Skip to content

Instantly share code, notes, and snippets.

@Anon-Exploiter

Anon-Exploiter/firebase_apiKeys_testing.html

Created June 16, 2020 07:40
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 3 You must be signed in to fork a gist
  • Save Anon-Exploiter/5232869d84d01d0e90377410ef25f576 to your computer and use it in GitHub Desktop.
Save Anon-Exploiter/5232869d84d01d0e90377410ef25f576 to your computer and use it in GitHub Desktop.
Download ZIP
For testing the Firebase API keys found in Web Applications or in JavaScript Code --
Raw
firebase_apiKeys_testing.html
<!DOCTYPE html>
<html>
<head>
<title></title>
</head>
<body>
<script src="https://www.gstatic.com/firebasejs/7.6.1/firebase-app.js"></script>
<!-- If you enabled Analytics in your project, add the Firebase SDK for Analytics -->
<script src="https://www.gstatic.com/firebasejs/7.6.1/firebase-analytics.js"></script>
<!-- Add Firebase products that you want to use -->
<script src="https://www.gstatic.com/firebasejs/7.15.0/firebase-auth.js"></script>
<script src="https://www.gstatic.com/firebasejs/7.15.0/firebase-firestore.js"></script>
<script src="https://www.gstatic.com/firebasejs/7.15.0/firebase-functions.js"></script>
<script src="https://www.gstatic.com/firebasejs/7.15.0/firebase-messaging.js"></script>
<script src="https://www.gstatic.com/firebasejs/7.15.0/firebase-storage.js"></script>
<script src="https://www.gstatic.com/firebasejs/7.15.0/firebase-performance.js"></script>
<script src="https://www.gstatic.com/firebasejs/7.15.0/firebase-database.js"></script>
<script src="https://www.gstatic.com/firebasejs/7.15.0/firebase-remote-config.js"></script>
<!--
Host the .html file on a server/VPS (don't try on localhost, sometimes DEVs allow localhost for their own servers) - If it works, that means there's no restriction and anyone can utilize the keys to query using the keys -- Open to corrections/improvements
-->
<script>
// Initialize Firebase
firebase.initializeApp({
apiKey: "",
authDomain: "",
databaseURL: "",
projectId: "",
storageBucket: "",
messagingSenderId: "",
appId: "",
measurementId: ""
});
console.log(firebase.analytics());
console.log(firebase.auth());
console.log(firebase.firestore());
console.log(firebase.functions());
console.log(firebase.messaging());
console.log(firebase.storage());
console.log(firebase.performance());
console.log(firebase.database());
console.log(firebase.remoteConfig());
console.log(firebase.app().name);
</script>
</body>
</html>
Copy link

ghost commented Aug 15, 2020

So this is for anonymous authentication . Right ??
This could be also checked with https://target.com/.json

@mmkhitaryan
Copy link

Why not add firebase-database?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment