> For the complete documentation index, see [llms.txt](https://docs.hackjiji.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.hackjiji.org/web-pentesting/api/disclosed-google-api-key.md).

# Disclosed Google API Key

If you find a Google Api key exposed, verify whether it can be used to interact with other Google APi services and verify if some restriction is in place

* Run the following script to identify the vulnerable API endpoints:

{% embed url="<https://github.com/ozguralp/gmapsapiscanner>" %}

* Try to send the request with another Referer header to see if there is no restriction in place