firebase-apk-scanner
Scans Android APKs for Firebase security misconfigurations, data exposure, and authentication vulnerabilities.
Install
npx skills add https://github.com/trailofbits/skills --skill firebase-apk-scannerStats
| Total installs | 1,197 |
| Weekly installs | 1.2K |
| GitHub stars | 4.0K |
| First seen | Jan 20, 2026 |
| Source | @trailofbits/skills |
Summary
- Automatically decompiles APKs and extracts Firebase configuration from google-services.json, XML resources, assets, and DEX strings
- Tests authentication endpoints for open signup, anonymous auth, and email enumeration vulnerabilities
- Scans Realtime Database, Firestore, Storage buckets, Cloud Functions, and Remote Config for unauthenticated access and data exposure
- Generates detailed reports with severity classification (CRITICAL, HIGH, MEDIUM, LOW) and specific remediation guidance
- Includes manual testing fallback procedures using curl for cases where automated scanning fails
Tags
Related skills
| Skill | Installs | vs firebase-apk-scanner |
|---|---|---|
| sarif-parsing | 1,289 | +92 |
| fuzzing-dictionary | 1,183 | -14 |
| insecure-defaults | 1,211 | +14 |
| ton-vulnerability-scanner | 1,172 | -25 |
| algorand-vulnerability-scanner | 1,180 | -17 |
FAQ
- How many installs does firebase-apk-scanner have?
- firebase-apk-scanner has 1,197 total installs and 1.2K installs this week.
- Where is firebase-apk-scanner hosted?
- firebase-apk-scanner is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does firebase-apk-scanner have?
- firebase-apk-scanner has 4.0K GitHub stars.
- When was firebase-apk-scanner first indexed?
- OrangeBot.AI first indexed firebase-apk-scanner on Jan 20, 2026.
- How do I install firebase-apk-scanner?
- Run: npx skills add https://github.com/trailofbits/skills --skill firebase-apk-scanner