id: fcm-server-key

info:
  name: FCM Server Key
  author: absshax
  severity: high
  description: FCM Server Key is leaked.
  reference:
    - https://abss.me/posts/fcm-takeover
  metadata:
    max-request: 1
  tags: exposure,token,google

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - "AAAA[a-zA-Z0-9_-]{7}:[a-zA-Z0-9_-]{140}"
# digest: 490a004630440220775b28edd740ef27ac029ee72bc65edbfec2b15993dfc9b3bd5a254ec7b141bf02205024a5d17710e4653e446e25ab85f303b31e8aa7c5bd590c033f8fe4ed97eb2b:922c64590222798bb761d5b6d8e72950