APKLeaks — Android APK ScannerStep-by-step reference: install & use APKLeaks to extract URLs, API endpoints and hardcoded secrets from Android APK files. Educational purposes only.FAQ

What is APKLeaks?

APKLeaks is a free, open-source command-line scanner that pulls URIs, API endpoints and hardcoded secrets out of Android APK files. It targets mobile app security testing and bug bounty workflows.

Is APKLeaks illegal?

The tool is open source and legal to study. Running it on apps you do not own or lack permission to test may violate the app's terms and applicable law. Only scan apps you own or have explicit authorization to assess.

Does APKLeaks need a rooted Android device?

No. APKLeaks works on the APK file itself — you do not need a device at all. It decompiles the package and scans the resulting code for sensitive data.

How does APKLeaks decompile the APK?

It uses the jadx disassembler under the hood. If jadx is not already installed, APKLeaks will prompt you to download it automatically on first run.

What exactly does it extract?

By default it scans for URIs, URLs, API endpoints and secret patterns (like AWS access keys) using its built-in regex rules. You can supply your own patterns with a custom JSON rules file.

Why did the scan return nothing?

The APK may be heavily obfuscated. Try passing disassembler arguments to jadx, e.g. -a "--deobf --log-level DEBUG", or add custom regex patterns with --pattern rules.json.

Can I add my own search rules?

Yes. Pass a custom JSON file of regex patterns with the -p / --pattern option, e.g. apkleaks -f app.apk -p custom-rules.json.

How is APKLeaks different from MobSF?

APKLeaks is a lightweight, CLI-first scanner focused specifically on secrets and endpoints. MobSF is a full mobile app security framework with a web dashboard and many more checks. Many pentesters use both.

Does it support output to a file?

Yes. Use -o output.txt to write results to a file (a random file is created if you omit it), and --json to save in JSON format.

All tools · Sitemap · Games