https://github.com/MuhammadKhizerJaved/Insecure-Firebase-Exploit

A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.
https://github.com/MuhammadKhizerJaved/Insecure-Firebase-Exploit

Last synced: about 1 month ago
JSON representation

A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.

• Host: GitHub
• URL: https://github.com/MuhammadKhizerJaved/Insecure-Firebase-Exploit
• Owner: MuhammadKhizerJaved
• Created: 2020-02-04T01:30:51.000Z (almost 5 years ago)
• Default Branch: master
• Last Pushed: 2024-06-04T21:15:28.000Z (6 months ago)
• Last Synced: 2024-07-05T08:37:19.450Z (5 months ago)
• Language: Python
• Size: 796 KB
• Stars: 276
• Watchers: 7
• Forks: 84
• Open Issues: 3
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - MuhammadKhizerJaved/Insecure-Firebase-Exploit - A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write (Python)

README

        
# Insecure-Firebase-Exploit

A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.

# Blog: 

https://blog.securitybreached.org/2020/02/04/exploiting-insecure-firebase-database-bugbounty/

# Usage: 

`Firebase-Write-Permission-Exploit.py` This is the Updated Version of Exploit i made. 

Now simply give the Database Name, File Name You wish to create, Your Information. 

And Write it to the Insecure/vulnerable firebase databases.

![Usage POC Image](/Write-Exploit.png)

**python Firebase-Write-Permission-Exploit.py**

```

Enter Firebase Databse Name: 

Enter Your Filename: 

Enter your name: 

Enter your email: 

Enter your Blog: 

Enter A Message: 

```