı veya binary manifest nedeniyle eksik. Eksik bilgi güvenli kabul edilmedi.", "en": "At least one static-analysis area is incomplete because of a resource limit or binary manifest. Missing data was not treated as safe." } }, "inventory": { "permissions": [ "android.permission.INTERNET", "android.permission.ACCESS_NETWORK_STATE", "android.permission.ACCESS_WIFI_STATE", "android.permission.CHANGE_WIFI_MULTICAST_STATE", "android.permission.CHANGE_NETWORK_STATE", "android.permission.CHANGE_WIFI_STATE", "android.permission.FOREGROUND_SERVICE", "android.permission.BLUETOOTH", "android.permission.BLUETOOTH_ADMIN", "android.permission.BLUETOOTH_CONNECT", "android.permission.BLUETOOTH_SCAN", "android.permission.RECEIVE_BOOT_COMPLETED", "android.permission.READ_EXTERNAL_STORAGE", "android.permission.WRITE_EXTERNAL_STORAGE", "android.permission.MANAGE_EXTERNAL_STORAGE", "android.permission.WRITE_SETTINGS", "android.permission.USB_PERMISSION", "android.permission.WAKE_LOCK", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.REQUEST_INSTALL_PACKAGES", "android.permission.REQUEST_DELETE_PACKAGES", "android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION", "android.permission.NFC", "android.permission.QUERY_ALL_PACKAGES", "android.permission.POST_NOTIFICATIONS", "android.permission.ENFORCE_UPDATE_OWNERSHIP", "org.fdroid.fdroid.permission.UPDATE_REPOS", "org.fdroid.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION", "android.permission.CAMERA" ], "components": { "activities": 25, "services": 16, "receivers": 16, "providers": 4, "exported": 10 }, "dexFiles": [ { "name": "classes.dex", "kind": "dex", "size": 8758132, "sha256": "418451b2d252616c62facebeaf3140ccb74541db649624b54d4a4f66fef772a4" }, { "name": "classes2.dex", "kind": "dex", "size": 9059828, "sha256": "1b6439d627e91bafc336ddabb07e546b3b0658bbe5ba789495f0bf3650044e85" } ], "nativeLibraries": [ { "name": "lib/arm64-v8a/libandroidx.graphics.path.so", "kind": "native", "size": 10096, "sha256": "41e9a793c43a0f4fddb19e33f346bace464f30f888ba7b9eaf96294ea115bfb6" }, { "name": "lib/armeabi-v7a/libandroidx.graphics.path.so", "kind": "native", "size": 7252, "sha256": "41399eba6fc2a60f6f14642375c1824f3cf25eb8fec7397d753730a3ceda3e2b" }, { "name": "lib/x86/libandroidx.graphics.path.so", "kind": "native", "size": 9284, "sha256": "eb0570b41fd3bff25d8204a967c03bd7550719e768b791f680cc40cbe35f29af" }, { "name": "lib/x86_64/libandroidx.graphics.path.so", "kind": "native", "size": 10760, "sha256": "4e56c996f13670e70082658de7880c4020eabf4f25e43387f88ed78a713fc9f0" } ], "signatureEntries": [ { "name": "META-INF/CIARANG.SF", "kind": "signature", "size": 101704, "sha256": "dd51816299bc8e8c29e8f1f28aaa9c9a27be8a86128055a1e23c4ccb7b49a8b0" }, { "name": "META-INF/CIARANG.RSA", "kind": "signature", "size": 1350, "sha256": "92e00f3587478b6caf6a2e4419420d1b3587efd42197e007059ba5e6b77ee464" }, { "name": "META-INF/MANIFEST.MF", "kind": "signature", "size": 101577, "sha256": "7dd24527f4c1cdbf9f03e56f6ad5c745e5600a49704547d1f31b3c29b89b2c6d" } ], "indicators": [ { "kind": "ip", "value": "127.0.0.1" }, { "kind": "url", "value": "https://f-droid.org/" }, { "kind": "domain", "value": "f-droid.org" }, { "kind": "url", "value": "https://f-droid.org/archive" }, { "kind": "url", "value": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/archive" }, { "kind": "domain", "value": "fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion" }, { "kind": "url", "value": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/archive" }, { "kind": "domain", "value": "dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion" }, { "kind": "url", "value": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/archive" }, { "kind": "domain", "value": "ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion" }, { "kind": "url", "value": "http://lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion/pub/fdroid/archive" }, { "kind": "domain", "value": "lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion" }, { "kind": "url", "value": "http://mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion/fdroid/archive" }, { "kind": "domain", "value": "mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion" }, { "kind": "url", "value": "https://fdroid.tetaneutral.net/fdroid/archive" }, { "kind": "domain", "value": "fdroid.tetaneutral.net" }, { "kind": "url", "value": "https://ftp.agdsn.de/fdroid/archive" }, { "kind": "domain", "value": "ftp.agdsn.de" }, { "kind": "url", "value": "https://ftp.fau.de/fdroid/archive" }, { "kind": "domain", "value": "ftp.fau.de" }, { "kind": "url", "value": "https://ftp.gwdg.de/pub/android/fdroid/archive" }, { "kind": "domain", "value": "ftp.gwdg.de" }, { "kind": "url", "value": "https://ftp.lysator.liu.se/pub/fdroid/archive" }, { "kind": "domain", "value": "ftp.lysator.liu.se" }, { "kind": "url", "value": "https://mirror.cyberbits.eu/fdroid/archive" }, { "kind": "domain", "value": "mirror.cyberbits.eu" }, { "kind": "url", "value": "https://mirror.fcix.net/fdroid/archive" }, { "kind": "domain", "value": "mirror.fcix.net" }, { "kind": "url", "value": "https://mirror.kumi.systems/fdroid/archive" }, { "kind": "domain", "value": "mirror.kumi.systems" }, { "kind": "url", "value": "https://mirror.level66.network/fdroid/archive" }, { "kind": "domain", "value": "mirror.level66.network" }, { "kind": "url", "value": "https://mirror.ossplanet.net/fdroid/archive" }, { "kind": "domain", "value": "mirror.ossplanet.net" }, { "kind": "url", "value": "https://mirrors.dotsrc.org/fdroid/archive" }, { "kind": "domain", "value": "mirrors.dotsrc.org" }, { "kind": "url", "value": "https://opencolo.mm.fcix.net/fdroid/archive" }, { "kind": "domain", "value": "opencolo.mm.fcix.net" }, { "kind": "url", "value": "https://plug-mirror.rcac.purdue.edu/fdroid/archive" }, { "kind": "domain", "value": "plug-mirror.rcac.purdue.edu" }, { "kind": "url", "value": "https://mirror.init7.net/fdroid/archive" }, { "kind": "domain", "value": "mirror.init7.net" }, { "kind": "url", "value": "https://mirror.freedif.org/fdroid/archive" }, { "kind": "domain", "value": "mirror.freedif.org" }, { "kind": "url", "value": "https://de.freedif.org/fdroid/archive" }, { "kind": "domain", "value": "de.freedif.org" }, { "kind": "url", "value": "https://f-droid.org/repo" }, { "kind": "url", "value": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/repo" }, { "kind": "url", "value": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/repo" }, { "kind": "url", "value": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/repo" }, { "kind": "url", "value": "http://lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion/pub/fdroid/repo" }, { "kind": "url", "value": "http://mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion/fdroid/repo" }, { "kind": "url", "value": "https://fdroid.tetaneutral.net/fdroid/repo" }, { "kind": "url", "value": "https://ftp.agdsn.de/fdroid/repo" }, { "kind": "url", "value": "https://ftp.fau.de/fdroid/repo" }, { "kind": "url", "value": "https://ftp.gwdg.de/pub/android/fdroid/repo" }, { "kind": "url", "value": "https://ftp.lysator.liu.se/pub/fdroid/repo" }, { "kind": "url", "value": "https://mirror.cyberbits.eu/fdroid/repo" }, { "kind": "url", "value": "https://mirror.fcix.net/fdroid/repo" }, { "kind": "url", "value": "https://mirror.kumi.systems/fdroid/repo" }, { "kind": "url", "value": "https://mirror.level66.network/fdroid/repo" }, { "kind": "url", "value": "https://mirror.ossplanet.net/fdroid/repo" }, { "kind": "url", "value": "https://mirrors.dotsrc.org/fdroid/repo" }, { "kind": "url", "value": "https://opencolo.mm.fcix.net/fdroid/repo" }, { "kind": "url", "value": "https://plug-mirror.rcac.purdue.edu/fdroid/repo" }, { "kind": "url", "value": "https://mirror.init7.net/fdroid/repo" }, { "kind": "url", "value": "https://mirror.freedif.org/fdroid/repo" }, { "kind": "url", "value": "https://de.freedif.org/fdroid/repo" }, { "kind": "url", "value": "https://forum.f-droid.org/" }, { "kind": "domain", "value": "forum.f-droid.org" }, { "kind": "url", "value": "https://github.com/journeyapps/zxing-android-embedded" }, { "kind": "domain", "value": "github.com" }, { "kind": "url", "value": "https://gitlab.com/fdroid/fdroidclient" }, { "kind": "domain", "value": "gitlab.com" }, { "kind": "url", "value": "https://journeyapps.com/" }, { "kind": "domain", "value": "journeyapps.com" } ] }, "evidence": [ { "id": "evidence-ebecdfb7", "kind": "artifact-hash", "location": "org.fdroid.fdroid-1.23.1.apk", "value": "SHA-256 1dfce4269081693f10350dbabd26991a59d7c2bb81f870de54e5b113f4785b7a" }, { "id": "evidence-ff6e7156", "kind": "manifest-field", "location": "AndroidManifest.xml", "value": "android.permission.REQUEST_INSTALL_PACKAGES", "sourceEntry": "AndroidManifest.xml" }, { "id": "evidence-a98e8316", "kind": "manifest-field", "location": "AndroidManifest.xml", "value": "android.permission.QUERY_ALL_PACKAGES", "sourceEntry": "AndroidManifest.xml" }, { "id": "evidence-f9d84a54", "kind": "manifest-field", "location": "AndroidManifest.xml", "value": "android.permission.CAMERA", "sourceEntry": "AndroidManifest.xml" }, { "id": "evidence-53ebf05d", "kind": "recovered-string", "location": "resources.arsc", "value": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/archive", "sourceEntry": "resources.arsc" }, { "id": "evidence-bd3774f9", "kind": "recovered-string", "location": "resources.arsc", "value": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/archive", "sourceEntry": "resources.arsc" }, { "id": "evidence-a98516d3", "kind": "recovered-string", "location": "resources.arsc", "value": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/archive", "sourceEntry": "resources.arsc" }, { "id": "evidence-2f233d93", "kind": "recovered-string", "location": "resources.arsc", "value": "http://lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion/pub/fdroid/archive", "sourceEntry": "resources.arsc" }, { "id": "evidence-23fafcb2", "kind": "recovered-string", "location": "resources.arsc", "value": "http://mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion/fdroid/archive", "sourceEntry": "resources.arsc" }, { "id": "evidence-38ea8780", "kind": "recovered-string", "location": "resources.arsc", "value": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/repo", "sourceEntry": "resources.arsc" }, { "id": "evidence-98860332", "kind": "recovered-string", "location": "resources.arsc", "value": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/repo", "sourceEntry": "resources.arsc" }, { "id": "evidence-96c42272", "kind": "recovered-string", "location": "resources.arsc", "value": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/repo", "sourceEntry": "resources.arsc" }, { "id": "evidence-5677a263", "kind": "archive-entry", "location": "classes.dex", "value": "classes.dex", "sourceEntry": "classes.dex" }, { "id": "evidence-47ea97fa", "kind": "archive-entry", "location": "classes2.dex", "value": "classes2.dex", "sourceEntry": "classes2.dex" }, { "id": "evidence-2128572b", "kind": "archive-entry", "location": "lib/arm64-v8a/libandroidx.graphics.path.so", "value": "lib/arm64-v8a/libandroidx.graphics.path.so", "sourceEntry": "lib/arm64-v8a/libandroidx.graphics.path.so" }, { "id": "evidence-389142a0", "kind": "archive-entry", "location": "lib/armeabi-v7a/libandroidx.graphics.path.so", "value": "lib/armeabi-v7a/libandroidx.graphics.path.so", "sourceEntry": "lib/armeabi-v7a/libandroidx.graphics.path.so" }, { "id": "evidence-66270471", "kind": "archive-entry", "location": "lib/x86/libandroidx.graphics.path.so", "value": "lib/x86/libandroidx.graphics.path.so", "sourceEntry": "lib/x86/libandroidx.graphics.path.so" }, { "id": "evidence-04d9fab4", "kind": "archive-entry", "location": "lib/x86_64/libandroidx.graphics.path.so", "value": "lib/x86_64/libandroidx.graphics.path.so", "sourceEntry": "lib/x86_64/libandroidx.graphics.path.so" } ], "findings": [ { "id": "finding-2a4817fa", "code": "permissions-review", "severity": "medium", "confidence": { "basis": "deterministic", "score": 1, "rationale": { "tr": "Sonuç doğrudan ayrıştırılmış alan veya arşiv envanterine dayanıyor.", "en": "The result is based directly on a parsed field or archive inventory." } }, "title": { "tr": "Yüksek etkili izinler bağlam bekliyor", "en": "High-impact permissions need context" }, "summary": { "tr": "Manifest, uygulamanın amacıyla birlikte değerlendirilmesi gereken izinler içeriyor.", "en": "The manifest contains permissions that should be evaluated against the app's stated purpose." }, "interpretation": { "tr": "İzin varlığı tek başına kötü niyet göstermez; ihtiyaç, kullanıcı açıklaması ve çalışma zamanı kullanımı doğrulanmalıdır.", "en": "Permission presence alone does not establish malicious intent; need, disclosure, and runtime use require validation." }, "evidenceIds": [ "evidence-ff6e7156", "evidence-a98e8316", "evidence-f9d84a54" ], "state": "open" }, { "id": "finding-ecd5296d", "code": "cleartext-url", "severity": "high", "confidence": { "basis": "heuristic", "score": 0.82, "rationale": { "tr": "Sonuç sınırlı metin taramasındaki API veya değer izine dayanıyor; davranış kanıtı değildir.", "en": "The result is based on an API or value trace in a bounded string scan; it is not behavioural proof." } }, "title": { "tr": "HTTP adresi izi bulundu", "en": "HTTP address trace found" }, "summary": { "tr": "Sınırlı metin taramasında şifrelenmemiş HTTP adresleri kurtarıldı.", "en": "The bounded string scan recovered unencrypted HTTP addresses." }, "interpretation": { "tr": "Metin izi, bağlantının çalıştırıldığı anlamına gelmez; kod yolu veya dinamik trafik ile doğrulanmalıdır.", "en": "A recovered string does not mean the connection was used; confirm through code paths or dynamic traffic." }, "evidenceIds": [ "evidence-53ebf05d", "evidence-bd3774f9", "evidence-a98516d3", "evidence-2f233d93", "evidence-23fafcb2", "evidence-38ea8780", "evidence-98860332", "evidence-96c42272" ], "state": "open" }, { "id": "finding-928e7efd", "code": "multiple-dex", "severity": "info", "confidence": { "basis": "deterministic", "score": 1, "rationale": { "tr": "Sonuç doğrudan ayrıştırılmış alan veya arşiv envanterine dayanıyor.", "en": "The result is based directly on a parsed field or archive inventory." } }, "title": { "tr": "Birden fazla DEX dosyası", "en": "Multiple DEX files" }, "summary": { "tr": "Paket multidex yapısı içeriyor.", "en": "The package contains a multidex structure." }, "interpretation": { "tr": "Bu yaygın bir uygulama yapısıdır; yalnızca inceleme kapsamını genişletir.", "en": "This is a common application structure; it only expands the review surface." }, "evidenceIds": [ "evidence-5677a263", "evidence-47ea97fa" ], "state": "open" }, { "id": "finding-4bef48dc", "code": "native-code", "severity": "info", "confidence": { "basis": "deterministic", "score": 1, "rationale": { "tr": "Sonuç doğrudan ayrıştırılmış alan veya arşiv envanterine dayanıyor.", "en": "The result is based directly on a parsed field or archive inventory." } }, "title": { "tr": "Native kod yüzeyi bulundu", "en": "Native code surface found" }, "summary": { "tr": "APK bir veya daha fazla .so kütüphanesi içeriyor.", "en": "The APK contains one or more .so libraries." }, "interpretation": { "tr": "Tarayıcı native kodu decompile etmez; gerekirse ayrı tersine mühendislik kapsamına alınmalıdır.", "en": "The browser does not decompile native code; add a separate reverse-engineering review when needed." }, "evidenceIds": [ "evidence-2128572b", "evidence-389142a0", "evidence-66270471", "evidence-04d9fab4" ], "state": "open" } ], "graph": { "nodes": [ { "id": "artifact-dd927b55", "type": "artifact", "layer": "artifact", "label": "org.fdroid.fdroid-1.23.1.apk", "detail": "1dfce4269081693f10350dbabd26991a59d7c2bb81f870de54e5b113f4785b7a" }, { "id": "application-d930a9b1", "type": "application", "layer": "identity", "label": "org.fdroid.fdroid", "detail": "1.23.1" }, { "id": "manifest-b4e1978e", "type": "manifest", "layer": "identity", "label": "AndroidManifest.xml", "detail": "binary-xml" }, { "id": "permission-6ef7b93c", "type": "permission", "layer": "surface", "label": "INTERNET" }, { "id": "permission-f0024cd8", "type": "permission", "layer": "surface", "label": "ACCESS_NETWORK_STATE" }, { "id": "permission-fd596477", "type": "permission", "layer": "surface", "label": "ACCESS_WIFI_STATE" }, { "id": "permission-725ef578", "type": "permission", "layer": "surface", "label": "CHANGE_WIFI_MULTICAST_STATE" }, { "id": "permission-04ffdaf2", "type": "permission", "layer": "surface", "label": "CHANGE_NETWORK_STATE" }, { "id": "permission-3f806639", "type": "permission", "layer": "surface", "label": "CHANGE_WIFI_STATE" }, { "id": "permission-b4a90dac", "type": "permission", "layer": "surface", "label": "FOREGROUND_SERVICE" }, { "id": "permission-5e1a0cbd", "type": "permission", "layer": "surface", "label": "BLUETOOTH" }, { "id": "permission-7ecd3945", "type": "permission", "layer": "surface", "label": "BLUETOOTH_ADMIN" }, { "id": "permission-a6a5fd74", "type": "permission", "layer": "surface", "label": "BLUETOOTH_CONNECT" }, { "id": "permission-17f9bea3", "type": "permission", "layer": "surface", "label": "BLUETOOTH_SCAN" }, { "id": "permission-222ca1c5", "type": "permission", "layer": "surface", "label": "RECEIVE_BOOT_COMPLETED" }, { "id": "permission-af9b7933", "type": "permission", "layer": "surface", "label": "READ_EXTERNAL_STORAGE" }, { "id": "permission-15fea338", "type": "permission", "layer": "surface", "label": "WRITE_EXTERNAL_STORAGE" }, { "id": "permission-a53538e6", "type": "permission", "layer": "surface", "label": "MANAGE_EXTERNAL_STORAGE" }, { "id": "permission-f46c9d64", "type": "permission", "layer": "surface", "label": "WRITE_SETTINGS" }, { "id": "permission-eae3b67d", "type": "permission", "layer": "surface", "label": "USB_PERMISSION" }, { "id": "permission-d8971981", "type": "permission", "layer": "surface", "label": "WAKE_LOCK" }, { "id": "permission-eb44fe55", "type": "permission", "layer": "surface", "label": "ACCESS_COARSE_LOCATION" }, { "id": "permission-9a140076", "type": "permission", "layer": "surface", "label": "REQUEST_INSTALL_PACKAGES" }, { "id": "permission-d4daf284", "type": "permission", "layer": "surface", "label": "REQUEST_DELETE_PACKAGES" }, { "id": "permission-e20dd596", "type": "permission", "layer": "surface", "label": "UPDATE_PACKAGES_WITHOUT_USER_ACTION" }, { "id": "permission-890d6102", "type": "permission", "layer": "surface", "label": "NFC" }, { "id": "permission-920e27c9", "type": "permission", "layer": "surface", "label": "QUERY_ALL_PACKAGES" }, { "id": "permission-2d4c14ec", "type": "permission", "layer": "surface", "label": "POST_NOTIFICATIONS" }, { "id": "permission-0c228889", "type": "permission", "layer": "surface", "label": "ENFORCE_UPDATE_OWNERSHIP" }, { "id": "permission-60b34f6b", "type": "permission", "layer": "surface", "label": "org.fdroid.fdroid.permission.UPDATE_REPOS" }, { "id": "permission-f15c57cc", "type": "permission", "layer": "surface", "label": "org.fdroid.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION" }, { "id": "permission-db2cd48e", "type": "permission", "layer": "surface", "label": "CAMERA" }, { "id": "component-02086ecb", "type": "component", "layer": "surface", "label": "activities", "detail": "25" }, { "id": "component-4a603ff6", "type": "component", "layer": "surface", "label": "services", "detail": "16" }, { "id": "component-85ee65ea", "type": "component", "layer": "surface", "label": "receivers", "detail": "16" }, { "id": "component-dedb6b43", "type": "component", "layer": "surface", "label": "providers", "detail": "4" }, { "id": "component-eab57921", "type": "component", "layer": "surface", "label": "exported", "detail": "10" }, { "id": "dex-a0a58a70", "type": "dex", "layer": "code", "label": "classes.dex", "detail": "418451b2d252616c62facebeaf3140ccb74541db649624b54d4a4f66fef772a4" }, { "id": "dex-27a27c18", "type": "dex", "layer": "code", "label": "classes2.dex", "detail": "1b6439d627e91bafc336ddabb07e546b3b0658bbe5ba789495f0bf3650044e85" }, { "id": "native-a64325f2", "type": "native-library", "layer": "code", "label": "lib/arm64-v8a/libandroidx.graphics.path.so", "detail": "41e9a793c43a0f4fddb19e33f346bace464f30f888ba7b9eaf96294ea115bfb6" }, { "id": "native-c5b2a398", "type": "native-library", "layer": "code", "label": "lib/armeabi-v7a/libandroidx.graphics.path.so", "detail": "41399eba6fc2a60f6f14642375c1824f3cf25eb8fec7397d753730a3ceda3e2b" }, { "id": "native-a46cf2b4", "type": "native-library", "layer": "code", "label": "lib/x86/libandroidx.graphics.path.so", "detail": "eb0570b41fd3bff25d8204a967c03bd7550719e768b791f680cc40cbe35f29af" }, { "id": "native-d2435bc3", "type": "native-library", "layer": "code", "label": "lib/x86_64/libandroidx.graphics.path.so", "detail": "4e56c996f13670e70082658de7880c4020eabf4f25e43387f88ed78a713fc9f0" }, { "id": "signature-b533ed87", "type": "signature", "layer": "identity", "label": "META-INF/CIARANG.SF", "detail": "dd51816299bc8e8c29e8f1f28aaa9c9a27be8a86128055a1e23c4ccb7b49a8b0" }, { "id": "signature-f33622ad", "type": "signature", "layer": "identity", "label": "META-INF/CIARANG.RSA", "detail": "92e00f3587478b6caf6a2e4419420d1b3587efd42197e007059ba5e6b77ee464" }, { "id": "signature-69868135", "type": "signature", "layer": "identity", "label": "META-INF/MANIFEST.MF", "detail": "7dd24527f4c1cdbf9f03e56f6ad5c745e5600a49704547d1f31b3c29b89b2c6d" }, { "id": "indicator-9247a98f", "type": "indicator", "layer": "infrastructure", "label": "127.0.0.1", "detail": "ip" }, { "id": "indicator-a5be3961", "type": "indicator", "layer": "infrastructure", "label": "https://f-droid.org/", "detail": "url" }, { "id": "indicator-c94be912", "type": "indicator", "layer": "infrastructure", "label": "f-droid.org", "detail": "domain" }, { "id": "indicator-b9b1ae89", "type": "indicator", "layer": "infrastructure", "label": "https://f-droid.org/archive", "detail": "url" }, { "id": "indicator-be8e75cb", "type": "indicator", "layer": "infrastructure", "label": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/archive", "detail": "url" }, { "id": "indicator-5f68655c", "type": "indicator", "layer": "infrastructure", "label": "fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion", "detail": "domain" }, { "id": "indicator-fd8b43dc", "type": "indicator", "layer": "infrastructure", "label": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/archive", "detail": "url" }, { "id": "indicator-bf108391", "type": "indicator", "layer": "infrastructure", "label": "dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion", "detail": "domain" }, { "id": "indicator-867797a7", "type": "indicator", "layer": "infrastructure", "label": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/archive", "detail": "url" }, { "id": "indicator-e5e49c7c", "type": "indicator", "layer": "infrastructure", "label": "ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion", "detail": "domain" }, { "id": "indicator-b6fa0b6c", "type": "indicator", "layer": "infrastructure", "label": "http://lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion/pub/fdroid/archive", "detail": "url" }, { "id": "indicator-696a8931", "type": "indicator", "layer": "infrastructure", "label": "lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion", "detail": "domain" }, { "id": "indicator-90dacf54", "type": "indicator", "layer": "infrastructure", "label": "http://mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion/fdroid/archive", "detail": "url" }, { "id": "indicator-29315327", "type": "indicator", "layer": "infrastructure", "label": "mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion", "detail": "domain" }, { "id": "indicator-bca45fa1", "type": "indicator", "layer": "infrastructure", "label": "https://fdroid.tetaneutral.net/fdroid/archive", "detail": "url" }, { "id": "indicator-a7cfa6b9", "type": "indicator", "layer": "infrastructure", "label": "fdroid.tetaneutral.net", "detail": "domain" }, { "id": "indicator-6713a91f", "type": "indicator", "layer": "infrastructure", "label": "https://ftp.agdsn.de/fdroid/archive", "detail": "url" }, { "id": "indicator-1c88b8db", "type": "indicator", "layer": "infrastructure", "label": "ftp.agdsn.de", "detail": "domain" }, { "id": "indicator-8fac8d2a", "type": "indicator", "layer": "infrastructure", "label": "https://ftp.fau.de/fdroid/archive", "detail": "url" }, { "id": "indicator-4a1100f8", "type": "indicator", "layer": "infrastructure", "label": "ftp.fau.de", "detail": "domain" }, { "id": "indicator-071b81c3", "type": "indicator", "layer": "infrastructure", "label": "https://ftp.gwdg.de/pub/android/fdroid/archive", "detail": "url" }, { "id": "indicator-49db8013", "type": "indicator", "layer": "infrastructure", "label": "ftp.gwdg.de", "detail": "domain" }, { "id": "indicator-63f22f0f", "type": "indicator", "layer": "infrastructure", "label": "https://ftp.lysator.liu.se/pub/fdroid/archive", "detail": "url" }, { "id": "indicator-741ae80b", "type": "indicator", "layer": "infrastructure", "label": "ftp.lysator.liu.se", "detail": "domain" }, { "id": "indicator-b87cbbbf", "type": "indicator", "layer": "infrastructure", "label": "https://mirror.cyberbits.eu/fdroid/archive", "detail": "url" }, { "id": "indicator-09421f73", "type": "indicator", "layer": "infrastructure", "label": "mirror.cyberbits.eu", "detail": "domain" }, { "id": "indicator-fb7c5ed3", "type": "indicator", "layer": "infrastructure", "label": "https://mirror.fcix.net/fdroid/archive", "detail": "url" }, { "id": "indicator-97471a0f", "type": "indicator", "layer": "infrastructure", "label": "mirror.fcix.net", "detail": "domain" }, { "id": "indicator-dcc113b0", "type": "indicator", "layer": "infrastructure", "label": "https://mirror.kumi.systems/fdroid/archive", "detail": "url" }, { "id": "indicator-cebd3b66", "type": "indicator", "layer": "infrastructure", "label": "mirror.kumi.systems", "detail": "domain" }, { "id": "finding-27846e51", "type": "finding", "layer": "finding", "label": "High-impact permissions need context", "detail": "permissions-review", "severity": "medium", "findingId": "finding-2a4817fa" }, { "id": "evidence-node-84d5a3d5", "type": "evidence", "layer": "evidence", "label": "AndroidManifest.xml", "detail": "android.permission.REQUEST_INSTALL_PACKAGES", "evidenceId": "evidence-ff6e7156" }, { "id": "evidence-node-31d59b68", "type": "evidence", "layer": "evidence", "label": "AndroidManifest.xml", "detail": "android.permission.QUERY_ALL_PACKAGES", "evidenceId": "evidence-a98e8316" }, { "id": "evidence-node-9831f88c", "type": "evidence", "layer": "evidence", "label": "AndroidManifest.xml", "detail": "android.permission.CAMERA", "evidenceId": "evidence-f9d84a54" }, { "id": "finding-29c39d61", "type": "finding", "layer": "finding", "label": "HTTP address trace found", "detail": "cleartext-url", "severity": "high", "findingId": "finding-ecd5296d" }, { "id": "evidence-node-790c8def", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/archive", "evidenceId": "evidence-53ebf05d" }, { "id": "evidence-node-0f553c25", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/archive", "evidenceId": "evidence-bd3774f9" }, { "id": "evidence-node-63c188ac", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/archive", "evidenceId": "evidence-a98516d3" }, { "id": "evidence-node-7b062f97", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion/pub/fdroid/archive", "evidenceId": "evidence-2f233d93" }, { "id": "evidence-node-6eeeabe6", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion/fdroid/archive", "evidenceId": "evidence-23fafcb2" }, { "id": "evidence-node-85253293", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/repo", "evidenceId": "evidence-38ea8780" }, { "id": "evidence-node-6d4be6e4", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/repo", "evidenceId": "evidence-98860332" }, { "id": "evidence-node-1efdc616", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/repo", "evidenceId": "evidence-96c42272" }, { "id": "finding-661f410b", "type": "finding", "layer": "finding", "label": "Multiple DEX files", "detail": "multiple-dex", "severity": "info", "findingId": "finding-928e7efd" }, { "id": "evidence-node-6b34f23a", "type": "evidence", "layer": "evidence", "label": "classes.dex", "detail": "classes.dex", "evidenceId": "evidence-5677a263" }, { "id": "evidence-node-2f0a2fb5", "type": "evidence", "layer": "evidence", "label": "classes2.dex", "detail": "classes2.dex", "evidenceId": "evidence-47ea97fa" }, { "id": "finding-971c4821", "type": "finding", "layer": "finding", "label": "Native code surface found", "detail": "native-code", "severity": "info", "findingId": "finding-4bef48dc" }, { "id": "evidence-node-46eb38c8", "type": "evidence", "layer": "evidence", "label": "lib/arm64-v8a/libandroidx.graphics.path.so", "detail": "lib/arm64-v8a/libandroidx.graphics.path.so", "evidenceId": "evidence-2128572b" }, { "id": "evidence-node-ceb325ed", "type": "evidence", "layer": "evidence", "label": "lib/armeabi-v7a/libandroidx.graphics.path.so", "detail": "lib/armeabi-v7a/libandroidx.graphics.path.so", "evidenceId": "evidence-389142a0" }, { "id": "evidence-node-865f2b9c", "type": "evidence", "layer": "evidence", "label": "lib/x86/libandroidx.graphics.path.so", "detail": "lib/x86/libandroidx.graphics.path.so", "evidenceId": "evidence-66270471" }, { "id": "evidence-node-89b57e17", "type": "evidence", "layer": "evidence", "label": "lib/x86_64/libandroidx.graphics.path.so", "detail": "lib/x86_64/libandroidx.graphics.path.so", "evidenceId": "evidence-04d9fab4" } ], "edges": [ { "id": "edge-f13881fc", "source": "artifact-dd927b55", "target": "application-d930a9b1", "type": "IDENTIFIES" }, { "id": "edge-ce56bdf8", "source": "artifact-dd927b55", "target": "manifest-b4e1978e", "type": "DESCRIBED_BY" }, { "id": "edge-1c2b64a3", "source": "manifest-b4e1978e", "target": "permission-6ef7b93c", "type": "REQUESTS_PERMISSION" }, { "id": "edge-a5662437", "source": "manifest-b4e1978e", "target": "permission-f0024cd8", "type": "REQUESTS_PERMISSION" }, { "id": "edge-beedc51e", "source": "manifest-b4e1978e", "target": "permission-fd596477", "type": "REQUESTS_PERMISSION" }, { "id": "edge-2a373177", "source": "manifest-b4e1978e", "target": "permission-725ef578", "type": "REQUESTS_PERMISSION" }, { "id": "edge-c8b20a75", "source": "manifest-b4e1978e", "target": "permission-04ffdaf2", "type": "REQUESTS_PERMISSION" }, { "id": "edge-6618cdb7", "source": "manifest-b4e1978e", "target": "permission-3f806639", "type": "REQUESTS_PERMISSION" }, { "id": "edge-ed405272", "source": "manifest-b4e1978e", "target": "permission-b4a90dac", "type": "REQUESTS_PERMISSION" }, { "id": "edge-7912f79d", "source": "manifest-b4e1978e", "target": "permission-5e1a0cbd", "type": "REQUESTS_PERMISSION" }, { "id": "edge-d98628da", "source": "manifest-b4e1978e", "target": "permission-7ecd3945", "type": "REQUESTS_PERMISSION" }, { "id": "edge-0171f93a", "source": "manifest-b4e1978e", "target": "permission-a6a5fd74", "type": "REQUESTS_PERMISSION" }, { "id": "edge-7bc6e792", "source": "manifest-b4e1978e", "target": "permission-17f9bea3", "type": "REQUESTS_PERMISSION" }, { "id": "edge-a75c8fcb", "source": "manifest-b4e1978e", "target": "permission-222ca1c5", "type": "REQUESTS_PERMISSION" }, { "id": "edge-fb7e6e80", "source": "manifest-b4e1978e", "target": "permission-af9b7933", "type": "REQUESTS_PERMISSION" }, { "id": "edge-77290712", "source": "manifest-b4e1978e", "target": "permission-15fea338", "type": "REQUESTS_PERMISSION" }, { "id": "edge-20bee244", "source": "manifest-b4e1978e", "target": "permission-a53538e6", "type": "REQUESTS_PERMISSION" }, { "id": "edge-b0b3f844", "source": "manifest-b4e1978e", "target": "permission-f46c9d64", "type": "REQUESTS_PERMISSION" }, { "id": "edge-83827cc3", "source": "manifest-b4e1978e", "target": "permission