Find creds/db/api key

Find hardcoded api keys

https://github.com/arijitdirghangi/Find-Hardcoded.git It will search for AWS key, Google API keys,etc

Cmdline: ./find-hardcoded.sh /path/to/apk

Firebase Scanner

https://github.com/shivsahni/FireBaseScanner It will search for firebase instances on the apk

Note

If you find any Firebase credentials during your Web App hunting, please try to open the URL with /.json.

Shared Preferences Files

The SharedPreferences API is commonly used to permanently save small collections of key-value pairs. Data stored in a SharedPreferences object is written to a plain-text XML file.

Usually located in /data/data/<package_name>/shared_prefs