24 lines
486 B
YAML
24 lines
486 B
YAML
|
id: firebase-urls
|
||
|
|
|
||
|
|
info:
|
||
|
|
name: Google Firebase DB URL Finder
|
||
|
|
description: Find firebaseio urls to check for security permissions
|
||
|
|
author: panch0r3d
|
||
|
|
severity: info
|
||
|
|
tags: tech,firebase,google
|
||
|
|
|
||
|
|
requests:
|
||
|
|
- method: GET
|
||
|
|
path:
|
||
|
|
- "{{BaseURL}}"
|
||
|
|
|
||
|
|
redirects: true
|
||
|
|
max-redirects: 1
|
||
|
|
|
||
|
|
matchers-condition: and
|
||
|
|
matchers:
|
||
|
|
- type: regex
|
||
|
|
regex:
|
||
|
|
- ".*?(f|F)(i|I)(r|R)(e|E)(b|B)(a|A)(s|S)(e|E)(i|I)(o|O)[.](c|C)(o|O)(m|M).*?"
|
||
|
part: body
|