nuclei-templates/tokens/fcm-server-key.yaml

20 lines
355 B
YAML

id: fcm-server-key
info:
name: FCM Server Key
author: Abss (@absshax)
severity: high
# Reference:- https://abss.me/posts/fcm-takeover
# FCM Project Credentials
requests:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- "AAAA[a-zA-Z0-9_-]{7}:[a-zA-Z0-9_-]{140}"