|
测评目的 检测客户端App运行时是否面临C层动态调试的风险。
危险等级 高
危害 如果App存在C层代码动态调试的风险,攻击者可以利用GDB、IDA、Ptrace等调试器跟踪运行的目标程序,查看、修改内存中的代码和数据,甚至分析篡改程序的业务逻辑,对客户关键数据或者服务器进行恶意攻击,例如修改客户端业务操作的数据,比如转账账号、金额等,导致用户的损失。
测评结果 存在风险(发现1处)
测评结果描述 该App存在C层动态调试的风险。
测评详细信息 Error while mapping shared library sections:
Could not open `target:/system/app/webview/webview.apk!/lib/x86/libwebviewchromium.so' as an executable file: No such file or directory
warning: section .dynsym not found in target:/system/framework/x86/boot.oat
warning: section .dynstr not found in target:/system/framework/x86/boot.oat
warning: section .hash not found in target:/system/framework/x86/boot.oat
warning: section .dynamic not found in target:/system/framework/x86/boot.oat
warning: section .dynsym not found in target:/system/framework/x86/boot-core-libart.oat
warning: section .dynstr not found in target:/system/framework/x86/boot-core-libart.oat
warning: section .hash not found in target:/system/framework/x86/boot-core-libart.oat
warning: section .dynamic not found in target:/system/framework/x86/boot-core-libart.oat
warning: section .dynsym not found in target:/system/framework/x86/boot-conscrypt.oat
warning: section .dynstr not found in target:/system/framework/x86/boot-conscrypt.oat
warning: section .hash not found in target:/system/framework/x86/boot-conscrypt.oat
warning: section .dynamic not found in target:/system/framework/x86/boot-conscrypt.oat
warning: section .dynsym not found in target:/system/framework/x86/boot-okhttp.oat
warning: section .dynstr not found in target:/system/framework/x86/boot-okhttp.oat
warning: section .hash not found in target:/system/framework/x86/boot-okhttp.oat
warning: section .dynamic not found in target:/system/framework/x86/boot-okhttp.oat
warning: section .dynsym not found in target:/system/framework/x86/boot-core-junit.oat
warning: section .dynstr not found in target:/system/framework/x86/boot-core-junit.oat
warning: section .hash not found in target:/system/framework/x86/boot-core-junit.oat
warning: section .dynamic not found in target:/system/framework/x86/boot-core-junit.oat
warning: section .dynsym not found in target:/system/framework/x86/boot-bouncycastle.oat
warning: section .dynstr not found in target:/system/framework/x86/boot-bouncycastle.oat
warning: section .hash not found in target:/system/framework/x86/boot-bouncycastle.oat
warning: section .dynamic not found in target:/system/framework/x86/boot-bouncycastle.oat
warning: section .dynsym not found in target:/system/framework/x86/boot-ext.oat
warning: section .dynstr not found in target:/system/framework/x86/boot-ext.oat
warning: section .hash not found in target:/system/framework/x86/boot-ext.oat
warning: section .dynamic not found in target:/system/framework/x86/boot-ext.oat
warning: section .dynsym not found in target:/system/framework/x86/boot-framework.oat
warning: section .dynstr not found in target:/system/framework/x86/boot-framework.oat
warning: section .hash not found in target:/system/framework/x86/boot-framework.oat
warning: section .dynamic not found in target:/system/framework/x86/boot-framework.oat
warning: section .dynsym not found in target:/system/framework/x86/boot-telephony-common.oat
warning: section .dynstr not found in target:/system/framework/x86/boot-telephony-common.oat
warning: section .hash not found in target:/system/framework/x86/boot-telephony-common.oat
warning: section .dynamic not found in target:/system/framework/x86/boot-telephony-common.oat
warning: section .dynsym not found in target:/system/framework/x86/boot-voip-common.oat
warning: section .dynstr not found in target:/system/framework/x86/boot-voip-common.oat
warning: section .hash not found in target:/system/framework/x86/boot-voip-common.oat
warning: section .dynamic not found in target:/system/framework/x86/boot-voip-common.oat
warning: section .dynsym not found in target:/system/framework/x86/boot-ims-common.oat
warning: section .dynstr not found in target:/system/framework/x86/boot-ims-common.oat
warning: section .hash not found in target:/system/framework/x86/boot-ims-common.oat
warning: section .dynamic not found in target:/system/framework/x86/boot-ims-common.oat
warning: section .dynsym not found in target:/system/framework/x86/boot-apache-xml.oat
warning: section .dynstr not found in target:/system/framework/x86/boot-apache-xml.oat
warning: section .hash not found in target:/system/framework/x86/boot-apache-xml.oat
warning: section .dynamic not found in target:/system/framework/x86/boot-apache-xml.oat
warning: section .dynsym not found in target:/system/framework/x86/boot-org.apache.http.legacy.boot.oat
warning: section .dynstr not found in target:/system/framework/x86/boot-org.apache.http.legacy.boot.oat
warning: section .hash not found in target:/system/framework/x86/boot-org.apache.http.legacy.boot.oat
warning: section .dynamic not found in target:/system/framework/x86/boot-org.apache.http.legacy.boot.oat
0xf7e8e079 in __kernel_vsyscall ()
[New LWP 3558]
[LWP 3558 exited]
[New LWP 3299]
[LWP 3299 exited]
[New LWP 3561]
[LWP 3561 exited]
|
|