OpenAI API + Firebase :) Enjoy

[y2k4c3]

OPENAI API + FIREBASE ) Thanks to stupid devs that hardcode in their code ))

Firebase Offline Token Gen data:
CLIENT_ID: 568928957521-m57oil8lfnf2qlq6jnq4blp1ljcq4bc8.apps.googleusercontent.com
REVERSED_CLIENT_ID: com.googleusercontent.apps.568928957521-m57oil8lfnf2qlq6jnq4blp1ljcq4bc8
API_KEY: AIzaSyCm99fk0vDQlgXMgTM9fzlqXiQWHpdOMKA
GCM_SENDER_ID: 568928957521
BUNDLE_ID: com.pb.chatgptmac
PROJECT_ID: aichat-4fb19
STORAGE_BUCKET: aichat-4fb19.appspot.com -> )))
GOOGLE_APP_ID: 1:568928957521:ios:14ccbf85a464137f73f470


Use any Python, GO or whatever you know with Firebase to generate a token based on that info above.
Than POST to the us-central1-chatbot-e10c8.cloudfunctions.net/chatbot JSON Format as bellow POST Data example:

POST /chatbot HTTP/2
Host: us-central1-chatbot-e10c8.cloudfunctions.net
Accept: */*
Content-Type: application/json
Accept-Encoding: gzip, deflate
User-Agent: Chat%20Bot/3.2
Content-Length: 51
Accept-Language: en-US,en;q=0.9

{"token":"XXXXXXXXXXXXXXXX","prompt":"Your Message "}


Have fun Keep it posted

 

[lildvrkie]

What does this do

 

[y2k4c3]

What does this do

You can use the OpenaAI API of others for your own purpose. The one above was obtained from an app that is using the Firebase auth tokens (or this is what the developers was thought that they were doing). You must use the Firebase info above and code them into a token generator and than POST your message + generated Firebase token to the server they own.

 

[omerta]

How do you scan for those? Shodan? CIP?

 

[lildvrkie]

You can use the OpenaAI API of others for your own purpose. The one above was obtained from an app that is using the Firebase auth tokens (or this is what the developers was thought that they were doing). You must use the Firebase info above and code them into a token generator and than POST your message + generated Firebase token to the server they own.

Ok but why lol

 

[y2k4c3]

How do you scan for those? Shodan? CIP?

reverse apps that use this service

 

[y2k4c3]

Ok but why lol

easy. code a simple app for android or ios using that gain revenue without paying to openai

 

[astralded]

smart! Just need to hope the programmers did not close the backdoor

 

[astralded]

I wonder

Accept-Language: en-US,en;q=0.9

{"token":"XXXXXXXXXXXXXXXX","prompt":"Your Message "}

how can you track different conversations.

 

[y2k4c3]

I wonder

how can you track different conversation

Idk if the request and reply will be logged under the firebase or aws...but for sure it can be done easy.