firebase-apk-scanner - Scan Android APKs for Firebase security misconfigurations.
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, auth issues, and exposed cloud functions.
Tags
Updated: 2026-09-17Capabilities
Typical Inputs
What this skill does
- Decompile APK files
- Extract Firebase configuration
- Test authentication security
- Test Realtime Database access
- Test Firestore database access
- Test Storage bucket access
- Test Cloud Functions exposure
- Test Remote Config exposure
- Generate scan reports
Inputs
- APK file or directory path
Outputs
- Text scan report file
- JSON scan report file
- Scan summary output
Requirements
- Explicit authorization to test target apps
- Bash environment
- apktool tool
- curl tool