-eae3b67d", "type": "REQUESTS_PERMISSION" }, { "id": "edge-172e62b7", "source": "manifest-b4e1978e", "target": "permission-d8971981", "type": "REQUESTS_PERMISSION" }, { "id": "edge-43208a8a", "source": "manifest-b4e1978e", "target": "permission-eb44fe55", "type": "REQUESTS_PERMISSION" }, { "id": "edge-30c5bd90", "source": "manifest-b4e1978e", "target": "permission-9a140076", "type": "REQUESTS_PERMISSION" }, { "id": "edge-59cc61f9", "source": "manifest-b4e1978e", "target": "permission-d4daf284", "type": "REQUESTS_PERMISSION" }, { "id": "edge-4cada541", "source": "manifest-b4e1978e", "target": "permission-e20dd596", "type": "REQUESTS_PERMISSION" }, { "id": "edge-355a87fa", "source": "manifest-b4e1978e", "target": "permission-890d6102", "type": "REQUESTS_PERMISSION" }, { "id": "edge-25b31d41", "source": "manifest-b4e1978e", "target": "permission-920e27c9", "type": "REQUESTS_PERMISSION" }, { "id": "edge-e7fcbda0", "source": "manifest-b4e1978e", "target": "permission-2d4c14ec", "type": "REQUESTS_PERMISSION" }, { "id": "edge-cd2a2b74", "source": "manifest-b4e1978e", "target": "permission-0c228889", "type": "REQUESTS_PERMISSION" }, { "id": "edge-90f45895", "source": "manifest-b4e1978e", "target": "permission-60b34f6b", "type": "REQUESTS_PERMISSION" }, { "id": "edge-0084f439", "source": "manifest-b4e1978e", "target": "permission-f15c57cc", "type": "REQUESTS_PERMISSION" }, { "id": "edge-d6cd3b48", "source": "manifest-b4e1978e", "target": "permission-db2cd48e", "type": "REQUESTS_PERMISSION" }, { "id": "edge-f7faf955", "source": "manifest-b4e1978e", "target": "component-02086ecb", "type": "DECLARES_COMPONENT" }, { "id": "edge-e419ae5b", "source": "manifest-b4e1978e", "target": "component-4a603ff6", "type": "DECLARES_COMPONENT" }, { "id": "edge-9c2ba56d", "source": "manifest-b4e1978e", "target": "component-85ee65ea", "type": "DECLARES_COMPONENT" }, { "id": "edge-ccfc815f", "source": "manifest-b4e1978e", "target": "component-dedb6b43", "type": "DECLARES_COMPONENT" }, { "id": "edge-b32b9279", "source": "manifest-b4e1978e", "target": "component-eab57921", "type": "DECLARES_COMPONENT" }, { "id": "edge-2078ce64", "source": "artifact-dd927b55", "target": "dex-a0a58a70", "type": "CONTAINS_DEX" }, { "id": "edge-99d88454", "source": "artifact-dd927b55", "target": "dex-27a27c18", "type": "CONTAINS_DEX" }, { "id": "edge-04026212", "source": "artifact-dd927b55", "target": "native-a64325f2", "type": "LOADS_NATIVE_LIBRARY" }, { "id": "edge-5e2ba648", "source": "artifact-dd927b55", "target": "native-c5b2a398", "type": "LOADS_NATIVE_LIBRARY" }, { "id": "edge-68df162d", "source": "artifact-dd927b55", "target": "native-a46cf2b4", "type": "LOADS_NATIVE_LIBRARY" }, { "id": "edge-bf64b72f", "source": "artifact-dd927b55", "target": "native-d2435bc3", "type": "LOADS_NATIVE_LIBRARY" }, { "id": "edge-96a2bf9e", "source": "artifact-dd927b55", "target": "signature-b533ed87", "type": "HAS_SIGNATURE_ENTRY" }, { "id": "edge-66a9d96e", "source": "artifact-dd927b55", "target": "signature-f33622ad", "type": "HAS_SIGNATURE_ENTRY" }, { "id": "edge-ff7762dd", "source": "artifact-dd927b55", "target": "signature-69868135", "type": "HAS_SIGNATURE_ENTRY" }, { "id": "edge-19d4a52e", "source": "artifact-dd927b55", "target": "indicator-9247a98f", "type": "REFERENCES" }, { "id": "edge-c8265566", "source": "artifact-dd927b55", "target": "indicator-a5be3961", "type": "REFERENCES" }, { "id": "edge-d126945f", "source": "artifact-dd927b55", "target": "indicator-c94be912", "type": "REFERENCES" }, { "id": "edge-891cd221", "source": "artifact-dd927b55", "target": "indicator-b9b1ae89", "type": "REFERENCES" }, { "id": "edge-7cc06f0f", "source": "artifact-dd927b55", "target": "indicator-be8e75cb", "type": "REFERENCES" }, { "id": "edge-7c2f2e38", "source": "artifact-dd927b55", "target": "indicator-5f68655c", "type": "REFERENCES" }, { "id": "edge-6cb5654c", "source": "artifact-dd927b55", "target": "indicator-fd8b43dc", "type": "REFERENCES" }, { "id": "edge-0a90ca4e", "source": "artifact-dd927b55", "target": "indicator-bf108391", "type": "REFERENCES" }, { "id": "edge-ac07f718", "source": "artifact-dd927b55", "target": "indicator-867797a7", "type": "REFERENCES" }, { "id": "edge-bd0654fd", "source": "artifact-dd927b55", "target": "indicator-e5e49c7c", "type": "REFERENCES" }, { "id": "edge-65301e0c", "source": "artifact-dd927b55", "target": "indicator-b6fa0b6c", "type": "REFERENCES" }, { "id": "edge-e429259f", "source": "artifact-dd927b55", "target": "indicator-696a8931", "type": "REFERENCES" }, { "id": "edge-16fc7096", "source": "artifact-dd927b55", "target": "indicator-90dacf54", "type": "REFERENCES" }, { "id": "edge-b79e09fe", "source": "artifact-dd927b55", "target": "indicator-29315327", "type": "REFERENCES" }, { "id": "edge-cd70e013", "source": "artifact-dd927b55", "target": "indicator-bca45fa1", "type": "REFERENCES" }, { "id": "edge-dc1a3c9b", "source": "artifact-dd927b55", "target": "indicator-a7cfa6b9", "type": "REFERENCES" }, { "id": "edge-63cea56e", "source": "artifact-dd927b55", "target": "indicator-6713a91f", "type": "REFERENCES" }, { "id": "edge-05b0b118", "source": "artifact-dd927b55", "target": "indicator-1c88b8db", "type": "REFERENCES" }, { "id": "edge-fe27a28b", "source": "artifact-dd927b55", "target": "indicator-8fac8d2a", "type": "REFERENCES" }, { "id": "edge-e243ee37", "source": "artifact-dd927b55", "target": "indicator-4a1100f8", "type": "REFERENCES" }, { "id": "edge-21e69de3", "source": "artifact-dd927b55", "target": "indicator-071b81c3", "type": "REFERENCES" }, { "id": "edge-1016e4d1", "source": "artifact-dd927b55", "target": "indicator-49db8013", "type": "REFERENCES" }, { "id": "edge-67c7cd55", "source": "artifact-dd927b55", "target": "indicator-63f22f0f", "type": "REFERENCES" }, { "id": "edge-09a2b0de", "source": "artifact-dd927b55", "target": "indicator-741ae80b", "type": "REFERENCES" }, { "id": "edge-0d5f9868", "source": "artifact-dd927b55", "target": "indicator-b87cbbbf", "type": "REFERENCES" }, { "id": "edge-d6756560", "source": "artifact-dd927b55", "target": "indicator-09421f73", "type": "REFERENCES" }, { "id": "edge-331e9acd", "source": "artifact-dd927b55", "target": "indicator-fb7c5ed3", "type": "REFERENCES" }, { "id": "edge-d673b069", "source": "artifact-dd927b55", "target": "indicator-97471a0f", "type": "REFERENCES" }, { "id": "edge-b64772f3", "source": "artifact-dd927b55", "target": "indicator-dcc113b0", "type": "REFERENCES" }, { "id": "edge-3406299b", "source": "artifact-dd927b55", "target": "indicator-cebd3b66", "type": "REFERENCES" }, { "id": "edge-be4c876f", "source": "artifact-dd927b55", "target": "finding-27846e51", "type": "PRODUCES_FINDING" }, { "id": "edge-c8af1fe4", "source": "finding-27846e51", "target": "evidence-node-84d5a3d5", "type": "SUPPORTED_BY" }, { "id": "edge-28047ab6", "source": "finding-27846e51", "target": "evidence-node-31d59b68", "type": "SUPPORTED_BY" }, { "id": "edge-d1835a9a", "source": "finding-27846e51", "target": "evidence-node-9831f88c", "type": "SUPPORTED_BY" }, { "id": "edge-28dd0f08", "source": "artifact-dd927b55", "target": "finding-29c39d61", "type": "PRODUCES_FINDING" }, { "id": "edge-31c7cbd9", "source": "finding-29c39d61", "target": "evidence-node-790c8def", "type": "SUPPORTED_BY" }, { "id": "edge-c0914c94", "source": "finding-29c39d61", "target": "evidence-node-0f553c25", "type": "SUPPORTED_BY" }, { "id": "edge-13d617f0", "source": "finding-29c39d61", "target": "evidence-node-63c188ac", "type": "SUPPORTED_BY" }, { "id": "edge-ecc46218", "source": "finding-29c39d61", "target": "evidence-node-7b062f97", "type": "SUPPORTED_BY" }, { "id": "edge-7dd588c4", "source": "finding-29c39d61", "target": "evidence-node-6eeeabe6", "type": "SUPPORTED_BY" }, { "id": "edge-34321fbc", "source": "finding-29c39d61", "target": "evidence-node-85253293", "type": "SUPPORTED_BY" }, { "id": "edge-e6055d25", "source": "finding-29c39d61", "target": "evidence-node-6d4be6e4", "type": "SUPPORTED_BY" }, { "id": "edge-f52d89c9", "source": "finding-29c39d61", "target": "evidence-node-1efdc616", "type": "SUPPORTED_BY" }, { "id": "edge-6f2e7629", "source": "artifact-dd927b55", "target": "finding-661f410b", "type": "PRODUCES_FINDING" }, { "id": "edge-9b5a3335", "source": "finding-661f410b", "target": "evidence-node-6b34f23a", "type": "SUPPORTED_BY" }, { "id": "edge-f9ab95c4", "source": "finding-661f410b", "target": "evidence-node-2f0a2fb5", "type": "SUPPORTED_BY" }, { "id": "edge-c5af46e2", "source": "artifact-dd927b55", "target": "finding-971c4821", "type": "PRODUCES_FINDING" }, { "id": "edge-b37e328c", "source": "finding-971c4821", "target": "evidence-node-46eb38c8", "type": "SUPPORTED_BY" }, { "id": "edge-f7f2ca1e", "source": "finding-971c4821", "target": "evidence-node-ceb325ed", "type": "SUPPORTED_BY" }, { "id": "edge-90ee3630", "source": "finding-971c4821", "target": "evidence-node-865f2b9c", "type": "SUPPORTED_BY" }, { "id": "edge-137da5c7", "source": "finding-971c4821", "target": "evidence-node-89b57e17", "type": "SUPPORTED_BY" } ], "limits": { "nodeLimit": 140, "edgeLimit": 240, "omittedNodes": 0, "omittedEdges": 0 } }, "summary": { "findings": 4, "high": 1, "medium": 1, "low": 0, "info": 2 } }, "candidate": { "schema": "csint-mobile-exposure/v1", "reportId": "meg-985f5181d48bb6ba", "generatedAt": "2026-08-22T09:00:08.000Z", "artifact": { "fileName": "org.fdroid.fdroid-1.23.2.apk", "fileSize": 12426276, "sha256": "985f5181d48bb6bafd54083a048b391271e0ab28385881cc41294fb01a222762", "packageName": "org.fdroid.fdroid", "versionName": "1.23.2", "versionCode": "1023052" }, "boundary": { "processing": "local-browser", "sampleUploaded": false, "sampleExecuted": false, "dynamicAnalysis": false, "malwareVerdict": false, "signatureValidityChecked": false }, "coverage": { "status": "limited", "manifest": "binary-xml-parsed", "stringScan": "bounded-partial", "scannedBytes": 12491896, "stringsInspected": 20000, "note": { "tr": "En az bir statik analiz alanı kaynak sınırı veya binary manifest nedeniyle eksik. Eksik bilgi güvenli kabul edilmedi.", "en": "At least one static-analysis area is incomplete because of a resource limit or binary manifest. Missing data was not treated as safe." } }, "inventory": { "permissions": [ "android.permission.INTERNET", "android.permission.ACCESS_NETWORK_STATE", "android.permission.ACCESS_WIFI_STATE", "android.permission.CHANGE_WIFI_MULTICAST_STATE", "android.permission.CHANGE_NETWORK_STATE", "android.permission.CHANGE_WIFI_STATE", "android.permission.FOREGROUND_SERVICE", "android.permission.BLUETOOTH", "android.permission.BLUETOOTH_ADMIN", "android.permission.BLUETOOTH_CONNECT", "android.permission.BLUETOOTH_SCAN", "android.permission.RECEIVE_BOOT_COMPLETED", "android.permission.READ_EXTERNAL_STORAGE", "android.permission.WRITE_EXTERNAL_STORAGE", "android.permission.MANAGE_EXTERNAL_STORAGE", "android.permission.WRITE_SETTINGS", "android.permission.USB_PERMISSION", "android.permission.WAKE_LOCK", "android.permission.ACCESS_COARSE_LOCATION", "android.permission.REQUEST_INSTALL_PACKAGES", "android.permission.REQUEST_DELETE_PACKAGES", "android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION", "android.permission.NFC", "android.permission.QUERY_ALL_PACKAGES", "android.permission.POST_NOTIFICATIONS", "android.permission.ENFORCE_UPDATE_OWNERSHIP", "org.fdroid.fdroid.permission.UPDATE_REPOS", "org.fdroid.