nuclei-templates/technologies/firebase-detect.yaml

18 lines
357 B
YAML
Raw Normal View History

2020-04-22 06:42:01 +00:00
id: firebase-detect
info:
name: firebase detect
author: organiccrap
severity: low
# http://ghostlulz.com/google-exposed-firebase-database/
2020-05-25 08:02:27 +00:00
2020-04-22 06:42:01 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/.settings/rules.json?auth=FIREBASE_SECRET"
matchers:
- type: word
words:
2020-05-25 08:02:27 +00:00
- "Could not parse auth token"
2020-04-22 06:42:01 +00:00
part: body