[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-trail-of-bits-firebase-apk-scanner":3,"mdc--wjzxde-key":41,"related-org-trail-of-bits-firebase-apk-scanner":1472,"related-repo-trail-of-bits-firebase-apk-scanner":1626},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":12,"stars":29,"repoUrl":30,"updatedAt":31,"license":32,"forks":33,"topics":34,"repo":36,"sourceUrl":39,"mdContent":40},"firebase-apk-scanner","scan Android APKs for Firebase vulnerabilities","Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. Use when analyzing APK files for Firebase vulnerabilities, performing mobile app security audits, or testing Firebase endpoint security. For authorized security research only.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},"trail-of-bits","Trail of Bits","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Ftrail-of-bits.png","trailofbits",[13,17,20,23,26],{"name":14,"slug":15,"type":16},"Security","security","tag",{"name":18,"slug":19,"type":16},"Android","android",{"name":21,"slug":22,"type":16},"Audit","audit",{"name":24,"slug":25,"type":16},"Code Analysis","code-analysis",{"name":27,"slug":28,"type":16},"Firebase","firebase",6139,"https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Fskills","2026-07-18T05:47:38.2971",null,541,[35],"agent-skills",{"repoUrl":30,"stars":29,"forks":33,"topics":37,"description":38},[35],"Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows","https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Fskills\u002Ftree\u002FHEAD\u002Fplugins\u002Ffirebase-apk-scanner\u002Fskills\u002Ffirebase-apk-scanner","---\nname: firebase-apk-scanner\ndescription: Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. Use when analyzing APK files for Firebase vulnerabilities, performing mobile app security audits, or testing Firebase endpoint security. For authorized security research only.\nargument-hint: [apk-file-or-directory]\nallowed-tools: Bash({baseDir}\u002Fscanner.sh:*) Bash(apktool:*) Bash(curl:*) Read Grep Glob\ndisable-model-invocation: true\n---\n\n# Firebase APK Security Scanner\n\nYou are a Firebase security analyst. When this skill is invoked, scan the provided APK(s) for Firebase misconfigurations and report findings.\n\n## When to Use\n\n- Auditing Android applications for Firebase security misconfigurations\n- Testing Firebase endpoints extracted from APKs (Realtime Database, Firestore, Storage)\n- Checking authentication security (open signup, anonymous auth, email enumeration)\n- Enumerating Cloud Functions and testing for unauthenticated access\n- Mobile app security assessments involving Firebase backends\n- Authorized penetration testing of Firebase-backed applications\n\n## When NOT to Use\n\n- Scanning apps you do not have explicit authorization to test\n- Testing production Firebase projects without written permission\n- When you only need to extract Firebase config without testing (use manual grep\u002Fstrings instead)\n- For non-Android targets (iOS, web apps) - this skill is APK-specific\n- When the target app does not use Firebase\n\n## Rationalizations to Reject\n\nWhen auditing, reject these common rationalizations that lead to missed or downplayed findings:\n\n- **\"The database is read-only so it's fine\"** - Data exposure is still a critical finding; PII, API keys, and business data may be leaked\n- **\"It's just anonymous auth, not real accounts\"** - Anonymous tokens bypass `auth != null` rules and can access \"authenticated-only\" resources\n- **\"The API key is public anyway\"** - A public API key does not justify open database rules or disabled auth restrictions\n- **\"There's no sensitive data in there\"** - You cannot know what data will be stored in the future; insecure rules are vulnerabilities regardless of current content\n- **\"It's an internal app\"** - APKs can be extracted from any device; \"internal\" apps are not protected from reverse engineering\n- **\"We'll fix it before launch\"** - Document the finding; pre-launch vulnerabilities frequently ship to production\n\n## Reference Documentation\n\nFor detailed vulnerability patterns and exploitation techniques, consult:\n- [Vulnerability Patterns Reference](references\u002Fvulnerabilities.md)\n\n## How to Use This Skill\n\nThe user will provide an APK file or directory: `$ARGUMENTS`\n\n## Workflow\n\n### Step 1: Validate Input\n\nFirst, verify the target exists:\n\n```bash\nls -la $ARGUMENTS\n```\n\nIf `$ARGUMENTS` is empty, ask the user to provide an APK path.\n\n### Step 2: Run the Scanner\n\nExecute the bundled scanner script on the target:\n\n```bash\n{baseDir}\u002Fscanner.sh $ARGUMENTS\n```\n\nThe scanner will:\n1. Decompile the APK using apktool\n2. Extract Firebase configuration from all sources (google-services.json, XML resources, assets, smali code, DEX strings)\n3. Test authentication endpoints (open signup, anonymous auth, email enumeration)\n4. Test Realtime Database (unauthenticated read\u002Fwrite, auth bypass)\n5. Test Firestore (document access, collection enumeration)\n6. Test Storage buckets (listing, write access)\n7. Test Cloud Functions (enumeration, unauthenticated access)\n8. Test Remote Config exposure\n9. Generate reports in text and JSON format\n\n### Step 3: Present Results\n\nAfter the scanner completes, read and summarize the results:\n\n```bash\ncat firebase_scan_*\u002Fscan_report.txt\n```\n\nPresent findings in this format:\n\n---\n\n## Scan Summary\n\n| Metric | Value |\n|--------|-------|\n| APKs Scanned | X |\n| Vulnerable | X |\n| Total Issues | X |\n\n## Extracted Configuration\n\n| Field | Value |\n|-------|-------|\n| Project ID | `extracted_value` |\n| Database URL | `extracted_value` |\n| Storage Bucket | `extracted_value` |\n| API Key | `extracted_value` |\n| Auth Domain | `extracted_value` |\n\n## Vulnerabilities Found\n\n| Severity | Issue | Evidence |\n|----------|-------|----------|\n| CRITICAL | Description | Brief evidence |\n| HIGH | Description | Brief evidence |\n\n## Remediation\n\nProvide specific fixes for each vulnerability found. Reference the [Vulnerability Patterns](references\u002Fvulnerabilities.md) for secure code examples.\n\n---\n\n## Manual Testing (If Scanner Fails)\n\nIf the scanner script is unavailable or fails, perform manual extraction and testing:\n\n### Extract Configuration\n\nSearch for Firebase config in decompiled APK:\n\n```bash\n# Decompile\napktool d -f -o .\u002Fdecompiled $ARGUMENTS\n\n# Find google-services.json\nfind .\u002Fdecompiled -name \"google-services.json\"\n\n# Search XML resources\ngrep -r \"firebaseio.com\\|appspot.com\\|AIza\" .\u002Fdecompiled\u002Fres\u002F\n\n# Search assets (hybrid apps)\ngrep -r \"firebaseio.com\\|AIza\" .\u002Fdecompiled\u002Fassets\u002F\n```\n\n### Test Endpoints\n\nOnce you have the PROJECT_ID and API_KEY:\n\n**Authentication:**\n```bash\n# Test open signup\ncurl -s -X POST -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\"email\":\"test@test.com\",\"password\":\"Test123!