vaguue / fireprint

FirePrint is a security tool for finding misconfigured Firebase realtime databases in Android or iOS applications.

Fireprint - Firebase Scanner For Android/iOS Application

FirePrint v2.0

FirePrint is a python based tool for finding misconfigured Firebase databases used in Android or iOS applications. Just drag and drop your apk/ipa files to this script and find if there is any misconfigured Firebase database is exist.

Prerequisites

      1. apktool.jar (/tools directory)

Installation

      • clone the fireprint repo,   git clone https://github.com/sahad-mk/Fireprint
      
      • Give executable permission, chmod +x fireprint.py 

Usage

      ➢ python3 fireprint.py -a|-i|-p <filename/firebase db name> [-o filename]
      
      ➢ python3 fireprint.py -h for help

Examples:

      • python3 fireprint.py -a test.apk 
          
      • python3 fireprint.py -i tets.ipa or
                                                     
      • python3 fireprint.py -p tets_db 

Screenshots

➊ Scanning Android(.apk) apps

➋ Scanning iOS(.ipa) apps

➌ Scanning firebase db name

➍ HTML Report