At present, the vulnerability detection tool I often use is AISI, because AISI will detect the confidentiality of the program in different degrees and in different ways according to the application characteristics, including whether the code is confused, whether the DEX and so library files are protected, and whether the program signature and authority management are complete. Component security detection mainly focuses on whether there are loopholes in activities, broadcast receivers, services, WebView, intentions, etc. , and give targeted suggestions; Data security will comprehensively detect data leakage vulnerabilities in the APP and all data security-related vulnerabilities such as the output layer and the protocol layer, so as to ensure that all vulnerabilities in the APP that may lead to account leakage are detected.