Skip to content

Script to check if Firebase Remote Config is enabled, and if enabled grab the contents required to make the POST request and o/p the data obtained

License

Notifications You must be signed in to change notification settings

boobooHQ/firebase-vuln-detect

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 

Repository files navigation

firebase-vuln-detect in APKs - JUST for quick checking of firebase vulns.

Script to check if Firebase Remote Config is enabled, and if enabled grab the contents required to make the POST request and o/p the data obtained

USAGE : python3 firebasecheck.py /apk/path/folder

  • Also checks if .json appended to firebase url exposes any data & notifies about it

no need of apktools or debugger. script uses strings command to fetch relevant data from the apk and then creates a GET & POST request then sends the request to show the o/p in the terminal ((project discovery notify integrated)

gallowaybabu

the reason for checking this ::: if someone unknowinlgy leaks sensitive info accidentally in those files image

About

Script to check if Firebase Remote Config is enabled, and if enabled grab the contents required to make the POST request and o/p the data obtained

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages