OpenFirebase

OpenFirebase is an automated security scanning tool designed to extract Firebase configurations from Android APKs and iOS IPAs, enabling unauthenticated and authenticated scanning of Firebase services, such as Realtime Database, Firestore, and Storage. Notably, it detects accidentally embedded service account credentials and supports multiple input formats, providing comprehensive analysis for both mobile and web applications. The tool also includes built-in wordlists and example payloads for effective fuzz testing and vulnerability assessment.