\",\"returnSecureToken\":true}' \\\n  \"https:\u002F\u002Fidentitytoolkit.googleapis.com\u002Fv1\u002Faccounts:signUp?key=API_KEY\"\n\n# Test anonymous auth\ncurl -s -X POST -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\"returnSecureToken\":true}' \\\n  \"https:\u002F\u002Fidentitytoolkit.googleapis.com\u002Fv1\u002Faccounts:signUp?key=API_KEY\"\n```\n\n**Database:**\n```bash\n# Realtime Database read\ncurl -s \"https:\u002F\u002FPROJECT_ID.firebaseio.com\u002F.json\"\n\n# Firestore read\ncurl -s \"https:\u002F\u002Ffirestore.googleapis.com\u002Fv1\u002Fprojects\u002FPROJECT_ID\u002Fdatabases\u002F(default)\u002Fdocuments\"\n```\n\n**Storage:**\n```bash\n# List bucket\ncurl -s \"https:\u002F\u002Ffirebasestorage.googleapis.com\u002Fv0\u002Fb\u002FPROJECT_ID.appspot.com\u002Fo\"\n```\n\n**Remote Config:**\n```bash\ncurl -s -H \"x-goog-api-key: API_KEY\" \\\n  \"https:\u002F\u002Ffirebaseremoteconfig.googleapis.com\u002Fv1\u002Fprojects\u002FPROJECT_ID\u002FremoteConfig\"\n```\n\n## Severity Classification\n\n- **CRITICAL**: Unauthenticated database read\u002Fwrite, storage write, open signup on private apps\n- **HIGH**: Anonymous auth enabled, storage bucket listing, collection enumeration\n- **MEDIUM**: Email enumeration, accessible cloud functions, remote config exposure\n- **LOW**: Information disclosure without sensitive data\n\n## Important Guidelines\n\n1. **Authorization required** - Only scan APKs you have permission to test\n2. **Clean up test data** - The scanner automatically removes test entries it creates\n3. **Save tokens** - If anonymous auth succeeds, use the token for authenticated bypass testing\n4. **Test all regions** - Cloud Functions may be deployed to us-central1, europe-west1, asia-east1, etc.\n5. **Multiple instances** - Some apps use multiple Firebase projects; test all discovered configurations\n",{"data":42,"body":47},{"name":4,"description":6,"argument-hint":43,"allowed-tools":45,"disable-model-invocation":46},[44],"apk-file-or-directory","Bash({baseDir}\u002Fscanner.sh:*) Bash(apktool:*) Bash(curl:*) Read Grep Glob",true,{"type":48,"children":49},"root",[50,59,65,72,107,113,141,147,152,225,231,236,249,255,266,272,279,284,319,331,337,342,356,361,410,416,421,451,456,460,466,531,537,639,645,706,712,724,727,733,738,744,749,947,953,958,966,1164,1172,1250,1258,1297,1305,1360,1366,1407,1413,1466],{"type":51,"tag":52,"props":53,"children":55},"element","h1",{"id":54},"firebase-apk-security-scanner",[56],{"type":57,"value":58},"text","Firebase APK Security Scanner",{"type":51,"tag":60,"props":61,"children":62},"p",{},[63],{"type":57,"value":64},"You are a Firebase security analyst. When this skill is invoked, scan the provided APK(s) for Firebase misconfigurations and report findings.",{"type":51,"tag":66,"props":67,"children":69},"h2",{"id":68},"when-to-use",[70],{"type":57,"value":71},"When to Use",{"type":51,"tag":73,"props":74,"children":75},"ul",{},[76,82,87,92,97,102],{"type":51,"tag":77,"props":78,"children":79},"li",{},[80],{"type":57,"value":81},"Auditing Android applications for Firebase security misconfigurations",{"type":51,"tag":77,"props":83,"children":84},{},[85],{"type":57,"value":86},"Testing Firebase endpoints extracted from APKs (Realtime Database, Firestore, Storage)",{"type":51,"tag":77,"props":88,"children":89},{},[90],{"type":57,"value":91},"Checking authentication security (open signup, anonymous auth, email enumeration)",{"type":51,"tag":77,"props":93,"children":94},{},[95],{"type":57,"value":96},"Enumerating Cloud Functions and testing for unauthenticated access",{"type":51,"tag":77,"props":98,"children":99},{},[100],{"type":57,"value":101},"Mobile app security assessments involving Firebase backends",{"type":51,"tag":77,"props":103,"children":104},{},[105],{"type":57,"value":106},"Authorized penetration testing of Firebase-backed applications",{"type":51,"tag":66,"props":108,"children":110},{"id":109},"when-not-to-use",[111],{"type":57,"value":112},"When NOT to Use",{"type":51,"tag":73,"props":114,"children":115},{},[116,121,126,131,136],{"type":51,"tag":77,"props":117,"children":118},{},[119],{"type":57,"value":120},"Scanning apps you do not have explicit authorization to test",{"type":51,"tag":77,"props":122,"children":123},{},[124],{"type":57,"value":125},"Testing production Firebase projects without written permission",{"type":51,"tag":77,"props":127,"children":128},{},[129],{"type":57,"value":130},"When you only need to extract Firebase config without testing (use manual grep\u002Fstrings instead)",{"type":51,"tag":77,"props":132,"children":133},{},[134],{"type":57,"value":135},"For non-Android targets (iOS, web apps) - this skill is APK-specific",{"type":51,"tag":77,"props":137,"children":138},{},[139],{"type":57,"value":140},"When the target app does not use Firebase",{"type":51,"tag":66,"props":142,"children":144},{"id":143},"rationalizations-to-reject",[145],{"type":57,"value":146},"Rationalizations to Reject",{"type":51,"tag":60,"props":148,"children":149},{},[150],{"type":57,"value":151},"When auditing, reject these common rationalizations that lead to missed or downplayed findings:",{"type":51,"tag":73,"props":153,"children":154},{},[155,166,185,195,205,215],{"type":51,"tag":77,"props":156,"children":157},{},[158,164],{"type":51,"tag":159,"props":160,"children":161},"strong",{},[162],{"type":57,"value":163},"\"The database is read-only so it's fine\"",{"type":57,"value":165}," - Data exposure is still a critical finding; PII, API keys, and business data may be leaked",{"type":51,"tag":77,"props":167,"children":168},{},[169,174,176,183],{"type":51,"tag":159,"props":170,"children":171},{},[172],{"type":57,"value":173},"\"It's just anonymous auth, not real accounts\"",{"type":57,"value":175}," - Anonymous tokens bypass ",{"type":51,"tag":177,"props":178,"children":180},"code",{"className":179},[],[181],{"type":57,"value":182},"auth != null",{"type":57,"value":184}," rules and can access \"authenticated-only\" resources",{"type":51,"tag":77,"props":186,"children":187},{},[188,193],{"type":51,"tag":159,"props":189,"children":190},{},[191],{"type":57,"value":192},"\"The API key is public anyway\"",{"type":57,"value":194}," - A public API key does not justify open database rules or disabled auth restrictions",{"type":51,"tag":77,"props":196,"children":197},{},[198,203],{"type":51,"tag":159,"props":199,"children":200},{},[201],{"type":57,"value":202},"\"There's no sensitive data in there\"",{"type":57,"value":204}," - You cannot know what data will be stored in the future; insecure rules are vulnerabilities regardless of current content",{"type":51,"tag":77,"props":206,"children":207},{},[208,213],{"type":51,"tag":159,"props":209,"children":210},{},[211],{"type":57,"value":212},"\"It's an