Скачать или смотреть How Hackers Broke McHire with ‘123456’… 64M Records Exposed

McHire hack 2025, McDonald’s data breach, default password 123456, IDOR
vulnerability in this step-by-step demo, David Bombal shows how security researchers ripped open McHire, the Paradox.ai chatbot that 90% of U.S. McDonald’s franchises use to hire staff. You’ll see:
• How a forgotten test admin panel still accepted username 123456 / password 123456.
• How a single parameter-tampering attack (IDOR) exposed 64 million+ applicant chat logs; names, emails, addresses, even session tokens.
• Rapid response timeline (report 30 June 2025, patch the same day).
• Practical mitigation tips: kill default creds, add auth checks, run continuous bug-bounty tests.

Plus, David jumps into a PortSwigger Academy IDOR lab so you can practice
the exact exploit techniques, safely. Whether you’re a developer, red-teamer, hit play and level-up your web-app defense skills.

// PortSwigger Lab REFERENCE //
https://portswigger.net/web-security/...

// PortSwigger Burp Suite REFERENCE //
https://portswigger.net/burp/communit...

// YouTube Video REFERENCE //
Burp Suite Proxy Browser and App Interception:    • Burpsuite proxy browser and App Interception  
Hackers remotely hack millions of cars:    • Hackers remotely hack millions of cars!  
Your Privacy and security nightmare:    • Your Privacy and Security Nightmare: Hacke...  

// David's SOCIAL //
Discord:   / discord  
X:   / davidbombal  
Instagram:   / davidbombal  
LinkedIn:   / davidbombal  
Facebook:   / davidbombal.co  
TikTok:   / davidbombal  
YouTube:    / @davidbombal  
Spotify: https://open.spotify.com/show/3f6k6gE...
SoundCloud:   / davidbombal  
Apple Podcast: https://podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: [email protected]

// MENU //
0:00 - McDonald's gets hacked! // Weak passwords and IDOR
01:17 - How McDonald's was hacked
03:20 - IDOR demo on PortSwigger
06:20 - IDOR explained
07:01 - Resources on PortSwigger // Download Burp Suite
07:28 - Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#breach #mcdonalds #cybersecurity