FireStorePwn scans an APK and checks the Firestore database for rules that are not secure, testing with or without authentication.
If there are problems with the security rules, attackers could steal, modify or delete data and raise the bill.
How It Works
sudo wget https://raw.githubusercontent.com/takito1812/FireStorePwn/main/fsp -O /bin/fsp
sudo chmod +x /bin/fsp
Scanning an APK without authentication
Scanning an APK with authentication
With email and password.
fsp app.apk email@example.com:123456
With a token.
fsp app.apk eyJhbGciO…