internal app\"",{"type":57,"value":214}," - APKs can be extracted from any device; \"internal\" apps are not protected from reverse engineering",{"type":51,"tag":77,"props":216,"children":217},{},[218,223],{"type":51,"tag":159,"props":219,"children":220},{},[221],{"type":57,"value":222},"\"We'll fix it before launch\"",{"type":57,"value":224}," - Document the finding; pre-launch vulnerabilities frequently ship to production",{"type":51,"tag":66,"props":226,"children":228},{"id":227},"reference-documentation",[229],{"type":57,"value":230},"Reference Documentation",{"type":51,"tag":60,"props":232,"children":233},{},[234],{"type":57,"value":235},"For detailed vulnerability patterns and exploitation techniques, consult:",{"type":51,"tag":73,"props":237,"children":238},{},[239],{"type":51,"tag":77,"props":240,"children":241},{},[242],{"type":51,"tag":243,"props":244,"children":246},"a",{"href":245},"references\u002Fvulnerabilities.md",[247],{"type":57,"value":248},"Vulnerability Patterns Reference",{"type":51,"tag":66,"props":250,"children":252},{"id":251},"how-to-use-this-skill",[253],{"type":57,"value":254},"How to Use This Skill",{"type":51,"tag":60,"props":256,"children":257},{},[258,260],{"type":57,"value":259},"The user will provide an APK file or directory: ",{"type":51,"tag":177,"props":261,"children":263},{"className":262},[],[264],{"type":57,"value":265},"$ARGUMENTS",{"type":51,"tag":66,"props":267,"children":269},{"id":268},"workflow",[270],{"type":57,"value":271},"Workflow",{"type":51,"tag":273,"props":274,"children":276},"h3",{"id":275},"step-1-validate-input",[277],{"type":57,"value":278},"Step 1: Validate Input",{"type":51,"tag":60,"props":280,"children":281},{},[282],{"type":57,"value":283},"First, verify the target exists:",{"type":51,"tag":285,"props":286,"children":291},"pre",{"className":287,"code":288,"language":289,"meta":290,"style":290},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","ls -la $ARGUMENTS\n","bash","",[292],{"type":51,"tag":177,"props":293,"children":294},{"__ignoreMap":290},[295],{"type":51,"tag":296,"props":297,"children":300},"span",{"class":298,"line":299},"line",1,[301,307,313],{"type":51,"tag":296,"props":302,"children":304},{"style":303},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[305],{"type":57,"value":306},"ls",{"type":51,"tag":296,"props":308,"children":310},{"style":309},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[311],{"type":57,"value":312}," -la",{"type":51,"tag":296,"props":314,"children":316},{"style":315},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[317],{"type":57,"value":318}," $ARGUMENTS\n",{"type":51,"tag":60,"props":320,"children":321},{},[322,324,329],{"type":57,"value":323},"If ",{"type":51,"tag":177,"props":325,"children":327},{"className":326},[],[328],{"type":57,"value":265},{"type":57,"value":330}," is empty, ask the user to provide an APK path.",{"type":51,"tag":273,"props":332,"children":334},{"id":333},"step-2-run-the-scanner",[335],{"type":57,"value":336},"Step 2: Run the Scanner",{"type":51,"tag":60,"props":338,"children":339},{},[340],{"type":57,"value":341},"Execute the bundled scanner script on the target:",{"type":51,"tag":285,"props":343,"children":345},{"className":287,"code":344,"language":289,"meta":290,"style":290},"{baseDir}\u002Fscanner.sh $ARGUMENTS\n",[346],{"type":51,"tag":177,"props":347,"children":348},{"__ignoreMap":290},[349],{"type":51,"tag":296,"props":350,"children":351},{"class":298,"line":299},[352],{"type":51,"tag":296,"props":353,"children":354},{"style":315},[355],{"type":57,"value":344},{"type":51,"tag":60,"props":357,"children":358},{},[359],{"type":57,"value":360},"The scanner will:",{"type":51,"tag":362,"props":363,"children":364},"ol",{},[365,370,375,380,385,390,395,400,405],{"type":51,"tag":77,"props":366,"children":367},{},[368],{"type":57,"value":369},"Decompile the APK using apktool",{"type":51,"tag":77,"props":371,"children":372},{},[373],{"type":57,"value":374},"Extract Firebase configuration from all sources (google-services.json, XML resources, assets, smali code, DEX strings)",{"type":51,"tag":77,"props":376,"children":377},{},[378],{"type":57,"value":379},"Test authentication endpoints (open signup, anonymous auth, email enumeration)",{"type":51,"tag":77,"props":381,"children":382},{},[383],{"type":57,"value":384},"Test Realtime Database (unauthenticated read\u002Fwrite, auth bypass)",{"type":51,"tag":77,"props":386,"children":387},{},[388],{"type":57,"value":389},"Test Firestore (document access, collection enumeration)",{"type":51,"tag":77,"props":391,"children":392},{},[393],{"type":57,"value":394},"Test Storage buckets (listing, write access)",{"type":51,"tag":77,"props":396,"children":397},{},[398],{"type":57,"value":399},"Test Cloud Functions (enumeration, unauthenticated access)",{"type":51,"tag":77,"props":401,"children":402},{},[403],{"type":57,"value":404},"Test Remote Config exposure",{"type":51,"tag":77,"props":406,"children":407},{},[408],{"type":57,"value":409},"Generate reports in text and JSON format",{"type":51,"tag":273,"props":411,"children":413},{"id":412},"step-3-present-results",[414],{"type":57,"value":415},"Step 3: Present Results",{"type":51,"tag":60,"props":417,"children":418},{},[419],{"type":57,"value":420},"After the scanner completes, read and summarize the results:",{"type":51,"tag":285,"props":422,"children":424},{"className":287,"code":423,"language":289,"meta":290,"style":290},"cat firebase_scan_*\u002Fscan_report.txt\n",[425],{"type":51,"tag":177,"props":426,"children":427},{"__ignoreMap":290},[428],{"type":51,"tag":296,"props":429,"children":430},{"class":298,"line":299},[431,436,441,446],{"type":51,"tag":296,"props":432,"children":433},{"style":303},[434],{"type":57,"value":435},"cat",{"type":51,"tag":296,"props":437,"children":438},{"style":309},[439],{"type":57,"value":440}," firebase_scan_",{"type":51,"tag":296,"props":442,"children":443},{"style":315},[444],{"type":57,"value":445},"*",{"type":51,"tag":296,"props":447,"children":448},{"style":309},[449],{"type":57,"value":450},"\u002Fscan_report.txt\n",{"type":51,"tag":60,"props":452,"children":453},{},[454],{"type":57,"value":455},"Present findings in this format:",{"type":51,"tag":457,"props":458,"children":459},"hr",{},[],{"type":51,"tag":66,"props":461,"children":463},{"id":462},"scan-summary",[464],{"type":57,"value":465},"Scan Summary",{"type":51,"tag":467,"props":468,"children":469},"table",{},[470,489],{"type":51,"tag":471,"props":472,"children":473},"thead",{},[474],{"type":51,"tag":475,"props":476,"children":477},"tr",{},[478,484],{"type":51,"tag":479,"props":480,"children":481},"th",{},[482],{"type":57,"value":483},"Metric",{"type":51,"tag":479,"props":485,"children":486},{},[487],{"type":57,"value":488},"Value",{"type":51,"tag":490,"props":491,"children":492},"tbody",{},[493,507,519],{"type":51,"tag":475,"props":494,"children":495},{},[496,502],{"type":51,"tag":497,"props":498,"children":499},"td",{},[500],{"type":57,"value":501},"APKs