nuclei-templates/exposed-tokens/google/fcm-server-key.yaml

19 lines
344 B
YAML

id: fcm-server-key
info:
name: FCM Server Key
author: Abss (@absshax)
severity: high
tags: token,google
reference: https://abss.me/posts/fcm-takeover
requests:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- "AAAA[a-zA-Z0-9_-]{7}:[a-zA-Z0-9_-]{140}"