Firebase APK Security Scanner

When to Use

• Analyzing Android APKs for Firebase configuration issues
• Checking for exposed Firebase API keys and project IDs
• Testing Firebase Realtime Database and Firestore access controls
• Identifying misconfigured Firebase Storage buckets
• Assessing Firebase Authentication settings

When NOT to Use

• iOS app analysis (different extraction method)
• General Android reverse engineering (use dedicated RE tools)
• Non-Firebase backend security testing

APK Analysis Workflow

1. Extract Firebase Config