What problem does it solve? Firebase backends in Android apps frequently ship with insecure configurations—open databases, writable storage buckets, and unrestricted authentication—that manual review often misses. This Skill automates the extraction of Firebase configuration from APKs and actively tests every endpoint for exploitable weaknesses. ## Core Features & Use Cases - Automated APK Analysis: Decompiles APKs with apktool and extracts Firebase configuration from google-services.json, XML resources, assets, smali code, and DEX strings. - Endpoint Security Testing: Tests Realtime Database, Firestore, Storage buckets, Cloud Functions, Remote Config, and authentication endpoints for unauthenticated access, open signup, anonymous auth, and email enumeration. - Structured Reporting: Generates text and JSON reports with severity-classified findings (CRITICAL to LOW) plus remediation guidance from a detailed vulnerability patterns reference. - Use Case: During an authorized mobile app penetration test, point the scanner at a client's APK to discover that their Realtime Database allows unauthenticated reads, exposing user PII, then deliver a remediation report with secure rules examples. ## Quick Start Scan the APK file at the provided path for Firebase security misconfigurations and summarize the findings with remediation steps.
