Mcafee coffee can obtain the license key of all enterprise users through brute force cracking to the enterprise authorization number

Mcafee coffee can obtain the license key of all enterprise users through brute force cracking to the enterprise authorization number

In.

Log on to the console and log on with an authorization number 2003199-NAI that complies with the rules. An error is prompted.

Use burp suite for brute-force cracking. Here I select the authorization number range from 400-nai to 8009999-NAI. After analysis, I can get the formal authorization numbers in batches, and then I will submit and download the genuine enterprise software.
 

 

 

As a result, the obvious problems have hurt the interests of many enterprise users, and I have downloaded some security software on my own. mcafee's security tools are still doing very well.


 

Solution:

Strengthen the authentication mechanism and improve design defects