Threat Level: green Handler on Duty: Richard Porter

SANS ISC: Detecting the memcached issue - SANS Internet Storm Center SANS ISC InfoSec Forums

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Detecting the memcached issue
Trying to detect the memcached issue in our internal environment.

Downloaded the NMAP script here:

Here is the command I am using with NMAP
nmap [RANGE] --privileged -Pn -sU -p U:11211 --min-parallelism 100 --script /usr/share/nmap/scripts/memcached-info.nse -oX [FILENAME]

Should give you a pretty could script to dump the discovered systems to an XML file that you can target for remediation efforts.

If anyone can suggest a better way please let me know.

3 Posts

Sign Up for Free or Log In to start participating in the conversation!