Memcached Injections: They Exist and They Work
summary
The talk examines injection vulnerabilities in the Memcached ecosystem: real bugs in client wrappers/drivers for languages including Ruby, Python, Java, PHP, Lua and .NET (with Go shown safe) that let attackers tamper with in-memory data and sometimes achieve remote code execution. It presents concrete examples of the flawed wrappers and shows how to fix these vulnerabilities in application code, and also discusses safer key-based storage practices such as namespaces and hashing.
AI-written summary · about
chapters (4)
related talks
49mThe New Page of Injections Book: Memcached Injections
44mCache Me If You Can: Messing with Web Caching
54mTaking on the King: Killing Injection Vulnerabilities
44mEnding Injection Vulnerabilities
01h 00mIntroduction to memory exploitation
38mInjections - 4 Ways of Penetration
35mInside a hacker’s mind
49mProcess Injection Techniques - Gotta Catch Them All