Scanned",{"type":51,"tag":497,"props":503,"children":504},{},[505],{"type":57,"value":506},"X",{"type":51,"tag":475,"props":508,"children":509},{},[510,515],{"type":51,"tag":497,"props":511,"children":512},{},[513],{"type":57,"value":514},"Vulnerable",{"type":51,"tag":497,"props":516,"children":517},{},[518],{"type":57,"value":506},{"type":51,"tag":475,"props":520,"children":521},{},[522,527],{"type":51,"tag":497,"props":523,"children":524},{},[525],{"type":57,"value":526},"Total Issues",{"type":51,"tag":497,"props":528,"children":529},{},[530],{"type":57,"value":506},{"type":51,"tag":66,"props":532,"children":534},{"id":533},"extracted-configuration",[535],{"type":57,"value":536},"Extracted Configuration",{"type":51,"tag":467,"props":538,"children":539},{},[540,555],{"type":51,"tag":471,"props":541,"children":542},{},[543],{"type":51,"tag":475,"props":544,"children":545},{},[546,551],{"type":51,"tag":479,"props":547,"children":548},{},[549],{"type":57,"value":550},"Field",{"type":51,"tag":479,"props":552,"children":553},{},[554],{"type":57,"value":488},{"type":51,"tag":490,"props":556,"children":557},{},[558,575,591,607,623],{"type":51,"tag":475,"props":559,"children":560},{},[561,566],{"type":51,"tag":497,"props":562,"children":563},{},[564],{"type":57,"value":565},"Project ID",{"type":51,"tag":497,"props":567,"children":568},{},[569],{"type":51,"tag":177,"props":570,"children":572},{"className":571},[],[573],{"type":57,"value":574},"extracted_value",{"type":51,"tag":475,"props":576,"children":577},{},[578,583],{"type":51,"tag":497,"props":579,"children":580},{},[581],{"type":57,"value":582},"Database URL",{"type":51,"tag":497,"props":584,"children":585},{},[586],{"type":51,"tag":177,"props":587,"children":589},{"className":588},[],[590],{"type":57,"value":574},{"type":51,"tag":475,"props":592,"children":593},{},[594,599],{"type":51,"tag":497,"props":595,"children":596},{},[597],{"type":57,"value":598},"Storage Bucket",{"type":51,"tag":497,"props":600,"children":601},{},[602],{"type":51,"tag":177,"props":603,"children":605},{"className":604},[],[606],{"type":57,"value":574},{"type":51,"tag":475,"props":608,"children":609},{},[610,615],{"type":51,"tag":497,"props":611,"children":612},{},[613],{"type":57,"value":614},"API Key",{"type":51,"tag":497,"props":616,"children":617},{},[618],{"type":51,"tag":177,"props":619,"children":621},{"className":620},[],[622],{"type":57,"value":574},{"type":51,"tag":475,"props":624,"children":625},{},[626,631],{"type":51,"tag":497,"props":627,"children":628},{},[629],{"type":57,"value":630},"Auth Domain",{"type":51,"tag":497,"props":632,"children":633},{},[634],{"type":51,"tag":177,"props":635,"children":637},{"className":636},[],[638],{"type":57,"value":574},{"type":51,"tag":66,"props":640,"children":642},{"id":641},"vulnerabilities-found",[643],{"type":57,"value":644},"Vulnerabilities Found",{"type":51,"tag":467,"props":646,"children":647},{},[648,669],{"type":51,"tag":471,"props":649,"children":650},{},[651],{"type":51,"tag":475,"props":652,"children":653},{},[654,659,664],{"type":51,"tag":479,"props":655,"children":656},{},[657],{"type":57,"value":658},"Severity",{"type":51,"tag":479,"props":660,"children":661},{},[662],{"type":57,"value":663},"Issue",{"type":51,"tag":479,"props":665,"children":666},{},[667],{"type":57,"value":668},"Evidence",{"type":51,"tag":490,"props":670,"children":671},{},[672,690],{"type":51,"tag":475,"props":673,"children":674},{},[675,680,685],{"type":51,"tag":497,"props":676,"children":677},{},[678],{"type":57,"value":679},"CRITICAL",{"type":51,"tag":497,"props":681,"children":682},{},[683],{"type":57,"value":684},"Description",{"type":51,"tag":497,"props":686,"children":687},{},[688],{"type":57,"value":689},"Brief evidence",{"type":51,"tag":475,"props":691,"children":692},{},[693,698,702],{"type":51,"tag":497,"props":694,"children":695},{},[696],{"type":57,"value":697},"HIGH",{"type":51,"tag":497,"props":699,"children":700},{},[701],{"type":57,"value":684},{"type":51,"tag":497,"props":703,"children":704},{},[705],{"type":57,"value":689},{"type":51,"tag":66,"props":707,"children":709},{"id":708},"remediation",[710],{"type":57,"value":711},"Remediation",{"type":51,"tag":60,"props":713,"children":714},{},[715,717,722],{"type":57,"value":716},"Provide specific fixes for each vulnerability found. Reference the ",{"type":51,"tag":243,"props":718,"children":719},{"href":245},[720],{"type":57,"value":721},"Vulnerability Patterns",{"type":57,"value":723}," for secure code examples.",{"type":51,"tag":457,"props":725,"children":726},{},[],{"type":51,"tag":66,"props":728,"children":730},{"id":729},"manual-testing-if-scanner-fails",[731],{"type":57,"value":732},"Manual Testing (If Scanner Fails)",{"type":51,"tag":60,"props":734,"children":735},{},[736],{"type":57,"value":737},"If the scanner script is unavailable or fails, perform manual extraction and testing:",{"type":51,"tag":273,"props":739,"children":741},{"id":740},"extract-configuration",[742],{"type":57,"value":743},"Extract Configuration",{"type":51,"tag":60,"props":745,"children":746},{},[747],{"type":57,"value":748},"Search for Firebase config in decompiled APK:",{"type":51,"tag":285,"props":750,"children":752},{"className":287,"code":751,"language":289,"meta":290,"style":290},"# Decompile\napktool d -f -o .\u002Fdecompiled $ARGUMENTS\n\n# Find google-services.json\nfind .\u002Fdecompiled -name \"google-services.json\"\n\n# Search XML resources\ngrep -r \"firebaseio.com\\|appspot.com\\|AIza\" .\u002Fdecompiled\u002Fres\u002F\n\n# Search assets (hybrid apps)\ngrep -r \"firebaseio.com\\|AIza\" .\u002Fdecompiled\u002Fassets\u002F\n",[753],{"type":51,"tag":177,"props":754,"children":755},{"__ignoreMap":290},[756,765,798,807,816,850,858,867,900,908,917],{"type":51,"tag":296,"props":757,"children":758},{"class":298,"line":299},[759],{"type":51,"tag":296,"props":760,"children":762},{"style":761},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic",[763],{"type":57,"value":764},"# Decompile\n",{"type":51,"tag":296,"props":766,"children":768},{"class":298,"line":767},2,[769,774,779,784,789,794],{"type":51,"tag":296,"props":770,"children":771},{"style":303},[772],{"type":57,"value":773},"apktool",{"type":51,"tag":296,"props":775,"children":776},{"style":309},[777],{"type":57,"value":778}," d",{"type":51,"tag":296,"props":780,"children":781},{"style":309},[782],{"type":57,"value":783}," -f",{"type":51,"tag":296,"props":785,"children":786},{"style":309},[787],{"type":57,"value":788}," -o",{"type":51,"tag":296,"props":790,"children":791},{"style":309},[792],{"type":57,"value":793}," .