Return to forum
google api key
by - Thursday, January 1, 1970 at 12:00 AM
Banned
Posts: 42
Threads: 0
Joined: N/A
Reputation: 0

#1
July 31, 2022 at 1:31 PM
hi guys hope you can help,
i was doing a pentest on an android app and i ve found this google secret keys, how can i use them.
thanks for your help

"google_api_key" : "AIzaSyAhH0FakJmzmEhw7zz4hRmSJpSNdL7XcaA"
"google_crash_reporting_api_key" : "AIzaSyAhH0FakJmzmEhw7zz4hRmSJpSNdL7XcaA"
Reply
BreachForums User
Member
Posts: 0
Threads: 0
Joined: N/A
Reputation: 0

Coder
#2
July 31, 2022 at 1:45 PM
Do you know which services api is this like firebase , maps etc?

Check how does the code use the variable.
Reply
Banned
Posts: 42
Threads: 0
Joined: N/A
Reputation: 0

#3
July 31, 2022 at 2:49 PM
(July 31, 2022, 01:31 PM)robert_69 Wrote: hi guys hope you can help,
i was doing a pentest on an android app and i ve found this google secret keys, how can i use them.
thanks for your help

"google_api_key" : "AIzaSyAhH0FakJmzmEhw7zz4hRmSJpSNdL7XcaA"
"google_crash_reporting_api_key" : "AIzaSyAhH0FakJmzmEhw7zz4hRmSJpSNdL7XcaA"

i scaned the app with MobSF this is what i got

com.google.android.gms.measurement.AppMeasurementService
org.apache.cordova.firebase.FirebasePluginMessagingService
com.google.firebase.components.ComponentDiscoveryService
com.google.firebase.messaging.FirebaseMessagingService
com.google.android.gms.tagmanager.TagManagerService
com.google.firebase.iid.FirebaseInstanceIdService
com.google.android.gms.measurement.AppMeasurementJobService
Reply
Banned
Posts: 42
Threads: 0
Joined: N/A
Reputation: 0

#4
July 31, 2022 at 3:10 PM
(July 31, 2022, 02:49 PM)robert_69 Wrote:
(July 31, 2022, 01:31 PM)robert_69 Wrote: hi guys hope you can help,
i was doing a pentest on an android app and i ve found this google secret keys, how can i use them.
thanks for your help

"google_api_key" : "AIzaSyAhH0FakJmzmEhw7zz4hRmSJpSNdL7XcaA"
"google_crash_reporting_api_key" : "AIzaSyAhH0FakJmzmEhw7zz4hRmSJpSNdL7XcaA"

i scaned the app with MobSF this is what i got

com.google.android.gms.measurement.AppMeasurementService
org.apache.cordova.firebase.FirebasePluginMessagingService
com.google.firebase.components.ComponentDiscoveryService
com.google.firebase.messaging.FirebaseMessagingService
com.google.android.gms.tagmanager.TagManagerService
com.google.firebase.iid.FirebaseInstanceIdService
com.google.android.gms.measurement.AppMeasurementJobService


yep its a firebase
Reply
Member
Member
Posts: 30
Threads: 0
Joined: N/A
Reputation: 0

#5
August 1, 2022 at 12:01 AM
JUst add you API key here
https://github.com/ozguralp/gmapsapiscanner

The script goes throught every google service and returns if the key is alive for it or no, very useful.
Reply
Banned
Posts: 42
Threads: 0
Joined: N/A
Reputation: 0

#6
August 1, 2022 at 6:46 PM
(August 1, 2022, 12:01 AM)sincernot Wrote: JUst add you API key here
https://github.com/ozguralp/gmapsapiscanner

The script goes throught every google service and returns if the key is alive for it or no, very useful.


thanks mate, and what i do if its alive?
Reply
Banned
Posts: 42
Threads: 0
Joined: N/A
Reputation: 0

#7
August 1, 2022 at 6:59 PM
(August 1, 2022, 06:46 PM)robert_69 Wrote:
(August 1, 2022, 12:01 AM)sincernot Wrote: JUst add you API key here
https://github.com/ozguralp/gmapsapiscanner

The script goes throught every google service and returns if the key is alive for it or no, very useful.


thanks mate, and what i do if its alive?

api key is not vulnerable to enything
can i do something else?
Reply


 Users viewing this thread: google api key: No users currently viewing.