Find exposed Firebase backends in Android APKs.
Identifies Firebase security weaknesses in Android APKs and reports findings with remediation advice.
When to use it
Use for authorized Android app security audits and testing Firebase endpoints extracted from APKs.
Give it an APK file or directory; it scans the apps and presents security findings, extracted configuration, and remediation advice.
What you provide
Requires apktool to decompile the supplied APKs; the dependency check exits if it is missing.
Requires jq for JSON processing; the dependency check exits if it is missing.
This skill
Firebase Authentication
Creates test Firebase users
Realtime Database
Writes database test entries