APKLeaks

APKLeaks is a Python tool for scanning Android APK files to extract URLs, API endpoints, and hardcoded secrets from decompiled source code. It uses JADX for decompilation and applies a comprehensive set of regex patterns to identify API keys, OAuth tokens, AWS credentials, Firebase URLs, database connection strings, and other sensitive data that developers accidentally leave in production builds. APKLeaks is particularly useful during mobile app security assessments where you need a quick initial triage of what backend services an app communicates with and whether any credentials are exposed. The tool outputs findings in JSON format and supports custom regex pattern files for organization-specific secret formats. With over 6,000 GitHub stars, APKLeaks has become a standard first step in Android application security testing, often used alongside MobSF for comprehensive static analysis.