Lightlines
By trailofbits

firebase-apk-scanner

trailofbits5k installs

Find exposed Firebase backends in Android APKs.

What it does

Identifies Firebase security weaknesses in Android APKs and reports findings with remediation advice.

When to use it

Use for authorized Android app security audits and testing Firebase endpoints extracted from APKs.

How to use it

Give it an APK file or directory; it scans the apps and presents security findings, extracted configuration, and remediation advice.

What you provide

  • an APK file or directory path
  • Your files

Uses

Latest review

What you need · 3

Requires apktool to decompile the supplied APKs; the dependency check exits if it is missing.

Requires jq for JSON processing; the dependency check exits if it is missing.


Access · 6

This skill

Firebase Authentication

Write

Creates test Firebase users

Realtime Database

Write

Writes database test entries