Pidcat-style Android logcat filter with built-in secret and PII detection, made for daily Android bug bounty and pentest use.
Filters adb logcat output down to a single target app's package, and optionally scans the stream for leaked secrets tokens, API keys, credentials, PII.
- Python 3.7+
adbon your PATH- A connected device or running emulator with the target app installed
python3 leakcat.py com.target.app
python3 leakcat.py com.target.app -secrets
python3 leakcat.py com.target.app -secrets -o loginflow
python3 leakcat.py com.target.app -s emulator-5554
python3 leakcat.py com.target.app --no-clear
| Flag | Description |
|---|---|
package |
Target app's package name (required) |
-secrets |
Scan the log stream for tokens, keys, and PII |
-o NAME |
Label for this session's output files |
-s SERIAL |
Target a specific device/emulator |
--no-clear |
Keep old logcat buffer instead of clearing on start |
All sessions save to a single folder, leakcat_captures/, created next to wherever you run the script:
leakcat_captures/
├── target_20260718_143022_full.log
├── target_loginflow_20260718_150310_full.log
├── target_loginflow_20260718_150310_findings.jsonl
*_full.log— full filtered logcat output for the session*_findings.jsonl— one JSON line per unique detected finding, with type, severity, tag, and value
A findings summary prints to the terminal when you stop the session with Ctrl+C.
For authorized security testing only — bug bounty programs, pentest engagements, or apps you own or have explicit permission to test.
MIT