corpus.blog
43,029 blogs · 5,458,805 posts Claim your blog
Record · corpus.blog/posts/01a08771-0fc8-7334-a782-41564a95b432

I’m Lovin’ It: Exploiting McDonald’s APIs to hijack deliveries and order food for a penny

eaton-works.com · published 19 December 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at eaton-works.com Wayback capture
1blogs citing
First cited
29 May 2025
Most recent
29 May 2025
Rank this month
not ranked
External links
29
Words captured
3,720

Cited by

Blog
In the post
Date
bitoff.org
The API Dispatch #3: The perfect API design workflow doesn't exi… Read at the source ↗
29 May 2025

Links from this post

Link
Host
https://www.reddit.com/r/netsec/comments/1hhsl88/im_lovin_it_exploiting_mcdonalds_apis_to_hijack/
reddit.com
https://news.ycombinator.com/item?id=42462354
news.ycombinator.com
https://techcrunch.com/2024/12/19/bugs-in-a-major-mcdonalds-india-delivery-system-exposed-sensitive-customer-data/
techcrunch.com
https://www.verdictfoodservice.com/news/security-flaws-mcdonalds-india/
verdictfoodservice.com
https://www.securityweek.com/in-other-news-mcdonalds-hacking-netflix-fine-malware-kills-ics-process/
securityweek.com
https://www.heise.de/news/l-f-Sicherheitsforscher-bestellt-bei-McDonald-s-fuer-1-Cent-10219043.html
heise.de
https://winfuture.de/news,147768.html
winfuture.de
https://www.techradar.com/pro/security/mcdonalds-delivery-customers-put-at-risk-by-possible-data-breach
techradar.com
https://www.youtube.com/watch?v=JA4Vii3tyUk
youtube.com
https://play.google.com/store/apps/details?id=com.il.mcdelivery
play.google.com
https://apps.apple.com/in/app/mcdelivery-india-west-south/id920750178
apps.apple.com
https://www.bbc.com/news/technology-39265282
bbc.com
https://angular.dev/
angular.dev
https://angular.io/guide/routing-overview
angular.io
https://owasp.org/API-Security/editions/2023/en/0xa1-broken-object-level-authorization/
owasp.org
https://play.google.com/store/apps/details?id=com.McDelivery.Agent
play.google.com
https://juspay.io/
juspay.io
https://juspay.io/in/docs/payment-page-enterprise/web/resources/generating-the-signature
juspay.io
https://owasp.org/API-Security/editions/2023/en/0xa3-broken-object-property-level-authorization/
owasp.org
https://youtu.be/1xBS7ejWePk?t=16
youtu.be
https://www.kpi.org/kpi-basics/
kpi.org
https://mcdelivery.co.in/bug-bounty
mcdelivery.co.in
https://www.hackerone.com/company-news/dear-mcdonalds-wheres-your-security
hackerone.com
https://finance.yahoo.com/news/billionaire-bill-gates-mcdonalds-gold-140011115.html
finance.yahoo.com
https://mcdindia.com/
mcdindia.com
https://www.mcdonaldsindia.com/home.html
mcdonaldsindia.com
https://x.com/mcdonaldsindia/status/843120819291262978
x.com
https://mcdelivery.co.in/
mcdelivery.co.in
https://oms.mcdelivery.co.in/
oms.mcdelivery.co.in
Elsewhere on eaton-works.com (2)