FireScan

Security testing tool for Firebase applications.

go install github.com/JacobDavidAlcock/firescan/cmd/firescan@latest

firescan
firescan > set projectID my-app
firescan > set apiKey AIza...
firescan > auth --create-account
firescan > scan --all

Firebase Security Scanner Features

• Scans Realtime Database, Firestore, Cloud Storage, and Cloud Functions
• Tests Firebase security rules and permissions
• Read-only mode by default (safe for production testing)
• Automatic JWT token management
• Built-in wordlists (200+ common Firebase paths)
• JSON output for automation and CI/CD integration

Getting started

• Introduction - What FireScan does
• Installation - Install FireScan
• Quick Start - Run your first scan

Documentation

• Safety Modes - Probe/test/audit modes
• Scan Types - Available scan types
• API Reference - Command documentation
• Examples - Common workflows

Authorization required

Only use FireScan on applications you own or have explicit permission to test.

View on GitHub