\u002Fdecompiled",{"type":51,"tag":296,"props":795,"children":796},{"style":315},[797],{"type":57,"value":318},{"type":51,"tag":296,"props":799,"children":801},{"class":298,"line":800},3,[802],{"type":51,"tag":296,"props":803,"children":804},{"emptyLinePlaceholder":46},[805],{"type":57,"value":806},"\n",{"type":51,"tag":296,"props":808,"children":810},{"class":298,"line":809},4,[811],{"type":51,"tag":296,"props":812,"children":813},{"style":761},[814],{"type":57,"value":815},"# Find google-services.json\n",{"type":51,"tag":296,"props":817,"children":819},{"class":298,"line":818},5,[820,825,829,834,840,845],{"type":51,"tag":296,"props":821,"children":822},{"style":303},[823],{"type":57,"value":824},"find",{"type":51,"tag":296,"props":826,"children":827},{"style":309},[828],{"type":57,"value":793},{"type":51,"tag":296,"props":830,"children":831},{"style":309},[832],{"type":57,"value":833}," -name",{"type":51,"tag":296,"props":835,"children":837},{"style":836},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[838],{"type":57,"value":839}," \"",{"type":51,"tag":296,"props":841,"children":842},{"style":309},[843],{"type":57,"value":844},"google-services.json",{"type":51,"tag":296,"props":846,"children":847},{"style":836},[848],{"type":57,"value":849},"\"\n",{"type":51,"tag":296,"props":851,"children":853},{"class":298,"line":852},6,[854],{"type":51,"tag":296,"props":855,"children":856},{"emptyLinePlaceholder":46},[857],{"type":57,"value":806},{"type":51,"tag":296,"props":859,"children":861},{"class":298,"line":860},7,[862],{"type":51,"tag":296,"props":863,"children":864},{"style":761},[865],{"type":57,"value":866},"# Search XML resources\n",{"type":51,"tag":296,"props":868,"children":870},{"class":298,"line":869},8,[871,876,881,885,890,895],{"type":51,"tag":296,"props":872,"children":873},{"style":303},[874],{"type":57,"value":875},"grep",{"type":51,"tag":296,"props":877,"children":878},{"style":309},[879],{"type":57,"value":880}," -r",{"type":51,"tag":296,"props":882,"children":883},{"style":836},[884],{"type":57,"value":839},{"type":51,"tag":296,"props":886,"children":887},{"style":309},[888],{"type":57,"value":889},"firebaseio.com\\|appspot.com\\|AIza",{"type":51,"tag":296,"props":891,"children":892},{"style":836},[893],{"type":57,"value":894},"\"",{"type":51,"tag":296,"props":896,"children":897},{"style":309},[898],{"type":57,"value":899}," .\u002Fdecompiled\u002Fres\u002F\n",{"type":51,"tag":296,"props":901,"children":903},{"class":298,"line":902},9,[904],{"type":51,"tag":296,"props":905,"children":906},{"emptyLinePlaceholder":46},[907],{"type":57,"value":806},{"type":51,"tag":296,"props":909,"children":911},{"class":298,"line":910},10,[912],{"type":51,"tag":296,"props":913,"children":914},{"style":761},[915],{"type":57,"value":916},"# Search assets (hybrid apps)\n",{"type":51,"tag":296,"props":918,"children":920},{"class":298,"line":919},11,[921,925,929,933,938,942],{"type":51,"tag":296,"props":922,"children":923},{"style":303},[924],{"type":57,"value":875},{"type":51,"tag":296,"props":926,"children":927},{"style":309},[928],{"type":57,"value":880},{"type":51,"tag":296,"props":930,"children":931},{"style":836},[932],{"type":57,"value":839},{"type":51,"tag":296,"props":934,"children":935},{"style":309},[936],{"type":57,"value":937},"firebaseio.com\\|AIza",{"type":51,"tag":296,"props":939,"children":940},{"style":836},[941],{"type":57,"value":894},{"type":51,"tag":296,"props":943,"children":944},{"style":309},[945],{"type":57,"value":946}," .\u002Fdecompiled\u002Fassets\u002F\n",{"type":51,"tag":273,"props":948,"children":950},{"id":949},"test-endpoints",[951],{"type":57,"value":952},"Test Endpoints",{"type":51,"tag":60,"props":954,"children":955},{},[956],{"type":57,"value":957},"Once you have the PROJECT_ID and API_KEY:",{"type":51,"tag":60,"props":959,"children":960},{},[961],{"type":51,"tag":159,"props":962,"children":963},{},[964],{"type":57,"value":965},"Authentication:",{"type":51,"tag":285,"props":967,"children":969},{"className":287,"code":968,"language":289,"meta":290,"style":290},"# Test open signup\ncurl -s -X POST -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\"email\":\"test@test.com\",\"password\":\"Test123!\",\"returnSecureToken\":true}' \\\n  \"https:\u002F\u002Fidentitytoolkit.googleapis.com\u002Fv1\u002Faccounts:signUp?key=API_KEY\"\n\n# Test anonymous auth\ncurl -s -X POST -H \"Content-Type: application\u002Fjson\" \\\n  -d '{\"returnSecureToken\":true}' \\\n  \"https:\u002F\u002Fidentitytoolkit.googleapis.com\u002Fv1\u002Faccounts:signUp?key=API_KEY\"\n",[970],{"type":51,"tag":177,"props":971,"children":972},{"__ignoreMap":290},[973,981,1027,1054,1071,1078,1086,1125,1149],{"type":51,"tag":296,"props":974,"children":975},{"class":298,"line":299},[976],{"type":51,"tag":296,"props":977,"children":978},{"style":761},[979],{"type":57,"value":980},"# Test open signup\n",{"type":51,"tag":296,"props":982,"children":983},{"class":298,"line":767},[984,989,994,999,1004,1009,1013,1018,1022],{"type":51,"tag":296,"props":985,"children":986},{"style":303},[987],{"type":57,"value":988},"curl",{"type":51,"tag":296,"props":990,"children":991},{"style":309},[992],{"type":57,"value":993}," -s",{"type":51,"tag":296,"props":995,"children":996},{"style":309},[997],{"type":57,"value":998}," -X",{"type":51,"tag":296,"props":1000,"children":1001},{"style":309},[1002],{"type":57,"value":1003}," POST",{"type":51,"tag":296,"props":1005,"children":1006},{"style":309},[1007],{"type":57,"value":1008}," -H",{"type":51,"tag":296,"props":1010,"children":1011},{"style":836},[1012],{"type":57,"value":839},{"type":51,"tag":296,"props":1014,"children":1015},{"style":309},[1016],{"type":57,"value":1017},"Content-Type: application\u002Fjson",{"type":51,"tag":296,"props":1019,"children":1020},{"style":836},[1021],{"type":57,"value":894},{"type":51,"tag":296,"props":1023,"children":1024},{"style":315},[1025],{"type":57,"value":1026}," \\\n",{"type":51,"tag":296,"props":1028,"children":1029},{"class":298,"line":800},[1030,1035,1040,1045,1050],{"type":51,"tag":296,"props":1031,"children":1032},{"style":309},[1033],{"type":57,"value":1034},"  -d",{"type":51,"tag":296,"props":1036,"children":1037},{"style":836},[1038],{"type":57,"value":1039}," '",{"type":51,"tag":296,"props":1041,"children":1042},{"style":309},[1043],{"type":57,"value":1044},"{\"email\":\"test@test.com\",\"password\":\"Test123!