← Browse
firebase-apk-scanner
trailofbits ★ 7875
This Claude Code plugin decompiles Android APKs and probes their Firebase backends for security misconfigurations including open databases, storage buckets, authentication bypasses, and unauthenticated Cloud Functions. It extracts Firebase configuration from multiple sources and automatically tests 14 distinct vulnerability categories with detailed reporting.
Install
> /plugin marketplace add trailofbits/skills/tree/HEAD/plugins/firebase-apk-scanner
> /plugin install firebase-apk-scanner
Source: https://github.com/trailofbits/skills/tree/HEAD/plugins/firebase-apk-scanner
What it's made of
1 command · 1 skill
- Commands
- 1
- Agents
- 0
- Skills
- 1
- MCP servers
- 0
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
- none
- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (trailofbits).