Description

WINRATE_MC is a professional security testing framework designed for arcade machines and gaming systems. It provides comprehensive vulnerability assessment and security analysis capabilities for IoT-enabled entertainment devices commonly found in shopping malls, arcades, and entertainment centers.

The tool helps security researchers and penetration testers identify security weaknesses in modern arcade systems, including claw machines, coin pushers, shooting games, slot machines, and various other IoT gaming devices.

Features

Discovery Engine Multi-layer device detection (ARP, ICMP, NMAP)

MAC OUI fingerprinting (20+ vendors)

Service port scanning (HTTP, MQTT, WebSocket, RTSP)

Web fingerprinting and title analysis

IoT device classification

Exploitation Vectors Web interface analysis (admin panels, configuration pages)

API endpoint discovery and testing

Default credential testing (60+ combinations)

MQTT broker enumeration and command injection

WebSocket communication analysis

Configuration file discovery

Command injection testing

File upload vulnerability assessment

Session hijacking attempts

Hardware interface detection (UART, JTAG)

Control Methods API-based command injection

MQTT topic publishing

WebSocket message injection

Configuration file manipulation

Multiple fallback mechanisms

Performance Parallel scanning (50 threads)

Optimized timeout values

Asynchronous request handling

Quick fingerprinting algorithms