Firepwn is a tool made for testing the Security Rules of a firebase application.

Automated Firebase recon and security scanner. Extracts from APKs or IPAs and checks for unauthorized read and write access on Firestore, Realtime Database, Storage buckets, Remote Config, Cloud Functions, and detects hardcoded service accounts.

Syntax highlighting for Bolt and Sublime

Firebase client tools for security assessment or penetration testing.

Compilation of the common security rules for Firebase that are often used by people in their projects.

JavaScript Security Engineering (Helicopter View) workshop, crafted for 3 hours with a bunch of demos

Social blogging community build with React, Next.js, and Firebase.

An Android static analysis tool as an Android Studio plugin to check the status of the Firebase database access control that is in use by the app under development

Web app demonstrating insecure Firebase security

Wordlists for fuzzing Firebase Cloud Functions and Firestore collections, mined from public GitHub source code. Ranked by real-world usage across thousands of repos. Drop-in for OpenFirebase, Fuff etc. Black-box recon for bug bounty and pentesting.

Save and organize your personal places on a custom Google Maps App!

Firebase security rule

A Reactjs Firebase web app that allows basic CRUD operation to authenticated users on Firestore.

At Omnifood, we believe that healthy food should be convenient and delicious. Our mission is to provide busy people with nutritious meals made from the freshest, locally sourced ingredients, cooked and delivered with care.

Security tool to easily exploit Firebase and show impact, if you manage to find a leaked service account and its private key

👋 Welcome to Job Navi! I've built this user-friendly web app using React, TypeScript, Spring Boot, Hibernate, and Tailwind CSS/Material UI. It's designed to help you efficiently manage job applications. Check out the live site! More features are on the way.