Merge pull request #528 from Abss0x7tbh/patch-1

Grep for Potential FCM Server Keys

tokens/fcm-server-key.yaml

@@ -0,0 +1,20 @@
+id: fcm-server-key
+
+info:
+  name: FCM Server Key
+  author: Abss (@absshax)
+  severity: high
+
+  # Reference:- https://abss.me/posts/fcm-takeover
+  # FCM Project Credentials
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    extractors:
+      - type: regex
+        part: body
+        regex:
+          - "AAAA[a-zA-Z0-9_-]{7}:[a-zA-Z0-9_-]{140}"