aeerso / mcfux

PoC for abusing McDonald's deals system
GNU General Public License v3.0
19 stars 0 forks source link
mcdonalds plexure poc

McFux

PoC for abusing McDonald's deals system

Exploiting the fact that any account doesn't require any email confermation and using fuzzed device/account infos, making two requests (one for registering the account and the other one to reedem the code) gets unlimited coupons.

24/08/2019 Update: McD updated their backend, so this PoC is no longer working.

Requirements

Usage

Run via python3 mcfux.py

It opens a webserver on 127.0.0.1:8081 where you can get a coupon code (15916) as proof of the generation.

TODO

Future development

An updated version of this PoC will be done eventually.

Legal stuff

Is a PoC not inteded to harm/be used in any circumstances other than testing. I take no responsibilities for any usage of this code. It was fun to make, that's it.