dwisiswant0/apkleaks

Health v2 · maintenance only

Adoption not part of the score

6275 stars · 588 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

APKLeaks is a Python CLI tool that decompiles Android APK files with jadx and scans them for URIs, endpoints, and hardcoded secrets using regex patterns. It supports custom pattern rules and text or JSON output.

Use cases

• find hardcoded secrets in an android apk
• extract urls and endpoints from an apk file
• scan apk for api keys during bug bounty
• static analysis of android apps for sensitive data
• run custom regex patterns against a decompiled apk
• audit mobile app security before a pentest

When to choose

• you need quick automated secret and endpoint discovery in APKs
• you want a lightweight CLI that fits bug bounty or pentest workflows
• you need custom detection rules via JSON patterns or JSON output for pipelines

When to avoid

• you need dynamic analysis or runtime behavior of the app
• you target iOS or non-Android binaries
• you need decompilation without installing jadx as an external dependency

Facets

cli-tool · maturity active

reverse-engineering vulnerability-scanning parser security security mobile-development reverse-engineering developer-tools cli python windows cross-platform apk static-analysis secrets-detection bugbounty android jadx mobile-security command-line linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dwisiswant0/apkleaks")