RC Spy
2 likes
RC Spy is a security tool that scans installed Android apps to detect if their Firebase Remote Config is publicly accessible — a common misconfiguration that can expose sensitive configuration data. It extracts Firebase credentials from APKs and checks for vulnerable endpoints.
+2
Cost / License
- Free
- Open Source (GPL-3.0)
Platforms
- Android
- Android Tablet
RC Spy
2 likes
Features
Properties
- Privacy focused
Features
- No registration required
- No Tracking
- Ad-free
- Works Offline
- Vulnerability Assessment
- Remote Config
Firebase Integration
Tags
- firebase
RC Spy information
Developed by
Tushar Ghige Licensing
Open Source (GPL-3.0) and Free product.Alternatives
0 alternatives listedSupported Languages
- English
AlternativeTo Category
Security & PrivacyGitHub repository
- 2 Stars
- 0 Forks
- 0 Open Issues
- Updated
No comments or reviews, maybe you want to be first?
Post comment/reviewWhat is RC Spy?
RC Spy is a security tool that scans installed Android apps to detect if their Firebase Remote Config is publicly accessible — a common misconfiguration that can expose sensitive configuration data. It extracts Firebase credentials from APKs and checks for vulnerable endpoints. Built using the Flutter framework.
Features:
- APK Analysis — Extracts Firebase credentials (App IDs & API Keys) from installed apps
- Vulnerability Detection — Checks if Remote Config endpoints are publicly accessible
- Multiple Views — View exposed configs in List, Table, or raw JSON format
- Smart Filtering — Filter by All, Vulnerable, Firebase, Secure, or No Firebase
- Local Caching — Results persist across app launches
- Fast Scanning — Parallel analysis using isolates for smooth performance