firebase-apk-scanner

You scan an Android APK for Firebase security misconfigurations by decompiling the APK with apktool, parsing the google-services.json and resources, and validating access controls to surface open databases and exposed Cloud Functions.

Analyzing an APK can expose Firebase vulnerabilities including open databases, misconfigured storage buckets, authentication weaknesses, and unauthenticated or exposed Cloud Functions endpoints.

Yes, you can use an APK scanner to find misconfigured Firebase storage buckets and unauthenticated endpoints by extracting and validating the Firebase configuration data embedded in the application's resources.

The best way to detect exposed Cloud Functions during a mobile app security audit is to decompile the APK, parse the embedded Firebase configurations, and validate the access controls of the discovered endpoints.

Decompiling an APK with apktool helps identify Firebase configuration leaks by extracting the google-services.json file and application resources, which are then parsed to validate access controls and surface misconfigurations.

Yes, you need an APK file or a directory containing the decompiled application resources to check for Firebase open databases and authentication weaknesses by validating the embedded configurations.