nuclei-templates/files/firebase-detect.yaml

18 lines
361 B
YAML

id: firebase-detect
info:
name: firebase detect
author: organiccrap
severity: low
# http://ghostlulz.com/google-exposed-firebase-database/
requests:
- method: GET
path:
- "{{BaseURL}}/.settings/rules.json?auth=FIREBASE_SECRET"
matchers:
- type: word
words:
- "Could not parse auth token"
part: body