FireStorePwn scans an APK and checks the Firestore database for rules that are not secure, testing with or without authentication.
If there are problems with the security rules, attackers could steal, modify or delete data and raise the bill.
How It Works
Install FSP
sudo wget https://raw.githubusercontent.com/takito1812/FireStorePwn/main/fsp -O /bin/fsp
sudo chmod +x /bin/fsp
Running fsp
Scanning an APK without authentication
fsp app.apk
Scanning an APK with authentication
With email and password.
fsp app.apk test@test.com:123456
With a token.
fsp app.apk eyJhbGciO…
Playwright-MCP (Model Context Protocol) is a cutting-edge tool designed to bridge the gap between AI…
JBDev is a specialized development tool designed to streamline the creation and debugging of jailbreak…
The Kereva LLM Code Scanner is an innovative static analysis tool tailored for Python applications…
Nuclei-Templates-Labs is a dynamic and comprehensive repository designed for security researchers, learners, and organizations to…
SSH-Stealer and RunAs-Stealer are malicious tools designed to stealthily harvest SSH credentials, enabling attackers to…
Control flow flattening is a common obfuscation technique used by OLLVM (Obfuscator-LLVM) to transform executable…