Skip to content

Google FCM API Test

ID: api-googlefcm

Severity: info

Author: zzeitlin

Tags: token-spray,google,fcm,firebase,cloud,messaging

id: api-googlefcm
info:
name: Google FCM API Test
author: zzeitlin
severity: info
metadata:
max-request: 1
tags: token-spray,google,fcm,firebase,cloud,messaging
self-contained: true
http:
- method: POST
path:
- "https://fcm.googleapis.com/fcm/send"
body: "{'registration_ids':['ABC']}"
headers:
Authorization: key={{token}}
Content-Type: application/json
matchers:
- type: status
status:
- 200
# digest: 490a0046304402206d22506a0bb4c29c2a86764f6358de4a1a1018ac2a8d38385ef9780223eb58f2022074d4a7f2bd8a342fbf0bde8307e224bf5d0d59c81e80a90f20ab4c16e207d974:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/token-spray/google-fcm.yaml"

View on Github