https://github.com/effortlessdevsec/ApkRecon

Scanning APK file for URIs, endpoints & secrets.
https://github.com/effortlessdevsec/ApkRecon

android apkrecon hacking scanning-apk secrets sensitive-data uris

Last synced: 3 months ago
JSON representation

Scanning APK file for URIs, endpoints & secrets.

• Host: GitHub
• URL: https://github.com/effortlessdevsec/ApkRecon
• Owner: effortlessdevsec
• Created: 2021-02-13T08:51:53.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2021-04-05T10:21:33.000Z (over 3 years ago)
• Last Synced: 2024-06-07T00:32:04.521Z (5 months ago)
• Topics: android, apkrecon, hacking, scanning-apk, secrets, sensitive-data, uris
• Language: Shell
• Homepage:
• Size: 2.95 MB
• Stars: 36
• Watchers: 3
• Forks: 4
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - effortlessdevsec/ApkRecon - Scanning APK file for URIs, endpoints & secrets. (Shell)

README

        

## ApkRecon

[![version](https://badge.fury.io/gh/dwisiswant0%2fapkleaks.svg)]()

[![contributions](https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat)](https://github.com/effortlessdevsec/ApkRecon/issues)

Scanning APK file for URIs, endpoints & secrets.

extracting of all urls  and all sensitive data like key,secrets , password  from android application

### Installation

To install **ApkRecon**, simply:

```

$ git clone https://github.com/effortlessdevsec/ApkRecon.git

$ cd ApkRecon/

$ bash install.sh

```

### NOTE

You can use your own custom regex.

You need to install:

- [apkurlgrep](https://github.com/ndelphit/apkurlgrep) 

- [Jadx](https://github.com/skylot/jadx)

- [gf](https://github.com/tomnomnom/gf)

### Usage

Basically,

```

$ bash ApkRecon.sh 

```

### Credits and Thanks

- [@tomnomnom](https://github.com/tomnomnom/gf) - a `gf` patterns.

- [@ndelphit](https://github.com/ndelphit)