\",\"returnSecureToken\":true}",{"type":51,"tag":296,"props":1046,"children":1047},{"style":836},[1048],{"type":57,"value":1049},"'",{"type":51,"tag":296,"props":1051,"children":1052},{"style":315},[1053],{"type":57,"value":1026},{"type":51,"tag":296,"props":1055,"children":1056},{"class":298,"line":809},[1057,1062,1067],{"type":51,"tag":296,"props":1058,"children":1059},{"style":836},[1060],{"type":57,"value":1061},"  \"",{"type":51,"tag":296,"props":1063,"children":1064},{"style":309},[1065],{"type":57,"value":1066},"https:\u002F\u002Fidentitytoolkit.googleapis.com\u002Fv1\u002Faccounts:signUp?key=API_KEY",{"type":51,"tag":296,"props":1068,"children":1069},{"style":836},[1070],{"type":57,"value":849},{"type":51,"tag":296,"props":1072,"children":1073},{"class":298,"line":818},[1074],{"type":51,"tag":296,"props":1075,"children":1076},{"emptyLinePlaceholder":46},[1077],{"type":57,"value":806},{"type":51,"tag":296,"props":1079,"children":1080},{"class":298,"line":852},[1081],{"type":51,"tag":296,"props":1082,"children":1083},{"style":761},[1084],{"type":57,"value":1085},"# Test anonymous auth\n",{"type":51,"tag":296,"props":1087,"children":1088},{"class":298,"line":860},[1089,1093,1097,1101,1105,1109,1113,1117,1121],{"type":51,"tag":296,"props":1090,"children":1091},{"style":303},[1092],{"type":57,"value":988},{"type":51,"tag":296,"props":1094,"children":1095},{"style":309},[1096],{"type":57,"value":993},{"type":51,"tag":296,"props":1098,"children":1099},{"style":309},[1100],{"type":57,"value":998},{"type":51,"tag":296,"props":1102,"children":1103},{"style":309},[1104],{"type":57,"value":1003},{"type":51,"tag":296,"props":1106,"children":1107},{"style":309},[1108],{"type":57,"value":1008},{"type":51,"tag":296,"props":1110,"children":1111},{"style":836},[1112],{"type":57,"value":839},{"type":51,"tag":296,"props":1114,"children":1115},{"style":309},[1116],{"type":57,"value":1017},{"type":51,"tag":296,"props":1118,"children":1119},{"style":836},[1120],{"type":57,"value":894},{"type":51,"tag":296,"props":1122,"children":1123},{"style":315},[1124],{"type":57,"value":1026},{"type":51,"tag":296,"props":1126,"children":1127},{"class":298,"line":869},[1128,1132,1136,1141,1145],{"type":51,"tag":296,"props":1129,"children":1130},{"style":309},[1131],{"type":57,"value":1034},{"type":51,"tag":296,"props":1133,"children":1134},{"style":836},[1135],{"type":57,"value":1039},{"type":51,"tag":296,"props":1137,"children":1138},{"style":309},[1139],{"type":57,"value":1140},"{\"returnSecureToken\":true}",{"type":51,"tag":296,"props":1142,"children":1143},{"style":836},[1144],{"type":57,"value":1049},{"type":51,"tag":296,"props":1146,"children":1147},{"style":315},[1148],{"type":57,"value":1026},{"type":51,"tag":296,"props":1150,"children":1151},{"class":298,"line":902},[1152,1156,1160],{"type":51,"tag":296,"props":1153,"children":1154},{"style":836},[1155],{"type":57,"value":1061},{"type":51,"tag":296,"props":1157,"children":1158},{"style":309},[1159],{"type":57,"value":1066},{"type":51,"tag":296,"props":1161,"children":1162},{"style":836},[1163],{"type":57,"value":849},{"type":51,"tag":60,"props":1165,"children":1166},{},[1167],{"type":51,"tag":159,"props":1168,"children":1169},{},[1170],{"type":57,"value":1171},"Database:",{"type":51,"tag":285,"props":1173,"children":1175},{"className":287,"code":1174,"language":289,"meta":290,"style":290},"# Realtime Database read\ncurl -s \"https:\u002F\u002FPROJECT_ID.firebaseio.com\u002F.json\"\n\n# Firestore read\ncurl -s \"https:\u002F\u002Ffirestore.googleapis.com\u002Fv1\u002Fprojects\u002FPROJECT_ID\u002Fdatabases\u002F(default)\u002Fdocuments\"\n",[1176],{"type":51,"tag":177,"props":1177,"children":1178},{"__ignoreMap":290},[1179,1187,1211,1218,1226],{"type":51,"tag":296,"props":1180,"children":1181},{"class":298,"line":299},[1182],{"type":51,"tag":296,"props":1183,"children":1184},{"style":761},[1185],{"type":57,"value":1186},"# Realtime Database read\n",{"type":51,"tag":296,"props":1188,"children":1189},{"class":298,"line":767},[1190,1194,1198,1202,1207],{"type":51,"tag":296,"props":1191,"children":1192},{"style":303},[1193],{"type":57,"value":988},{"type":51,"tag":296,"props":1195,"children":1196},{"style":309},[1197],{"type":57,"value":993},{"type":51,"tag":296,"props":1199,"children":1200},{"style":836},[1201],{"type":57,"value":839},{"type":51,"tag":296,"props":1203,"children":1204},{"style":309},[1205],{"type":57,"value":1206},"https:\u002F\u002FPROJECT_ID.firebaseio.com\u002F.json",{"type":51,"tag":296,"props":1208,"children":1209},{"style":836},[1210],{"type":57,"value":849},{"type":51,"tag":296,"props":1212,"children":1213},{"class":298,"line":800},[1214],{"type":51,"tag":296,"props":1215,"children":1216},{"emptyLinePlaceholder":46},[1217],{"type":57,"value":806},{"type":51,"tag":296,"props":1219,"children":1220},{"class":298,"line":809},[1221],{"type":51,"tag":296,"props":1222,"children":1223},{"style":761},[1224],{"type":57,"value":1225},"# Firestore read\n",{"type":51,"tag":296,"props":1227,"children":1228},{"class":298,"line":818},[1229,1233,1237,1241,1246],{"type":51,"tag":296,"props":1230,"children":1231},{"style":303},[1232],{"type":57,"value":988},{"type":51,"tag":296,"props":1234,"children":1235},{"style":309},[1236],{"type":57,"value":993},{"type":51,"tag":296,"props":1238,"children":1239},{"style":836},[1240],{"type":57,"value":839},{"type":51,"tag":296,"props":1242,"children":1243},{"style":309},[1244],{"type":57,"value":1245},"https:\u002F\u002Ffirestore.googleapis.com\u002Fv1\u002Fprojects\u002FPROJECT_ID\u002Fdatabases\u002F(default)\u002Fdocuments",{"type":51,"tag":296,"props":1247,"children":1248},{"style":836},[1249],{"type":57,"value":849},{"type":51,"tag":60,"props":1251,"children":1252},{},[1253],{"type":51,"tag":159,"props":1254,"children":1255},{},[1256],{"type":57,"value":1257},"Storage:",{"type":51,"tag":285,"props":1259,"children":1261},{"className":287,"code":1260,"language":289,"meta":290,"style":290},"# List bucket\ncurl -s \"https:\u002F\u002Ffirebasestorage.googleapis.com\u002Fv0\u002Fb\u002FPROJECT_ID.appspot.com\u002Fo\"\n",[1262],{"type":51,"tag":177,"props":1263,"children":1264},{"__ignoreMap":290},[1265,1273],{"type":51,"tag":296,"props":1266,"children":1267},{"class":298,"line":299},[1268],{"type":51,"tag":296,"props":1269,"children":1270},{"style":761},[1271],{"type":57,"value":1272},"# List bucket\n",{"type":51,"tag":296,"props":1274,"children":1275},{"class":298,"line":767},[1276,1280,1284,1288,1293],{"type":51,"tag":296,"props":1277,"children":1278},{"style":303},[1279],{"type":57,"value":988},{"type":51,"tag":296,"props":1281,"children":1282},{"style":309},[1283],{"type":57,"value":993},{"type":51,"tag":296,"props":1285,"children":1286},{"style":836},[1287],{"type":57,"value":839},{"type":51,"tag":296,"props":1289,"children":1290},{"style":309},[1291],{"type":57,"value":1292},"https:\u002F\u002Ffirebasestorage.googleapis.com\u002Fv0\u002Fb\u002FPROJECT_ID.appspot.com\u002Fo",{"type":51,"tag":296,"props":1294,"children":1295},{"style":836},[1296],{"type":57,"value":849},{"type":51,"tag":60,"props":1298,"children":1299},{},[1300],{"type":51,"tag":159,"props":1301,"children":1302},{},[1303],{"type":57,"value":1304},"Remote Config:",{"type":51,"tag":285,"props":1306,"children":1308},{"className":287,"code":1307,"language":289,"meta":290,"style":290},"curl -s -H \"x-goog-api-key: API_KEY\" \\\n  \"https:\u002F\u002Ffirebaseremoteconfig.googleapis.com\u002Fv1\u002Fprojects\u002FPROJECT_ID\u002FremoteConfig\"\n",[1309],{"type":51,"tag":177,"props":1310,"children":1311},{"__ignoreMap":290},[1312,1344],{"type":51,"tag":296,"props":1313,"children":1314},{"class":298,"line":299},[1315,1319,1323,1327,1331,1336,1340],{"type":51,"tag":296,"props":1316,"children":1317},{"style":303},[1318],{"type":57,"value":988},{"type":51,"tag":296,"props":1320,"children":1321},{"style":309},[1322],{"type":57,"value":993},{"type":51,"tag":296,"props":1324,"children":1325},{"style":309},[1326],{"type":57,"value":1008},{"type":51,"tag":296,"props":1328,"children":1329},{"style":836},[1330],{"type":57,"value":839},{"type":51,"tag":296,"props":1332,"children":1333},{"style":309},[1334],{"type":57,"value":1335},"x-goog-api-key: API_KEY",{"type":51,"tag":296,"props":1337,"children":1338},{"style":836},[1339],{"type":57,"value":894},{"type":51,"tag":296,"props":1341,"children":1342},{"style":315},[1343],{"type":57,"value":1026},{"type":51,"tag":296,"props":1345,"children":1346},{"class":298,"line":767},[1347,1351,1356],{"type":51,"tag":296,"props":1348,"children":1349},{"style":836},[1350],{"type":57,"value":1061},{"type":51,"tag":296,"props":1352,"children":1353},{"style":309},[1354],{"type":57,"value":1355},"https:\u002F\u002Ffirebaseremoteconfig.googleapis.com\u002Fv1\u002Fprojects\u002FPROJECT_ID\u002FremoteConfig",{"type":51,"tag":296,"props":1357,"children":1358},{"style":836},[1359],{"type":57,"value":849},{"type":51,"tag":66,"props":1361,"children":1363},{"id":1362},"severity-classification",[1364],{"type":57,"value":1365},"Severity Classification",{"type":51,"tag":73,"props":1367,"children":1368},{},[1369,1378,1387,1397],{"type":51,"tag":77,"props":1370,"children":1371},{},[1372,1376],{"type":51,"tag":159,"props":1373,"children":1374},{},[1375],{"type":57,"value":679},{"type":57,"value":1377},": Unauthenticated database read\u002Fwrite, storage write, open signup on private apps",{"type":51,"tag":77,"props":1379,"children":1380},{},[1381,1385],{"type":51,"tag":159,"props":1382,"children":1383},{},[1384],{"type":57,"value":697},{"type":57,"value":1386},": Anonymous auth enabled, storage bucket listing, collection enumeration",{"type":51,"tag":77,"props":1388,"children":1389},{},[1390,1395],{"type":51,"tag":159,"props":1391,"children":1392},{},[1393],{"type":57,"value":1394},"MEDIUM",{"type":57,"value":1396},": Email enumeration, accessible cloud functions, remote config exposure",{"type":51,"tag":77,"props":1398,"children":1399},{},[1400,1405],{"type":51,"tag":159,"props":1401,"children":1402},{},[1403],{"type":57,"value":1404},"LOW",{"type":57,"value":1406},": Information disclosure without sensitive data",{"type":51,"tag":66,"props":1408,"children":1410},{"id":1409},"important-guidelines",[1411],{"type":57,"value":1412},"Important Guidelines",{"type":51,"tag":362,"props":1414,"children":1415},{},[1416,1426,1436,1446,1456],{"type":51,"tag":77,"props":1417,"children":1418},{},[1419,1424],{"type":51,"tag":159,"props":1420,"children":1421},{},[1422],{"type":57,"value":1423},"Authorization required",{"type":57,"value":1425}," - Only scan APKs you have permission to test",{"type":51,"tag":77,"props":1427,"children":1428},{},[1429,1434],{"type":51,"tag":159,"props":1430,"children":1431},{},[1432],{"type":57,"value":1433},"Clean up test data",{"type":57,"value":1435}," - The scanner automatically removes test entries it creates",{"type":51,"tag":77,"props":1437,"children":1438},{},[1439,1444],{"type":51,"tag":159,"props":1440,"children":1441},{},[1442],{"type":57,"value":1443},"Save tokens",{"type":57,"value":1445}," - If anonymous auth succeeds, use the token for authenticated bypass testing",{"type":51,"tag":77,"props":1447,"children":1448},{},[1449,1454],{"type":51,"tag":159,"props":1450,"children":1451},{},[1452],{"type":57,"value":1453},"Test all regions",{"type":57,"value":1455}," - Cloud Functions may be deployed to us-central1, europe-west1, asia-east1, etc.",{"type":51,"tag":77,"props":1457,"children":1458},{},[1459,1464],{"type":51,"tag":159,"props":1460,"children":1461},{},[1462],{"type":57,"value":1463},"Multiple instances",{"type":57,"value":1465}," - Some apps use multiple Firebase projects; test all discovered configurations",{"type":51,"tag":1467,"props":1468,"children":1469},"style",{},[1470],{"type":57,"value":1471},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":1473,"total":1625},[1474,1491,1501,1519,1532,1545,1557,1567,1580,1591,1603,1614],{"slug":1475,"name":1475,"fn":1476,"description":1477,"org":1478,"tags":1479,"stars":29,"repoUrl":30,"updatedAt":1490},"address-sanitizer","detect memory errors during fuzzing","AddressSanitizer detects memory errors during fuzzing. Use when fuzzing C\u002FC++ code to find buffer overflows and use-after-free bugs.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1480,1483,1486,1487],{"name":1481,"slug":1482,"type":16},"C#","c",{"name":1484,"slug":1485,"type":16},"Debugging","debugging",{"name":14,"slug":15,"type":16},{"name":1488,"slug":1489,"type":16},"Testing","testing","2026-07-17T06:05:14.925095",{"slug":1492,"name":1492,"fn":1493,"description":1494,"org":1495,"tags":1496,"stars":29,"repoUrl":30,"updatedAt":1500},"aflpp","perform multi-core fuzzing of C\u002FC++ projects","AFL++ is a fork of AFL with better fuzzing performance and advanced features. Use for multi-core fuzzing of C\u002FC++ projects.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1497,1498,1499],{"name":1481,"slug":1482,"type":16},{"name":14,"slug":15,"type":16},{"name":1488,"slug":1489,"type":16},"2026-07-17T06:05:12.433192",{"slug":1502,"name":1502,"fn":1503,"description":1504,"org":1505,"tags":1506,"stars":29,"repoUrl":30,"updatedAt":1518},"agentic-actions-auditor","audit GitHub Actions for security vulnerabilities","Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI\u002FCD pipelines, including env var intermediary patterns, direct expression injection, dangerous sandbox configurations, and wildcard user allowlists. Use when reviewing workflow files that invoke AI coding agents, auditing CI\u002FCD pipeline security for prompt injection risks, or evaluating agentic action configurations.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1507,1510,1513,1514,1517],{"name":1508,"slug":1509,"type":16},"Agents","agents",{"name":1511,"slug":1512,"type":16},"CI\u002FCD","ci-cd",{"name":24,"slug":25,"type":16},{"name":1515,"slug":1516,"type":16},"GitHub Actions","github-actions",{"name":14,"slug":15,"type":16},"2026-07-18T05:47:48.564744",{"slug":1520,"name":1520,"fn":1521,"description":1522,"org":1523,"tags":1524,"stars":29,"repoUrl":30,"updatedAt":1531},"algorand-vulnerability-scanner","scan Algorand smart contracts for vulnerabilities","Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use when auditing Algorand projects (TEAL\u002FPyTeal).