APKLeaks
APKLeaks is a command-line tool that scans Android APK files to identify embedded URIs, endpoints, and secrets for security assessment purposes.
APKLeaks is a command-line tool that scans Android APK files to identify embedded URIs, endpoints, and secrets for security assessment purposes.
Checked October 2026.
APKLeaks is a command-line tool that analyzes Android APK files to identify security-sensitive information embedded within application code.
The tool uses the jadx disassembler to decompile APK files and extract readable code for comprehensive analysis. It scans the decompiled code to locate URIs, endpoints, and secrets that may pose security risks.
Key features include:
The tool processes APK files from local file paths and generates detailed reports of discovered security-sensitive information. Results can be saved to specified output files for further analysis or documentation purposes.
APKLeaks is designed for security professionals conducting Android application assessments, developers performing security reviews of their applications, and security auditors evaluating mobile application security posture.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about APKLeaks: features, pricing and alternatives.
APKLeaks is a product in the Secrets Detection category. It covers Security Scanning and Android Security.
APKLeaks is free. Download and setup instructions are at https://github.com/dwisiswant0/apkleaks/.
Alternatives to APKLeaks listed on CybersecTools:
Compare all APKLeaks alternatives at https://cybersectools.com/alternatives/apkleaks
APKLeaks is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Yar is a reconnaissance tool for scanning organizations, users, and repositories to identify vulnerabilities and security risks during security assessments.
Scans code for exposed API keys, credentials, and tokens in repos and CI/CD.
Detects, validates, and remediates secrets in code and pipelines
AI-powered secret detection tool for real-time credential scanning in code
Detects hardcoded secrets in code repos, commits, and containers
Scans Git repos for PII/PHI leaks in code, commits, and branches.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best Application Security Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,033 products.
Connect your AI
