fcm-server-key: FCM Server Key

2025-08-01 fcm server key PoC Public

Description

FCM Server Key is leaked.

PoC

id: fcm-server-key

info:
  name: FCM Server Key
  author: absshax
  severity: high
  description: FCM Server Key is leaked.
  reference:
    - https://abss.me/posts/fcm-takeover
  classification:
    cwe-id: CWE-540
  metadata:
    max-request: 1
  tags: exposure,token,google,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - "AAAA[a-zA-Z0-9_-]{7}:[a-zA-Z0-9_-]{140}"
# digest: 4a0a00473045022015b635bb7cb14973cbfe4323897cb637592d18c9b8aa4f7f2e0ffbe7a1670b5802210081c8e45be97059eb9bef31e179beb8b5f1109f4d6c730d48e8fd7dc372b0a24c:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/exposures/tokens/google/fcm-server-key.yaml

References

Related Vulnerabilities