Scanning APK for URIs, endpoints & secrets

Install apkleaks

Install tool from source

Not found

Scan for URIs, endpoints & secrets

Source

apkleaks -f ~/path/to/file.apk

Python

python3 apkleaks.py -f ~/path/to/file.apk

Docker

docker run -it --rm -v /tmp:/tmp dwisiswant0/apkleaks:latest -f /tmp/file.apk

Now you can determine whether a leaked/found Google Maps API Key is vulnerable to unauthorized access by other applications or not using Google Maps API Scanner