A practical Firebase pentest checklist covering Auth, Realtime database, Firestore, Storage, Remote Config, Functions, and IAM. Includes OpenFirebase commands and clear finding criteria per service
-
Updated
Apr 8, 2026
A practical Firebase pentest checklist covering Auth, Realtime database, Firestore, Storage, Remote Config, Functions, and IAM. Includes OpenFirebase commands and clear finding criteria per service
Security tool to easily exploit Firebase and show impact, if you manage to find a leaked service account and its private key
Add a description, image, and links to the firebase-hacktrick topic page so that developers can more easily learn about it.
To associate your repository with the firebase-hacktrick topic, visit your repo's landing page and select "manage topics."