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1525,1526,1527,1528],{"name":21,"slug":22,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},{"name":1529,"slug":1530,"type":16},"Smart Contracts","smart-contracts","2026-07-18T05:47:43.989063",{"slug":1533,"name":1533,"fn":1534,"description":1535,"org":1536,"tags":1537,"stars":29,"repoUrl":30,"updatedAt":1544},"ask-questions-if-underspecified","clarify requirements before implementation","Clarify requirements before implementing. Use when serious doubts arise.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1538,1541],{"name":1539,"slug":1540,"type":16},"Engineering","engineering",{"name":1542,"slug":1543,"type":16},"Productivity","productivity","2026-07-17T06:05:33.543262",{"slug":1546,"name":1546,"fn":1547,"description":1548,"org":1549,"tags":1550,"stars":29,"repoUrl":30,"updatedAt":1556},"atheris","fuzz Python code with Atheris","Atheris is a coverage-guided Python fuzzer based on libFuzzer. Use for fuzzing pure Python code and Python C extensions.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1551,1554,1555],{"name":1552,"slug":1553,"type":16},"Python","python",{"name":14,"slug":15,"type":16},{"name":1488,"slug":1489,"type":16},"2026-07-17T06:05:14.575191",{"slug":1558,"name":1558,"fn":1559,"description":1560,"org":1561,"tags":1562,"stars":29,"repoUrl":30,"updatedAt":1566},"audit-augmentation","augment code graphs with audit findings","Augments Trailmark code graphs with external audit findings from SARIF static analysis results, weAudit annotation files, and version-gated Trailmark 0.4.x binary-analysis graph exports. Maps findings to graph nodes by file and line overlap, creates severity-based subgraphs, and enables cross-referencing findings with pre-analysis data (blast radius, taint, etc.). Use when projecting SARIF results onto a code graph, overlaying weAudit annotations, importing binary graph findings, cross-referencing Semgrep, CodeQL, or binary-analysis findings with call graph data, or visualizing audit findings in the context of code structure.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1563,1564,1565],{"name":21,"slug":22,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},"2026-08-01T05:44:54.920542",{"slug":1568,"name":1568,"fn":1569,"description":1570,"org":1571,"tags":1572,"stars":29,"repoUrl":30,"updatedAt":1579},"audit-context-building","build architectural context for code analysis","Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1573,1576,1577,1578],{"name":1574,"slug":1575,"type":16},"Architecture","architecture",{"name":21,"slug":22,"type":16},{"name":24,"slug":25,"type":16},{"name":1539,"slug":1540,"type":16},"2026-07-18T05:47:40.122449",{"slug":1581,"name":1581,"fn":1582,"description":1583,"org":1584,"tags":1585,"stars":29,"repoUrl":30,"updatedAt":1590},"audit-prep-assistant","prepare codebases for security audits","Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user stories, inline comments).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1586,1587,1588,1589],{"name":21,"slug":22,"type":16},{"name":24,"slug":25,"type":16},{"name":1539,"slug":1540,"type":16},{"name":14,"slug":15,"type":16},"2026-07-18T05:47:39.210985",{"slug":1592,"name":1592,"fn":1593,"description":1594,"org":1595,"tags":1596,"stars":29,"repoUrl":30,"updatedAt":1602},"burpsuite-project-parser","parse Burp Suite project files","Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1597,1598,1601],{"name":21,"slug":22,"type":16},{"name":1599,"slug":1600,"type":16},"CLI","cli",{"name":14,"slug":15,"type":16},"2026-07-17T06:05:33.198077",{"slug":1604,"name":1604,"fn":1605,"description":1606,"org":1607,"tags":1608,"stars":29,"repoUrl":30,"updatedAt":1613},"c-review","audit C and C++ code","Performs comprehensive C\u002FC++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C\u002FC++ applications, reviewing daemons or services for memory safety, or hunting integer overflow \u002F use-after-free \u002F race conditions in userspace code.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1609,1610,1611,1612],{"name":21,"slug":22,"type":16},{"name":1481,"slug":1482,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},"2026-07-17T06:05:11.333374",{"slug":1615,"name":1615,"fn":1616,"description":1617,"org":1618,"tags":1619,"stars":29,"repoUrl":30,"updatedAt":1624},"cairo-vulnerability-scanner","scan Cairo and StarkNet contracts for vulnerabilities","Scans Cairo\u002FStarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use when auditing StarkNet projects.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1620,1621,1622,1623],{"name":21,"slug":22,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},{"name":1529,"slug":1530,"type":16},"2026-07-18T05:47:42.84568",111,{"items":1627,"total":1673},[1628,1635,1641,1649,1656,1661,1667],{"slug":1475,"name":1475,"fn":1476,"description":1477,"org":1629,"tags":1630,"stars":29,"repoUrl":30,"updatedAt":1490},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1631,1632,1633,1634],{"name":1481,"slug":1482,"type":16},{"name":1484,"slug":1485,"type":16},{"name":14,"slug":15,"type":16},{"name":1488,"slug":1489,"type":16},{"slug":1492,"name":1492,"fn":1493,"description":1494,"org":1636,"tags":1637,"stars":29,"repoUrl":30,"updatedAt":1500},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1638,1639,1640],{"name":1481,"slug":1482,"type":16},{"name":14,"slug":15,"type":16},{"name":1488,"slug":1489,"type":16},{"slug":1502,"name":1502,"fn":1503,"description":1504,"org":1642,"tags":1643,"stars":29,"repoUrl":30,"updatedAt":1518},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1644,1645,1646,1647,1648],{"name":1508,"slug":1509,"type":16},{"name":1511,"slug":1512,"type":16},{"name":24,"slug":25,"type":16},{"name":1515,"slug":1516,"type":16},{"name":14,"slug":15,"type":16},{"slug":1520,"name":1520,"fn":1521,"description":1522,"org":1650,"tags":1651,"stars":29,"repoUrl":30,"updatedAt":1531},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1652,1653,1654,1655],{"name":21,"slug":22,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},{"name":1529,"slug":1530,"type":16},{"slug":1533,"name":1533,"fn":1534,"description":1535,"org":1657,"tags":1658,"stars":29,"repoUrl":30,"updatedAt":1544},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1659,1660],{"name":1539,"slug":1540,"type":16},{"name":1542,"slug":1543,"type":16},{"slug":1546,"name":1546,"fn":1547,"description":1548,"org":1662,"tags":1663,"stars":29,"repoUrl":30,"updatedAt":1556},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1664,1665,1666],{"name":1552,"slug":1553,"type":16},{"name":14,"slug":15,"type":16},{"name":1488,"slug":1489,"type":16},{"slug":1558,"name":1558,"fn":1559,"description":1560,"org":1668,"tags":1669,"stars":29,"repoUrl":30,"updatedAt":1566},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1670,1671,1672],{"name":21,"slug":22,"type":16},{"name":24,"slug":25,"type":16},{"name":14,"slug":15,"type":16},77]