Add docs for memcached_udp_version
parent
74ec9f00e7
commit
7733662767
|
@ -0,0 +1,65 @@
|
||||||
|
## Vulnerable Application
|
||||||
|
|
||||||
|
Any instance of memcached with the UDP listener enabled will suffice.
|
||||||
|
|
||||||
|
Instructions for testing against CentOS 7 and a Dockerized endpoint are provided below.
|
||||||
|
|
||||||
|
### CentOS 7
|
||||||
|
|
||||||
|
To a CentOS 7 instance, simply install and start memcached, as it listens on 0.0.0.0 by default'
|
||||||
|
|
||||||
|
```
|
||||||
|
yum -y install memcached
|
||||||
|
systemctl start memcached
|
||||||
|
```
|
||||||
|
|
||||||
|
### Docker Install
|
||||||
|
|
||||||
|
In memcached 1.5.5 and earlier, the daemon is affected by default. As such, we can use the
|
||||||
|
community supported memcached container and simply expose it:
|
||||||
|
|
||||||
|
```
|
||||||
|
docker run -ti --rm -p 11211:11211/udp memcached:1.5.5
|
||||||
|
```
|
||||||
|
|
||||||
|
## Verification Steps
|
||||||
|
|
||||||
|
|
||||||
|
1. Install the application
|
||||||
|
2. Start msfconsole
|
||||||
|
3. Do: `use auxiliary/scanner/memcached/memcached_udp_version`
|
||||||
|
4. Do: `set rhosts [IPs]`
|
||||||
|
5. Do: `run`
|
||||||
|
6. Confirm that the endpoint is discovered to be running memcached and the version is displayed
|
||||||
|
|
||||||
|
## Scenarios
|
||||||
|
|
||||||
|
### CentOS 7
|
||||||
|
|
||||||
|
Configure memcached as described above.
|
||||||
|
|
||||||
|
```
|
||||||
|
msf5 > use auxiliary/scanner/memcached/memcached_udp_version
|
||||||
|
msf5 auxiliary(scanner/memcached/memcached_udp_version) > set RHOSTS a.b.c.d
|
||||||
|
RHOSTS => a.b.c.d
|
||||||
|
msf5 auxiliary(scanner/memcached/memcached_udp_version) > run
|
||||||
|
|
||||||
|
[+] a.b.c.d:11211/udp memcached version 1.4.15
|
||||||
|
[*] Scanned 1 of 1 hosts (100% complete)
|
||||||
|
[*] Auxiliary module execution completed
|
||||||
|
```
|
||||||
|
|
||||||
|
### Docker
|
||||||
|
|
||||||
|
Configure memcached in docker as described above.
|
||||||
|
|
||||||
|
```
|
||||||
|
msf5 > use auxiliary/scanner/memcached/memcached_udp_version
|
||||||
|
msf5 auxiliary(scanner/memcached/memcached_udp_version) > set RHOSTS a.b.c.d
|
||||||
|
RHOSTS => a.b.c.d
|
||||||
|
msf5 auxiliary(scanner/memcached/memcached_udp_version) > run
|
||||||
|
|
||||||
|
[+] a.b.c.d:11211/udp memcached version 1.5.5
|
||||||
|
[*] Scanned 1 of 1 hosts (100% complete)
|
||||||
|
[*] Auxiliary module execution completed
|
||||||
|
```
|
Loading…
Reference in New Issue