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION", "android.permission.CAMERA" ], "components": { "activities": 25, "services": 16, "receivers": 16, "providers": 4, "exported": 10 }, "dexFiles": [ { "name": "classes.dex", "kind": "dex", "size": 8761136, "sha256": "62ed29500a966c5d44ec53a5c61e3c3d351706a763d0e7217a1daf610b609a92" }, { "name": "classes2.dex", "kind": "dex", "size": 9078492, "sha256": "981ccce2e4829c5cb0759d12d79c3606d27837450359001d83284054cc76082f" } ], "nativeLibraries": [ { "name": "lib/arm64-v8a/libandroidx.graphics.path.so", "kind": "native", "size": 10096, "sha256": "41e9a793c43a0f4fddb19e33f346bace464f30f888ba7b9eaf96294ea115bfb6" }, { "name": "lib/armeabi-v7a/libandroidx.graphics.path.so", "kind": "native", "size": 7252, "sha256": "41399eba6fc2a60f6f14642375c1824f3cf25eb8fec7397d753730a3ceda3e2b" }, { "name": "lib/x86/libandroidx.graphics.path.so", "kind": "native", "size": 9284, "sha256": "eb0570b41fd3bff25d8204a967c03bd7550719e768b791f680cc40cbe35f29af" }, { "name": "lib/x86_64/libandroidx.graphics.path.so", "kind": "native", "size": 10760, "sha256": "4e56c996f13670e70082658de7880c4020eabf4f25e43387f88ed78a713fc9f0" } ], "signatureEntries": [ { "name": "META-INF/CIARANG.SF", "kind": "signature", "size": 101704, "sha256": "b8373dd50e8f62280576cfa96839bcc29a6f7d137fd64e6ee085a1668f34054f" }, { "name": "META-INF/CIARANG.RSA", "kind": "signature", "size": 1350, "sha256": "09c3d505d7d05eaa16b12d12d431e89ad8b377889b2bac0ae00d380855949029" }, { "name": "META-INF/MANIFEST.MF", "kind": "signature", "size": 101577, "sha256": "02264aab0165785bbd5f3d41f8dc1d3770969618ee4a354801d8090a5e73134c" } ], "indicators": [ { "kind": "ip", "value": "127.0.0.1" }, { "kind": "url", "value": "https://f-droid.org/" }, { "kind": "domain", "value": "f-droid.org" }, { "kind": "url", "value": "https://f-droid.org/archive" }, { "kind": "url", "value": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/archive" }, { "kind": "domain", "value": "fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion" }, { "kind": "url", "value": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/archive" }, { "kind": "domain", "value": "dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion" }, { "kind": "url", "value": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/archive" }, { "kind": "domain", "value": "ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion" }, { "kind": "url", "value": "http://lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion/pub/fdroid/archive" }, { "kind": "domain", "value": "lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion" }, { "kind": "url", "value": "http://mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion/fdroid/archive" }, { "kind": "domain", "value": "mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion" }, { "kind": "url", "value": "https://fdroid.tetaneutral.net/fdroid/archive" }, { "kind": "domain", "value": "fdroid.tetaneutral.net" }, { "kind": "url", "value": "https://ftp.agdsn.de/fdroid/archive" }, { "kind": "domain", "value": "ftp.agdsn.de" }, { "kind": "url", "value": "https://ftp.fau.de/fdroid/archive" }, { "kind": "domain", "value": "ftp.fau.de" }, { "kind": "url", "value": "https://ftp.gwdg.de/pub/android/fdroid/archive" }, { "kind": "domain", "value": "ftp.gwdg.de" }, { "kind": "url", "value": "https://ftp.lysator.liu.se/pub/fdroid/archive" }, { "kind": "domain", "value": "ftp.lysator.liu.se" }, { "kind": "url", "value": "https://mirror.cyberbits.eu/fdroid/archive" }, { "kind": "domain", "value": "mirror.cyberbits.eu" }, { "kind": "url", "value": "https://mirror.fcix.net/fdroid/archive" }, { "kind": "domain", "value": "mirror.fcix.net" }, { "kind": "url", "value": "https://mirror.kumi.systems/fdroid/archive" }, { "kind": "domain", "value": "mirror.kumi.systems" }, { "kind": "url", "value": "https://mirror.level66.network/fdroid/archive" }, { "kind": "domain", "value": "mirror.level66.network" }, { "kind": "url", "value": "https://mirror.ossplanet.net/fdroid/archive" }, { "kind": "domain", "value": "mirror.ossplanet.net" }, { "kind": "url", "value": "https://mirrors.dotsrc.org/fdroid/archive" }, { "kind": "domain", "value": "mirrors.dotsrc.org" }, { "kind": "url", "value": "https://opencolo.mm.fcix.net/fdroid/archive" }, { "kind": "domain", "value": "opencolo.mm.fcix.net" }, { "kind": "url", "value": "https://plug-mirror.rcac.purdue.edu/fdroid/archive" }, { "kind": "domain", "value": "plug-mirror.rcac.purdue.edu" }, { "kind": "url", "value": "https://mirror.init7.net/fdroid/archive" }, { "kind": "domain", "value": "mirror.init7.net" }, { "kind": "url", "value": "https://mirror.freedif.org/fdroid/archive" }, { "kind": "domain", "value": "mirror.freedif.org" }, { "kind": "url", "value": "https://de.freedif.org/fdroid/archive" }, { "kind": "domain", "value": "de.freedif.org" }, { "kind": "url", "value": "https://f-droid.org/repo" }, { "kind": "url", "value": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/repo" }, { "kind": "url", "value": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/repo" }, { "kind": "url", "value": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/repo" }, { "kind": "url", "value": "http://lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion/pub/fdroid/repo" }, { "kind": "url", "value": "http://mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion/fdroid/repo" }, { "kind": "url", "value": "https://fdroid.tetaneutral.net/fdroid/repo" }, { "kind": "url", "value": "https://ftp.agdsn.de/fdroid/repo" }, { "kind": "url", "value": "https://ftp.fau.de/fdroid/repo" }, { "kind": "url", "value": "https://ftp.gwdg.de/pub/android/fdroid/repo" }, { "kind": "url", "value": "https://ftp.lysator.liu.se/pub/fdroid/repo" }, { "kind": "url", "value": "https://mirror.cyberbits.eu/fdroid/repo" }, { "kind": "url", "value": "https://mirror.fcix.net/fdroid/repo" }, { "kind": "url", "value": "https://mirror.kumi.systems/fdroid/repo" }, { "kind": "url", "value": "https://mirror.level66.network/fdroid/repo" }, { "kind": "url", "value": "https://mirror.ossplanet.net/fdroid/repo" }, { "kind": "url", "value": "https://mirrors.dotsrc.org/fdroid/repo" }, { "kind": "url", "value": "https://opencolo.mm.fcix.net/fdroid/repo" }, { "kind": "url", "value": "https://plug-mirror.rcac.purdue.edu/fdroid/repo" }, { "kind": "url", "value": "https://mirror.init7.net/fdroid/repo" }, { "kind": "url", "value": "https://mirror.freedif.org/fdroid/repo" }, { "kind": "url", "value": "https://de.freedif.org/fdroid/repo" }, { "kind": "url", "value": "https://forum.f-droid.org/" }, { "kind": "domain", "value": "forum.f-droid.org" }, { "kind": "url", "value": "https://github.com/journeyapps/zxing-android-embedded" }, { "kind": "domain", "value": "github.com" }, { "kind": "url", "value": "https://gitlab.com/fdroid/fdroidclient" }, { "kind": "domain", "value": "gitlab.com" }, { "kind": "url", "value": "https://journeyapps.com/" }, { "kind": "domain", "value": "journeyapps.com" }, { "kind": "url", "value": "https://keepandroidopen.org/" }, { "kind": "domain", "value": "keepandroidopen.org" } ] }, "evidence": [ { "id": "evidence-703fc705", "kind": "artifact-hash", "location": "org.fdroid.fdroid-1.23.2.apk", "value": "SHA-256 985f5181d48bb6bafd54083a048b391271e0ab28385881cc41294fb01a222762" }, { "id": "evidence-ff6e7156", "kind": "manifest-field", "location": "AndroidManifest.xml", "value": "android.permission.REQUEST_INSTALL_PACKAGES", "sourceEntry": "AndroidManifest.xml" }, { "id": "evidence-a98e8316", "kind": "manifest-field", "location": "AndroidManifest.xml", "value": "android.permission.QUERY_ALL_PACKAGES", "sourceEntry": "AndroidManifest.xml" }, { "id": "evidence-f9d84a54", "kind": "manifest-field", "location": "AndroidManifest.xml", "value": "android.permission.CAMERA", "sourceEntry": "AndroidManifest.xml" }, { "id": "evidence-53ebf05d", "kind": "recovered-string", "location": "resources.arsc", "value": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/archive", "sourceEntry": "resources.arsc" }, { "id": "evidence-bd3774f9", "kind": "recovered-string", "location": "resources.arsc", "value": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/archive", "sourceEntry": "resources.arsc" }, { "id": "evidence-a98516d3", "kind": "recovered-string", "location": "resources.arsc", "value": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/archive", "sourceEntry": "resources.arsc" }, { "id": "evidence-2f233d93", "kind": "recovered-string", "location": "resources.arsc", "value": "http://lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion/pub/fdroid/archive", "sourceEntry": "resources.arsc" }, { "id": "evidence-23fafcb2", "kind": "recovered-string", "location": "resources.arsc", "value": "http://mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion/fdroid/archive", "sourceEntry": "resources.arsc" }, { "id": "evidence-38ea8780", "kind": "recovered-string", "location": "resources.arsc", "value": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/repo", "sourceEntry": "resources.arsc" }, { "id": "evidence-98860332", "kind": "recovered-string", "location": "resources.arsc", "value": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/repo", "sourceEntry": "resources.arsc" }, { "id": "evidence-96c42272", "kind": "recovered-string", "location": "resources.arsc", "value": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/repo", "sourceEntry": "resources.arsc" }, { "id": "evidence-5677a263", "kind": "archive-entry", "location": "classes.dex", "value": "classes.dex", "sourceEntry": "classes.dex" }, { "id": "evidence-47ea97fa", "kind": "archive-entry", "location": "classes2.dex", "value": "classes2.dex", "sourceEntry": "classes2.dex" }, { "id": "evidence-2128572b", "kind": "archive-entry", "location": "lib/arm64-v8a/libandroidx.graphics.path.so", "value": "lib/arm64-v8a/libandroidx.graphics.path.so", "sourceEntry": "lib/arm64-v8a/libandroidx.graphics.path.so" }, { "id": "evidence-389142a0", "kind": "archive-entry", "location": "lib/armeabi-v7a/libandroidx.graphics.path.so", "value": "lib/armeabi-v7a/libandroidx.graphics.path.so", "sourceEntry": "lib/armeabi-v7a/libandroidx.graphics.path.so" }, { "id": "evidence-66270471", "kind": "archive-entry", "location": "lib/x86/libandroidx.graphics.path.so", "value": "lib/x86/libandroidx.graphics.path.so", "sourceEntry": "lib/x86/libandroidx.graphics.path.so" }, { "id": "evidence-04d9fab4", "kind": "archive-entry", "location": "lib/x86_64/libandroidx.graphics.path.so", "value": "lib/x86_64/libandroidx.graphics.path.so", "sourceEntry": "lib/x86_64/libandroidx.graphics.path.so" } ], "findings": [ { "id": "finding-14436634", "code": "permissions-review", "severity": "medium", "confidence": { "basis": "deterministic", "score": 1, "rationale": { "tr": "Sonuç doğrudan ayrıştırılmış alan veya arşiv envanterine dayanıyor.", "en": "The result is based directly on a parsed field or archive inventory." } }, "title": { "tr": "Yüksek etkili izinler bağlam bekliyor", "en": "High-impact permissions need context" }, "summary": { "tr": "Manifest, uygulamanın amacıyla birlikte değerlendirilmesi gereken izinler içeriyor.", "en": "The manifest contains permissions that should be evaluated against the app's stated purpose." }, "interpretation": { "tr": "İzin varlığı tek başına kötü niyet göstermez; ihtiyaç, kullanıcı açıklaması ve çalışma zamanı kullanımı doğrulanmalıdır.", "en": "Permission presence alone does not establish malicious intent; need, disclosure, and runtime use require validation." }, "evidenceIds": [ "evidence-ff6e7156", "evidence-a98e8316", "evidence-f9d84a54" ], "state": "open" }, { "id": "finding-3b45f083", "code": "cleartext-url", "severity": "high", "confidence": { "basis": "heuristic", "score": 0.82, "rationale": { "tr": "Sonuç sınırlı metin taramasındaki API veya değer izine dayanıyor; davranış kanıtı değildir.", "en": "The result is based on an API or value trace in a bounded string scan; it is not behavioural proof." } }, "title": { "tr": "HTTP adresi izi bulundu", "en": "HTTP address trace found" }, "summary": { "tr": "Sınırlı metin taramasında şifrelenmemiş HTTP adresleri kurtarıldı.", "en": "The bounded string scan recovered unencrypted HTTP addresses." }, "interpretation": { "tr": "Metin izi, bağlantının çalıştırıldığı anlamına gelmez; kod yolu veya dinamik trafik ile doğrulanmalıdır.", "en": "A recovered string does not mean the connection was used; confirm through code paths or dynamic traffic." }, "evidenceIds": [ "evidence-53ebf05d", "evidence-bd3774f9", "evidence-a98516d3", "evidence-2f233d93", "evidence-23fafcb2", "evidence-38ea8780", "evidence-98860332", "evidence-96c42272" ], "state": "open" }, { "id": "finding-a804c1eb", "code": "multiple-dex", "severity": "info", "confidence": { "basis": "deterministic", "score": 1, "rationale": { "tr": "Sonuç doğrudan ayrıştırılmış alan veya arşiv envanterine dayanıyor.", "en": "The result is based directly on a parsed field or archive inventory." } }, "title": { "tr": "Birden fazla DEX dosyası", "en": "Multiple DEX files" }, "summary": { "tr": "Paket multidex yapısı içeriyor.", "en": "The package contains a multidex structure." }, "interpretation": { "tr": "Bu yaygın bir uygulama yapısıdır; yalnızca inceleme kapsamını genişletir.", "en": "This is a common application structure; it only expands the review surface." }, "evidenceIds": [ "evidence-5677a263", "evidence-47ea97fa" ], "state": "open" }, { "id": "finding-fb8b889e", "code": "native-code", "severity": "info", "confidence": { "basis": "deterministic", "score": 1, "rationale": { "tr": "Sonuç doğrudan ayrıştırılmış alan veya arşiv envanterine dayanıyor.", "en": "The result is based directly on a parsed field or archive inventory." } }, "title": { "tr": "Native kod yüzeyi bulundu", "en": "Native code surface found" }, "summary": { "tr": "APK bir veya daha fazla .so kütüphanesi içeriyor.", "en": "The APK contains one or more .so libraries." }, "interpretation": { "tr": "Tarayıcı native kodu decompile etmez; gerekirse ayrı tersine mühendislik kapsamına alınmalıdır.", "en": "The browser does not decompile native code; add a separate reverse-engineering review when needed." }, "evidenceIds": [ "evidence-2128572b", "evidence-389142a0", "evidence-66270471", "evidence-04d9fab4" ], "state": "open" } ], "graph": { "nodes": [ { "id": "artifact-24945843", "type": "artifact", "layer": "artifact", "label": "org.fdroid.fdroid-1.23.2.apk", "detail": "985f5181d48bb6bafd54083a048b391271e0ab28385881cc41294fb01a222762" }, { "id": "application-d930a9b1", "type": "application", "layer": "identity", "label": "org.fdroid.fdroid", "detail": "1.23.2" }, { "id": "manifest-6a3d6e54", "type": "manifest", "layer": "identity", "label": "AndroidManifest.xml", "detail": "binary-xml" }, { "id": "permission-6ef7b93c", "type": "permission", "layer": "surface", "label": "INTERNET" }, { "id": "permission-f0024cd8", "type": "permission", "layer": "surface", "label": "ACCESS_NETWORK_STATE" }, { "id": "permission-fd596477", "type": "permission", "layer": "surface", "label": "ACCESS_WIFI_STATE" }, { "id": "permission-725ef578", "type": "permission", "layer": "surface", "label": "CHANGE_WIFI_MULTICAST_STATE" }, { "id": "permission-04ffdaf2", "type": "permission", "layer": "surface", "label": "CHANGE_NETWORK_STATE" }, { "id": "permission-3f806639", "type": "permission", "layer": "surface", "label": "CHANGE_WIFI_STATE" }, { "id": "permission-b4a90dac", "type": "permission", "layer": "surface", "label": "FOREGROUND_SERVICE" }, { "id": "permission-5e1a0cbd", "type": "permission", "layer": "surface", "label": "BLUETOOTH" }, { "id": "permission-7ecd3945", "type": "permission", "layer": "surface", "label": "BLUETOOTH_ADMIN" }, { "id": "permission-a6a5fd74", "type": "permission", "layer": "surface", "label": "BLUETOOTH_CONNECT" }, { "id": "permission-17f9bea3", "type": "permission", "layer": "surface", "label": "BLUETOOTH_SCAN" }, { "id": "permission-222ca1c5", "type": "permission", "layer": "surface", "label": "RECEIVE_BOOT_COMPLETED" }, { "id": "permission-af9b7933", "type": "permission", "layer": "surface", "label": "READ_EXTERNAL_STORAGE" }, { "id": "permission-15fea338", "type": "permission", "layer": "surface", "label": "WRITE_EXTERNAL_STORAGE" }, { "id": "permission-a53538e6", "type": "permission", "layer": "surface", "label": "MANAGE_EXTERNAL_STORAGE" }, { "id": "permission-f46c9d64", "type": "permission", "layer": "surface", "label": "WRITE_SETTINGS" }, { "id": "permission-eae3b67d", "type": "permission", "layer": "surface", "label": "USB_PERMISSION" }, { "id": "permission-d8971981", "type": "permission", "layer": "surface", "label": "WAKE_LOCK" }, { "id": "permission-eb44fe55", "type": "permission", "layer": "surface", "label": "ACCESS_COARSE_LOCATION" }, { "id": "permission-9a140076", "type": "permission", "layer": "surface", "label": "REQUEST_INSTALL_PACKAGES" }, { "id": "permission-d4daf284", "type": "permission", "layer": "surface", "label": "REQUEST_DELETE_PACKAGES" }, { "id": "permission-e20dd596", "type": "permission", "layer": "surface", "label": "UPDATE_PACKAGES_WITHOUT_USER_ACTION" }, { "id": "permission-890d6102", "type": "permission", "layer": "surface", "label": "NFC" }, { "id": "permission-920e27c9", "type": "permission", "layer": "surface", "label": "QUERY_ALL_PACKAGES" }, { "id": "permission-2d4c14ec", "type": "permission", "layer": "surface", "label": "POST_NOTIFICATIONS" }, { "id": "permission-0c228889", "type": "permission", "layer": "surface", "label": "ENFORCE_UPDATE_OWNERSHIP" }, { "id": "permission-60b34f6b", "type": "permission", "layer": "surface", "label": "org.fdroid.fdroid.permission.UPDATE_REPOS" }, { "id": "permission-f15c57cc", "type": "permission", "layer": "surface", "label": "org.fdroid.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION" }, { "id": "permission-db2cd48e", "type": "permission", "layer": "surface", "label": "CAMERA" }, { "id": "component-02086ecb", "type": "component", "layer": "surface", "label": "activities", "detail": "25" }, { "id": "component-4a603ff6", "type": "component", "layer": "surface", "label": "services", "detail": "16" }, { "id": "component-85ee65ea", "type": "component", "layer": "surface", "label": "receivers", "detail": "16" }, { "id": "component-dedb6b43", "type": "component", "layer": "surface", "label": "providers", "detail": "4" }, { "id": "component-eab57921", "type": "component", "layer": "surface", "label": "exported", "detail": "10" }, { "id": "dex-a0a58a70", "type": "dex", "layer": "code", "label": "classes.dex", "detail": "62ed29500a966c5d44ec53a5c61e3c3d351706a763d0e7217a1daf610b609a92" }, { "id": "dex-27a27c18", "type": "dex", "layer": "code", "label": "classes2.dex", "detail": "981ccce2e4829c5cb0759d12d79c3606d27837450359001d83284054cc76082f" }, { "id": "native-a64325f2", "type": "native-library", "layer": "code", "label": "lib/arm64-v8a/libandroidx.graphics.path.so", "detail": "41e9a793c43a0f4fddb19e33f346bace464f30f888ba7b9eaf96294ea115bfb6" }, { "id": "native-c5b2a398", "type": "native-library", "layer": "code", "label": "lib/armeabi-v7a/libandroidx.graphics.path.so", "detail": "41399eba6fc2a60f6f14642375c1824f3cf25eb8fec7397d753730a3ceda3e2b" }, { "id": "native-a46cf2b4", "type": "native-library", "layer": "code", "label": "lib/x86/libandroidx.graphics.path.so", "detail": "eb0570b41fd3bff25d8204a967c03bd7550719e768b791f680cc40cbe35f29af" }, { "id": "native-d2435bc3", "type": "native-library", "layer": "code", "label": "lib/x86_64/libandroidx.graphics.path.so", "detail": "4e56c996f13670e70082658de7880c4020eabf4f25e43387f88ed78a713fc9f0" }, { "id": "signature-53090859", "type": "signature", "layer": "identity", "label": "META-INF/CIARANG.SF", "detail": "b8373dd50e8f62280576cfa96839bcc29a6f7d137fd64e6ee085a1668f34054f" }, { "id": "signature-c1ee65be", "type": "signature", "layer": "identity", "label": "META-INF/CIARANG.RSA", "detail": "09c3d505d7d05eaa16b12d12d431e89ad8b377889b2bac0ae00d380855949029" }, { "id": "signature-e3c7289f", "type": "signature", "layer": "identity", "label": "META-INF/MANIFEST.MF", "detail": "02264aab0165785bbd5f3d41f8dc1d3770969618ee4a354801d8090a5e73134c" }, { "id": "indicator-9247a98f", "type": "indicator", "layer": "infrastructure", "label": "127.0.0.1", "detail": "ip" }, { "id": "indicator-a5be3961", "type": "indicator", "layer": "infrastructure", "label": "https://f-droid.org/", "detail": "url" }, { "id": "indicator-c94be912", "type": "indicator", "layer": "infrastructure", "label": "f-droid.org", "detail": "domain" }, { "id": "indicator-b9b1ae89", "type": "indicator", "layer": "infrastructure", "label": "https://f-droid.org/archive", "detail": "url" }, { "id": "indicator-be8e75cb", "type": "indicator", "layer": "infrastructure", "label": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/archive", "detail": "url" }, { "id": "indicator-5f68655c", "type": "indicator", "layer": "infrastructure", "label": "fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion", "detail": "domain" }, { "id": "indicator-fd8b43dc", "type": "indicator", "layer": "infrastructure", "label": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/archive", "detail": "url" }, { "id": "indicator-bf108391", "type": "indicator", "layer": "infrastructure", "label": "dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion", "detail": "domain" }, { "id": "indicator-867797a7", "type": "indicator", "layer": "infrastructure", "label": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/archive", "detail": "url" }, { "id": "indicator-e5e49c7c", "type": "indicator", "layer": "infrastructure", "label": "ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion", "detail": "domain" }, { "id": "indicator-b6fa0b6c", "type": "indicator", "layer": "infrastructure", "label": "http://lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion/pub/fdroid/archive", "detail": "url" }, { "id": "indicator-696a8931", "type": "indicator", "layer": "infrastructure", "label": "lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion", "detail": "domain" }, { "id": "indicator-90dacf54", "type": "indicator", "layer": "infrastructure", "label": "http://mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion/fdroid/archive", "detail": "url" }, { "id": "indicator-29315327", "type": "indicator", "layer": "infrastructure", "label": "mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion", "detail": "domain" }, { "id": "indicator-bca45fa1", "type": "indicator", "layer": "infrastructure", "label": "https://fdroid.tetaneutral.net/fdroid/archive", "detail": "url" }, { "id": "indicator-a7cfa6b9", "type": "indicator", "layer": "infrastructure", "label": "fdroid.tetaneutral.net", "detail": "domain" }, { "id": "indicator-6713a91f", "type": "indicator", "layer": "infrastructure", "label": "https://ftp.agdsn.de/fdroid/archive", "detail": "url" }, { "id": "indicator-1c88b8db", "type": "indicator", "layer": "infrastructure", "label": "ftp.agdsn.de", "detail": "domain" }, { "id": "indicator-8fac8d2a", "type": "indicator", "layer": "infrastructure", "label": "https://ftp.fau.de/fdroid/archive", "detail": "url" }, { "id": "indicator-4a1100f8", "type": "indicator", "layer": "infrastructure", "label": "ftp.fau.de", "detail": "domain" }, { "id": "indicator-071b81c3", "type": "indicator", "layer": "infrastructure", "label": "https://ftp.gwdg.de/pub/android/fdroid/archive", "detail": "url" }, { "id": "indicator-49db8013", "type": "indicator", "layer": "infrastructure", "label": "ftp.gwdg.de", "detail": "domain" }, { "id": "indicator-63f22f0f", "type": "indicator", "layer": "infrastructure", "label": "https://ftp.lysator.liu.se/pub/fdroid/archive", "detail": "url" }, { "id": "indicator-741ae80b", "type": "indicator", "layer": "infrastructure", "label": "ftp.lysator.liu.se", "detail": "domain" }, { "id": "indicator-b87cbbbf", "type": "indicator", "layer": "infrastructure", "label": "https://mirror.cyberbits.eu/fdroid/archive", "detail": "url" }, { "id": "indicator-09421f73", "type": "indicator", "layer": "infrastructure", "label": "mirror.cyberbits.eu", "detail": "domain" }, { "id": "indicator-fb7c5ed3", "type": "indicator", "layer": "infrastructure", "label": "https://mirror.fcix.net/fdroid/archive", "detail": "url" }, { "id": "indicator-97471a0f", "type": "indicator", "layer": "infrastructure", "label": "mirror.fcix.net", "detail": "domain" }, { "id": "indicator-dcc113b0", "type": "indicator", "layer": "infrastructure", "label": "https://mirror.kumi.systems/fdroid/archive", "detail": "url" }, { "id": "indicator-cebd3b66", "type": "indicator", "layer": "infrastructure", "label": "mirror.kumi.systems", "detail": "domain" }, { "id": "finding-addc6b8e", "type": "finding", "layer": "finding", "label": "High-impact permissions need context", "detail": "permissions-review", "severity": "medium", "findingId": "finding-14436634" }, { "id": "evidence-node-84d5a3d5", "type": "evidence", "layer": "evidence", "label": "AndroidManifest.xml", "detail": "android.permission.REQUEST_INSTALL_PACKAGES", "evidenceId": "evidence-ff6e7156" }, { "id": "evidence-node-31d59b68", "type": "evidence", "layer": "evidence", "label": "AndroidManifest.xml", "detail": "android.permission.QUERY_ALL_PACKAGES", "evidenceId": "evidence-a98e8316" }, { "id": "evidence-node-9831f88c", "type": "evidence", "layer": "evidence", "label": "AndroidManifest.xml", "detail": "android.permission.CAMERA", "evidenceId": "evidence-f9d84a54" }, { "id": "finding-48367420", "type": "finding", "layer": "finding", "label": "HTTP address trace found", "detail": "cleartext-url", "severity": "high", "findingId": "finding-3b45f083" }, { "id": "evidence-node-790c8def", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/archive", "evidenceId": "evidence-53ebf05d" }, { "id": "evidence-node-0f553c25", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/archive", "evidenceId": "evidence-bd3774f9" }, { "id": "evidence-node-63c188ac", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/archive", "evidenceId": "evidence-a98516d3" }, { "id": "evidence-node-7b062f97", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://lysator7eknrfl47rlyxvgeamrv7ucefgrrlhk7rouv3sna25asetwid.onion/pub/fdroid/archive", "evidenceId": "evidence-2f233d93" }, { "id": "evidence-node-6eeeabe6", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://mirror.ossplanetnyou5xifr6liw5vhzwc2g2fmmlohza25wwgnnaw65ytfsad.onion/fdroid/archive", "evidenceId": "evidence-23fafcb2" }, { "id": "evidence-node-85253293", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/fdroid/repo", "evidenceId": "evidence-38ea8780" }, { "id": "evidence-node-6d4be6e4", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://dotsrccccbidkzg7oc7oj4ugxrlfbt64qebyunxbrgqhxiwj3nl6vcad.onion/fdroid/repo", "evidenceId": "evidence-98860332" }, { "id": "evidence-node-1efdc616", "type": "evidence", "layer": "evidence", "label": "resources.arsc", "detail": "http://ftpfaudev4triw2vxiwzf4334e3mynz7osqgtozhbc77fixncqzbyoyd.onion/fdroid/repo", "evidenceId": "evidence-96c42272" }, { "id": "finding-25c42dbb", "type": "finding", "layer": "finding", "label": "Multiple DEX files", "detail": "multiple-dex", "severity": "info", "findingId": "finding-a804c1eb" }, { "id": "evidence-node-6b34f23a", "type": "evidence", "layer": "evidence", "label": "classes.dex", "detail": "classes.dex", "evidenceId": "evidence-5677a263" }, { "id": "evidence-node-2f0a2fb5", "type": "evidence", "layer": "evidence", "label": "classes2.dex", "detail": "classes2.dex", "evidenceId": "evidence-47ea97fa" }, { "id": "finding-b036827d", "type": "finding", "layer": "finding", "label": "Native code surface found", "detail": "native-code", "severity": "info", "findingId": "finding-fb8b889e" }, { "id": "evidence-node-46eb38c8", "type": "evidence", "layer": "evidence", "label": "lib/arm64-v8a/libandroidx.graphics.path.so", "detail": "lib/arm64-v8a/libandroidx.graphics.path.so", "evidenceId": "evidence-2128572b" }, { "id": "evidence-node-ceb325ed", "type": "evidence", "layer": "evidence", "label": "lib/armeabi-v7a/libandroidx.graphics.path.so", "detail": "lib/armeabi-v7a/libandroidx.graphics.path.so", "evidenceId": "evidence-389142a0" }, { "id": "evidence-node-865f2b9c", "type": "evidence", "layer": "evidence", "label": "lib/x86/libandroidx.graphics.path.so", "detail": "lib/x86/libandroidx.graphics.path.so", "evidenceId": "evidence-66270471" }, { "id": "evidence-node-89b57e17", "type": "evidence", "layer": "evidence", "label": "lib/x86_64/libandroidx.graphics.path.so", "detail": "lib/x86_64/libandroidx.graphics.path.so", "evidenceId": "evidence-04d9fab4" } ], "edges": [ { "id": "edge-8023b7ab", "source": "artifact-24945843", "target": "application-d930a9b1", "type": "IDENTIFIES" }, { "id": "edge-c4d5fa2c", "source": "artifact-24945843", "target": "manifest-6a3d6e54", "type": "DESCRIBED_BY" }, { "id": "edge-1077794a", "source": "manifest-6a3d6e54", "target": "permission-6ef7b93c", "type": "REQUESTS_PERMISSION" }, { "id": "edge-aebc930a", "source": "manifest-6a3d6e54", "target": "permission-f0024cd8", "type": "REQUESTS_PERMISSION" }, { "id": "edge-6ddb629b", "source": "manifest-6a3d6e54", "target": "permission-fd596477", "type": "REQUESTS_PERMISSION" }, { "id": "edge-02f686f2", "source": "manifest-6a3d6e54", "target": "permission-725ef578", "type": "REQUESTS_PERMISSION" }, { "id": "edge-db0b5390", "source": "manifest-6a3d6e54", "target": "permission-04ffdaf2", "type": "REQUESTS_PERMISSION" }, { "id": "edge-eb6c1172", "source": "manifest-6a3d6e54", "target": "permission-3f806639", "type": "REQUESTS_PERMISSION" }, { "id": "edge-2d40e847", "source": "manifest-6a3d6e54", "target": "permission-b4a90dac", "type": "REQUESTS_PERMISSION" }, { "id": "edge-a3fa490c", "source": "manifest-6a3d6e54", "target": "permission-5e1a0cbd", "type": "REQUESTS_PERMISSION" }, { "id": "edge-a6cf971f", "source": "manifest-6a3d6e54", "target": "permission-7ecd3945", "type": "REQUESTS_PERMISSION" }, { "id": "edge-264b612b", "source": "manifest-6a3d6e54", "target": "permission-a6a5fd74", "type": "REQUESTS_PERMISSION" }, { "id": "edge-af0c6d0b", "source": "manifest-6a3d6e54", "target": "permission-17f9bea3", "type": "REQUESTS_PERMISSION" }, { "id": "edge-e243dc3e", "source": "manifest-6a3d6e54", "target": "permission-222ca1c5", "type": "REQUESTS_PERMISSION" }, { "id": "edge-366983fd", "source": "manifest-6a3d6e54", "target": "permission-af9b7933", "type": "REQUESTS_PERMISSION" }, { "id": "edge-e9caf32b", "source": "manifest-6a3d6e54", "target": "permission-15fea338", "type": "REQUESTS_PERMISSION" }, { "id": "edge-ea4f4791", "source": "manifest-6a3d6e54", "target": "permission-a53538e6", "type": "REQUESTS_PERMISSION" }, { "id": "edge-2c875cdd", "source": "manifest-6a3d6e54", "target": "permission-f46c9d64", "type": "REQUESTS_PERMISSION" }, { "id": "edge-801f8d6a", "source": "manifest-6a3d6e54", "target": "permission-eae3b67d", "type": "REQUESTS_PERMISSION" }, { "id": "edge-1421f82e", "source": "manifest-6a3d6e54", "target": "permission-d8971981", "type": "REQUESTS_PERMISSION" }, { "id": "edge-5c298817", "source": "manifest-6a3d6e