id: fcm-server-key

info:
  name: FCM Server Key
  author: absshax
  severity: high
  reference:
    - https://abss.me/posts/fcm-takeover
  tags: exposure,token,google

requests:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - "AAAA[a-zA-Z0-9_-]{7}:[a-zA-Z0-9_-]{140}"