HarshavardhanVemali/firebase-pentest-kit
Firebase Pentesting Toolkit: Extract session tokens, dump misconfigured Firestore collections, and exploit Missing Authorization (BOLA) flaws. Includes a full 6-vulnerability case study.
🎯 Vulnerability: Insecure Direct Object Reference (IDOR)
💡 Defense Fix: Enforce object-level access control checks (ABAC/RBAC) on the server side for every API request.