Back to directory

WRITEUP #1946

Firebase: Insecure by Default (feat. that one time our classmates tried to sue us)

APIHardcoded API keys

by@saligrama_a(Aditya Saligrama)

Program

Fizz

Published

Nov 14, 2022

Added to HackDex

Nov 17, 2022

Read Full Writeuphttps://saligrama.io/blog/post/firebase-insecure-by-default/

▸ RELATED WRITEUPS

Authorization bypass due to cache misconfiguration

APIAuthorization bypass

The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover

Built with ❤️ by Shubham Rawat