A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.

An app to exploit firebase firestore insecure rules.

Exploit Insecure Firebase Directly

go-firebase-exploit or gfe is a tool for exploiting insecure firebase databases

FireHunter is a Firebase security toolkit for Android bug bounty. It includes Frida scripts to extract Auth Tokens from disk/memory and a Python bot to exploit insecure Firestore Security Rules via blind writes. Automate the process of finding logic bugs, bypassing client-side checks, and testing database permissions.

Exploit Insecure Firebase Directly Tiny and Simple program to exploit Insecure Firebase Database. Requirements: lolcat (for coloured text) figlet (for styled fonts)