54", "target": "permission-eb44fe55", "type": "REQUESTS_PERMISSION" }, { "id": "edge-9ac91b49", "source": "manifest-6a3d6e54", "target": "permission-9a140076", "type": "REQUESTS_PERMISSION" }, { "id": "edge-c09ea3a0", "source": "manifest-6a3d6e54", "target": "permission-d4daf284", "type": "REQUESTS_PERMISSION" }, { "id": "edge-42266ca4", "source": "manifest-6a3d6e54", "target": "permission-e20dd596", "type": "REQUESTS_PERMISSION" }, { "id": "edge-f2d59727", "source": "manifest-6a3d6e54", "target": "permission-890d6102", "type": "REQUESTS_PERMISSION" }, { "id": "edge-e5924c14", "source": "manifest-6a3d6e54", "target": "permission-920e27c9", "type": "REQUESTS_PERMISSION" }, { "id": "edge-d7ee2809", "source": "manifest-6a3d6e54", "target": "permission-2d4c14ec", "type": "REQUESTS_PERMISSION" }, { "id": "edge-1f5b1ff5", "source": "manifest-6a3d6e54", "target": "permission-0c228889", "type": "REQUESTS_PERMISSION" }, { "id": "edge-a90df32c", "source": "manifest-6a3d6e54", "target": "permission-60b34f6b", "type": "REQUESTS_PERMISSION" }, { "id": "edge-af58199c", "source": "manifest-6a3d6e54", "target": "permission-f15c57cc", "type": "REQUESTS_PERMISSION" }, { "id": "edge-533d4901", "source": "manifest-6a3d6e54", "target": "permission-db2cd48e", "type": "REQUESTS_PERMISSION" }, { "id": "edge-cceacad8", "source": "manifest-6a3d6e54", "target": "component-02086ecb", "type": "DECLARES_COMPONENT" }, { "id": "edge-6eec0c76", "source": "manifest-6a3d6e54", "target": "component-4a603ff6", "type": "DECLARES_COMPONENT" }, { "id": "edge-317532dc", "source": "manifest-6a3d6e54", "target": "component-85ee65ea", "type": "DECLARES_COMPONENT" }, { "id": "edge-8c4253ba", "source": "manifest-6a3d6e54", "target": "component-dedb6b43", "type": "DECLARES_COMPONENT" }, { "id": "edge-24adfa78", "source": "manifest-6a3d6e54", "target": "component-eab57921", "type": "DECLARES_COMPONENT" }, { "id": "edge-4c9206a7", "source": "artifact-24945843", "target": "dex-a0a58a70", "type": "CONTAINS_DEX" }, { "id": "edge-bffe5513", "source": "artifact-24945843", "target": "dex-27a27c18", "type": "CONTAINS_DEX" }, { "id": "edge-b045d98f", "source": "artifact-24945843", "target": "native-a64325f2", "type": "LOADS_NATIVE_LIBRARY" }, { "id": "edge-4ef8d629", "source": "artifact-24945843", "target": "native-c5b2a398", "type": "LOADS_NATIVE_LIBRARY" }, { "id": "edge-741c9460", "source": "artifact-24945843", "target": "native-a46cf2b4", "type": "LOADS_NATIVE_LIBRARY" }, { "id": "edge-40e0c286", "source": "artifact-24945843", "target": "native-d2435bc3", "type": "LOADS_NATIVE_LIBRARY" }, { "id": "edge-51c4f9c9", "source": "artifact-24945843", "target": "signature-53090859", "type": "HAS_SIGNATURE_ENTRY" }, { "id": "edge-99febbd2", "source": "artifact-24945843", "target": "signature-c1ee65be", "type": "HAS_SIGNATURE_ENTRY" }, { "id": "edge-ec2ca367", "source": "artifact-24945843", "target": "signature-e3c7289f", "type": "HAS_SIGNATURE_ENTRY" }, { "id": "edge-bffc7119", "source": "artifact-24945843", "target": "indicator-9247a98f", "type": "REFERENCES" }, { "id": "edge-13fe030d", "source": "artifact-24945843", "target": "indicator-a5be3961", "type": "REFERENCES" }, { "id": "edge-cf385b1c", "source": "artifact-24945843", "target": "indicator-c94be912", "type": "REFERENCES" }, { "id": "edge-6eb84022", "source": "artifact-24945843", "target": "indicator-b9b1ae89", "type": "REFERENCES" }, { "id": "edge-8eb30030", "source": "artifact-24945843", "target": "indicator-be8e75cb", "type": "REFERENCES" }, { "id": "edge-4f8cc29b", "source": "artifact-24945843", "target": "indicator-5f68655c", "type": "REFERENCES" }, { "id": "edge-8c26df6b", "source": "artifact-24945843", "target": "indicator-fd8b43dc", "type": "REFERENCES" }, { "id": "edge-f9d9e11d", "source": "artifact-24945843", "target": "indicator-bf108391", "type": "REFERENCES" }, { "id": "edge-8f0f4f5b", "source": "artifact-24945843", "target": "indicator-867797a7", "type": "REFERENCES" }, { "id": "edge-a93d26ce", "source": "artifact-24945843", "target": "indicator-e5e49c7c", "type": "REFERENCES" }, { "id": "edge-dd65bf3b", "source": "artifact-24945843", "target": "indicator-b6fa0b6c", "type": "REFERENCES" }, { "id": "edge-bf3c7f24", "source": "artifact-24945843", "target": "indicator-696a8931", "type": "REFERENCES" }, { "id": "edge-3f292201", "source": "artifact-24945843", "target": "indicator-90dacf54", "type": "REFERENCES" }, { "id": "edge-385374d5", "source": "artifact-24945843", "target": "indicator-29315327", "type": "REFERENCES" }, { "id": "edge-54612888", "source": "artifact-24945843", "target": "indicator-bca45fa1", "type": "REFERENCES" }, { "id": "edge-b9517f2c", "source": "artifact-24945843", "target": "indicator-a7cfa6b9", "type": "REFERENCES" }, { "id": "edge-ddfee8a9", "source": "artifact-24945843", "target": "indicator-6713a91f", "type": "REFERENCES" }, { "id": "edge-c58f8ef3", "source": "artifact-24945843", "target": "indicator-1c88b8db", "type": "REFERENCES" }, { "id": "edge-7ce52878", "source": "artifact-24945843", "target": "indicator-8fac8d2a", "type": "REFERENCES" }, { "id": "edge-4e6722fc", "source": "artifact-24945843", "target": "indicator-4a1100f8", "type": "REFERENCES" }, { "id": "edge-38830b74", "source": "artifact-24945843", "target": "indicator-071b81c3", "type": "REFERENCES" }, { "id": "edge-74da6d2a", "source": "artifact-24945843", "target": "indicator-49db8013", "type": "REFERENCES" }, { "id": "edge-9e74919e", "source": "artifact-24945843", "target": "indicator-63f22f0f", "type": "REFERENCES" }, { "id": "edge-41dfed09", "source": "artifact-24945843", "target": "indicator-741ae80b", "type": "REFERENCES" }, { "id": "edge-5270ba6f", "source": "artifact-24945843", "target": "indicator-b87cbbbf", "type": "REFERENCES" }, { "id": "edge-44ca3a6f", "source": "artifact-24945843", "target": "indicator-09421f73", "type": "REFERENCES" }, { "id": "edge-a60c42c2", "source": "artifact-24945843", "target": "indicator-fb7c5ed3", "type": "REFERENCES" }, { "id": "edge-fc0b3a7e", "source": "artifact-24945843", "target": "indicator-97471a0f", "type": "REFERENCES" }, { "id": "edge-dde6c070", "source": "artifact-24945843", "target": "indicator-dcc113b0", "type": "REFERENCES" }, { "id": "edge-e63e30f0", "source": "artifact-24945843", "target": "indicator-cebd3b66", "type": "REFERENCES" }, { "id": "edge-31c3b22b", "source": "artifact-24945843", "target": "finding-addc6b8e", "type": "PRODUCES_FINDING" }, { "id": "edge-8a37060f", "source": "finding-addc6b8e", "target": "evidence-node-84d5a3d5", "type": "SUPPORTED_BY" }, { "id": "edge-0ac00d25", "source": "finding-addc6b8e", "target": "evidence-node-31d59b68", "type": "SUPPORTED_BY" }, { "id": "edge-7f26a1a1", "source": "finding-addc6b8e", "target": "evidence-node-9831f88c", "type": "SUPPORTED_BY" }, { "id": "edge-1676b194", "source": "artifact-24945843", "target": "finding-48367420", "type": "PRODUCES_FINDING" }, { "id": "edge-a42c1f2a", "source": "finding-48367420", "target": "evidence-node-790c8def", "type": "SUPPORTED_BY" }, { "id": "edge-1ecfeaff", "source": "finding-48367420", "target": "evidence-node-0f553c25", "type": "SUPPORTED_BY" }, { "id": "edge-6a5ada8b", "source": "finding-48367420", "target": "evidence-node-63c188ac", "type": "SUPPORTED_BY" }, { "id": "edge-ae69f553", "source": "finding-48367420", "target": "evidence-node-7b062f97", "type": "SUPPORTED_BY" }, { "id": "edge-7955f85f", "source": "finding-48367420", "target": "evidence-node-6eeeabe6", "type": "SUPPORTED_BY" }, { "id": "edge-d2315c3f", "source": "finding-48367420", "target": "evidence-node-85253293", "type": "SUPPORTED_BY" }, { "id": "edge-3ad0ac3e", "source": "finding-48367420", "target": "evidence-node-6d4be6e4", "type": "SUPPORTED_BY" }, { "id": "edge-51f4be62", "source": "finding-48367420", "target": "evidence-node-1efdc616", "type": "SUPPORTED_BY" }, { "id": "edge-534f95f8", "source": "artifact-24945843", "target": "finding-25c42dbb", "type": "PRODUCES_FINDING" }, { "id": "edge-a2096927", "source": "finding-25c42dbb", "target": "evidence-node-6b34f23a", "type": "SUPPORTED_BY" }, { "id": "edge-3e5d70ea", "source": "finding-25c42dbb", "target": "evidence-node-2f0a2fb5", "type": "SUPPORTED_BY" }, { "id": "edge-0be78ab2", "source": "artifact-24945843", "target": "finding-b036827d", "type": "PRODUCES_FINDING" }, { "id": "edge-e707c7ff", "source": "finding-b036827d", "target": "evidence-node-46eb38c8", "type": "SUPPORTED_BY" }, { "id": "edge-6b769df1", "source": "finding-b036827d", "target": "evidence-node-ceb325ed", "type": "SUPPORTED_BY" }, { "id": "edge-d32c7173", "source": "finding-b036827d", "target": "evidence-node-865f2b9c", "type": "SUPPORTED_BY" }, { "id": "edge-fc2a9840", "source": "finding-b036827d", "target": "evidence-node-89b57e17", "type": "SUPPORTED_BY" } ], "limits": { "nodeLimit": 140, "edgeLimit": 240, "omittedNodes": 0, "omittedEdges": 0 } }, "summary": { "findings": 4, "high": 1, "medium": 1, "low": 0, "info": 2 } }, "diff": { "schema": "csint-mobile-exposure-diff/v1", "generatedAt": "2026-08-22T09:00:08.000Z", "baseline": { "fileName": "org.fdroid.fdroid-1.23.1.apk", "fileSize": 12426276, "sha256": "1dfce4269081693f10350dbabd26991a59d7c2bb81f870de54e5b113f4785b7a", "packageName": "org.fdroid.fdroid", "versionName": "1.23.1", "versionCode": "1023051" }, "candidate": { "fileName": "org.fdroid.fdroid-1.23.2.apk", "fileSize": 12426276, "sha256": "985f5181d48bb6bafd54083a048b391271e0ab28385881cc41294fb01a222762", "packageName": "org.fdroid.fdroid", "versionName": "1.23.2", "versionCode": "1023052" }, "changed": true, "sizeDelta": 0, "groups": [ { "key": "permissions", "added": [], "removed": [], "unchanged": 29 }, { "key": "indicators", "added": [ "domain:keepandroidopen.org", "url:https://keepandroidopen.org/" ], "removed": [], "unchanged": 76 }, { "key": "native", "added": [], "removed": [], "unchanged": 4 }, { "key": "signatures", "added": [ "META-INF/CIARANG.RSA:09c3d505d7d05eaa16b12d12d431e89ad8b377889b2bac0ae00d380855949029", "META-INF/CIARANG.SF:b8373dd50e8f62280576cfa96839bcc29a6f7d137fd64e6ee085a1668f34054f", "META-INF/MANIFEST.MF:02264aab0165785bbd5f3d41f8dc1d3770969618ee4a354801d8090a5e73134c" ], "removed": [ "META-INF/CIARANG.RSA:92e00f3587478b6caf6a2e4419420d1b3587efd42197e007059ba5e6b77ee464", "META-INF/CIARANG.SF:dd51816299bc8e8c29e8f1f28aaa9c9a27be8a86128055a1e23c4ccb7b49a8b0", "META-INF/MANIFEST.MF:7dd24527f4c1cdbf9f03e56f6ad5c745e5600a49704547d1f31b3c29b89b2c6d" ], "unchanged": 0 }, { "key": "findings", "added": [], "removed": [], "unchanged": 4 } ], "summary": { "added": 5, "removed": 3, "unchanged": 113, "reviewChanges": 2 } } }