# Firebase Cloud Messaging

пример [https://abss.me/posts/fcm-takeover/](https://abss.me/posts/fcm-takeover/)

Проверить можно следующим запросом

```
curl --header "Authorization: key=AIzaSyC_FYCYPumH7bmoJS2N4kUccBNBb8O3sxc" --header Content-Type:"application/json" https://fcm.googleapis.com/fcm/send -d "{\"registration_ids\":[\"ABC\"]}"
```

Если вернет 200 -> vuln
