FireStorePwn scans an APK and checks the Firestore database for rules that are not secure, testing with or without authentication.
If there are problems with the security rules, attackers could steal, modify or delete data and raise the bill.
How It Works
Install FSP
sudo wget https://raw.githubusercontent.com/takito1812/FireStorePwn/main/fsp -O /bin/fsp
sudo chmod +x /bin/fsp
Running fsp
Scanning an APK without authentication
fsp app.apk
Scanning an APK with authentication
With email and password.
fsp app.apk test@test.com:123456
With a token.
fsp app.apk eyJhbGciO…
A data protection platform is a unified system that helps organizations discover, classify, monitor, and…
AI companies operating in or around Switzerland face a compliance challenge that most legal teams…
Two major data privacy laws now govern how organizations handle personal data across Europe; the…
This cheat sheet covers the essential Kali Linux commands every pentester and ethical hacker uses…
When I first started learning malware analysis and reverse engineering, I thought the hardest part…
Both git fetch and git pull talk to a remote repository, but they do very different things to your…