Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create Firebase-Detect.bcheck #242

Merged
merged 1 commit into from
Feb 10, 2025
Merged

Conversation

websecnl
Copy link
Contributor

@websecnl websecnl commented Feb 8, 2025

Firebase Technology Detection Script

BCheck Contributions

  • [✅] BCheck compiles and executes as expected
  • [✅] BCheck contains appropriate metadata (name, version, author, description and appropriate tags)
  • [✅] Only .bcheck files have been added or modified
  • [✅] BCheck is in the appropriate folder
  • [✅] PR contains single or limited number of BChecks (Multiple PRs are preferred)
  • [❗] BCheck attempts to minimize false positives

It is prone to false positive, for example: if its a forum or guestbook or something like that and people talk about 'firebaseapp.com' then this will most likely trigger as it would detect it in the response.

I suppose this could be improved to detect firebase keys, instances etc.. so while this works. It can defiantly be improved.

Firebase Technology Detection Script
Copy link
Collaborator

@PortSwiggerWiener PortSwiggerWiener left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Many thanks for the submission. It is very much appreciated.

LGTM 👍

Copy link
Contributor

@Hannah-PortSwigger Hannah-PortSwigger left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good!

@Hannah-PortSwigger Hannah-PortSwigger merged commit 722f091 into PortSwigger:main Feb 10, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

3 participants