Merge pull request #6319 from HardikSolanki96/firebase-debug-log

Firebase debug log
patch-1
Ritik Chaddha 2022-12-12 23:26:48 +05:30 committed by GitHub
commit e6f2b48f44
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 31 additions and 0 deletions

View File

@ -0,0 +1,31 @@
id: firebase-debug-log
info:
name: Firebase Debug Log File Exposure
author: Hardik-Solanki
severity: low
reference:
- https://github.com/maurosoria/dirsearch/blob/master/db/dicc.txt
metadata:
verified: true
github-query: filename:firebase-debug.log
tags: exposure,firebase,log,debug
requests:
- method: GET
path:
- "{{BaseURL}}/firebase-debug.log"
matchers-condition: and
matchers:
- type: word
part: body
words:
- '[debug]'
- 'firebase'
- 'googleapis.com'
condition: and
- type: status
status:
- 200