nuclei-templates/http/technologies/google/firebase-urls.yaml

id: firebase-urls

info:
  name: Google Firebase DB URL Finder
  author: panch0r3d
  severity: info
  description: Find firebaseio urls to check for security permissions
  metadata:
    max-request: 1
  tags: tech,firebase,google

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 1

    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - ".*?(f|F)(i|I)(r|R)(e|E)(b|B)(a|A)(s|S)(e|E)(i|I)(o|O)[.](c|C)(o|O)(m|M).*?"
        part: body

# digest: 4b0a00483046022100f3e03ee36cf5cdb31d7bf98bdadc0d1f16483b920823f5141f7a962d1f5e67e3022100babf63272cdb75a464aa8b840cd384d4028f5b7b986194794f97c95ddb3e0589:922c64590222798bb761d5b6d8e72950
moving files around 2021-06-07 14:27:59 +00:00			`id: firebase-urls`

			`info:`
			`name: Google Firebase DB URL Finder`
			`author: panch0r3d`
			`severity: info`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`description: Find firebaseio urls to check for security permissions`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`metadata:`
			`max-request: 1`
templateman update 2023-10-14 11:27:55 +00:00			`tags: tech,firebase,google`
moving files around 2021-06-07 14:27:59 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
moving files around 2021-06-07 14:27:59 +00:00			`- method: GET`
			`path:`
			`- "{{BaseURL}}"`

Using "host-redirects" instead of "redirects" to avoid scanning 3rd party / out of scope hosts. (#5491) 2022-10-07 21:27:25 +00:00			`host-redirects: true`
moving files around 2021-06-07 14:27:59 +00:00			`max-redirects: 1`

			`matchers-condition: and`
			`matchers:`
			`- type: regex`
			`regex:`
			`- ".?(f\|F)(i\|I)(r\|R)(e\|E)(b\|B)(a\|A)(s\|S)(e\|E)(i\|I)(o\|O)[.](c\|C)(o\|O)(m\|M).?"`
Rename technologies/firebase-urls.yaml to technologies/google/firebase-urls.yaml 2021-09-12 17:51:49 +00:00			`part: body`
TemplateMan Update [Fri Oct 20 11:41:12 UTC 2023] :robot: 2023-10-20 11:41:13 +00:00
			`# digest: 4b0a00483046022100f3e03ee36cf5cdb31d7bf98bdadc0d1f16483b920823f5141f7a962d1f5e67e3022100babf63272cdb75a464aa8b840cd384d4028f5b7b986194794f97c95ddb3e0589:922c64590222798bb761d5b6d8e72950`