Google Maps API Scanner

Used for determining whether a leaked/found Google Maps API Key is vulnerable to unauthorized access by other applications or not.

Download Google Maps API Scanner

GitHub - ozguralp/gmapsapiscannerGitHub

Using it

Python3

python3 maps_api_scanner_python3.py --api-key API_KEY

Python2

Observe the results for vulnerable API Keys and their corresponding Cost Matrix Table.

Then you can use use JADX, open the APK and search for each API Key to verify that the API Keys are hardcoded.