Add docs for memcached_udp_version

GSoC/Meterpreter_Web_Console
Jon Hart 2018-03-06 18:12:40 -08:00
parent 74ec9f00e7
commit 7733662767
No known key found for this signature in database
GPG Key ID: 2FA9F0A3AFA8E9D3
1 changed files with 65 additions and 0 deletions

View File

@ -0,0 +1,65 @@
## Vulnerable Application
Any instance of memcached with the UDP listener enabled will suffice.
Instructions for testing against CentOS 7 and a Dockerized endpoint are provided below.
### CentOS 7
To a CentOS 7 instance, simply install and start memcached, as it listens on 0.0.0.0 by default'
```
yum -y install memcached
systemctl start memcached
```
### Docker Install
In memcached 1.5.5 and earlier, the daemon is affected by default. As such, we can use the
community supported memcached container and simply expose it:
```
docker run -ti --rm -p 11211:11211/udp memcached:1.5.5
```
## Verification Steps
1. Install the application
2. Start msfconsole
3. Do: `use auxiliary/scanner/memcached/memcached_udp_version`
4. Do: `set rhosts [IPs]`
5. Do: `run`
6. Confirm that the endpoint is discovered to be running memcached and the version is displayed
## Scenarios
### CentOS 7
Configure memcached as described above.
```
msf5 > use auxiliary/scanner/memcached/memcached_udp_version
msf5 auxiliary(scanner/memcached/memcached_udp_version) > set RHOSTS a.b.c.d
RHOSTS => a.b.c.d
msf5 auxiliary(scanner/memcached/memcached_udp_version) > run
[+] a.b.c.d:11211/udp memcached version 1.4.15
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
```
### Docker
Configure memcached in docker as described above.
```
msf5 > use auxiliary/scanner/memcached/memcached_udp_version
msf5 auxiliary(scanner/memcached/memcached_udp_version) > set RHOSTS a.b.c.d
RHOSTS => a.b.c.d
msf5 auxiliary(scanner/memcached/memcached_udp_version) > run
[+] a.b.c.d:11211/udp memcached version 1.5.5
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
```