MuhammadKhizerJaved / Insecure-Firebase-Exploit
A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.
☆302Updated 11 months ago
Alternatives and similar repositories for Insecure-Firebase-Exploit
Users that are interested in Insecure-Firebase-Exploit are comparing it to the libraries listed below
Sorting:
- ☆408Updated 3 years ago
- Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations☆363Updated 4 years ago
- Unofficial documentation for the great tool Param Miner☆178Updated 2 years ago
- ☆293Updated 2 years ago
- Turbo Intruder Scripts☆222Updated 4 years ago
- Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools☆273Updated 10 months ago
- Automating XSS using Bash☆355Updated last year
- Js File Scanner☆169Updated 3 years ago
- 🐙 Cross-document messaging security research tool powered by https://enso.security☆289Updated last year
- Burp extension to create target specific and tailored wordlist from burp history.☆238Updated 3 years ago
- Secret and/or credential patterns used for gf.☆240Updated 2 years ago
- Quickly generate context-specific wordlists for content discovery from lists of URLs or paths☆221Updated 3 years ago
- Burp Extension for easily creating Wordlists☆211Updated 3 years ago
- Nuclei templates written by us.☆271Updated 3 years ago
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆504Updated 2 years ago
- Burpsuite plugin for Interact.sh☆221Updated 10 months ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆311Updated 6 months ago
- You can read the writeup on this script here☆273Updated 4 years ago
- Customisable and automated HTTP header injection☆246Updated 10 months ago
- A tool to check a bunch of URLs that contain reflecting params.☆576Updated 9 months ago
- Adds a customizable "Send to..."-context-menu to your BurpSuite.☆156Updated 2 years ago
- A fuzzer for detecting open redirect vulnerabilities☆750Updated 10 months ago
- A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate☆209Updated 10 months ago
- Hidden parameters discovery suite☆223Updated 2 years ago
- ☆154Updated 2 years ago
- Useful "Match and Replace" burpsuite rules☆347Updated last year
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆504Updated 2 months ago
- Automated tool for domains & subdomains gathering☆187Updated last year
- Just some public notes that can be useful and i want let the world knows.☆87Updated 4 years ago
- Gotator is a tool to generate DNS wordlists through permutations.☆477Updated 2 years ago