Firebase

GoogleService-Info.plist - Detect

The GoogleService-Info.plist file contains sensitive information about the Firebase project, including the Google App ID, Project ID, Client ID, Client Secret, and Reversed Client ID. This file is used to authenticate the Firebase SDK in iOS applications.

Firebase Cloud Messaging - Server Key Disclosure

Detected Firebase Cloud Messaging (FCM) legacy server keys were identified in client-side files. These keys can be used to send push notifications to any device.

Content-Security-Policy Bypass - Firebaseio Rentokil

Firebase Debug Log File Exposure

Firebase debug log file was exposed.

Firebase Database Extract Check

Extract Firebase Database

FCM Server Key

FCM Server Key is leaked.

Insecure Firebase Database

If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase database.

Firebase Configuration File - Detect

Firebase configuration file was detected.