memcached-stats: Memcached stats disclosure

2025-08-01 memcached PoC Public

Description

Memcached stats is used to return server statistics such as PID, version, connections, etc.

PoC

id: memcached-stats

info:
  name: Memcached stats disclosure
  author: pdteam
  severity: low
  description: |
    Memcached stats is used to return server statistics such as PID, version, connections, etc.
  metadata:
    max-request: 1
  tags: network,memcached,misconfig,tcp,vuln

tcp:
  - inputs:
      - data: "stats\r\n\r\nquit\r\n"

    host:
      - "{{Hostname}}"
    port: 11211
    read-size: 2048

    matchers:
      - type: word
        words:
          - "STAT "
# digest: 490a00463044022062c4d64b03be5a4ea177f6aecbc031c3b22f47ef7d4dfedd05b95042df3b964c022072581f0df86a9b80679ec8e7bc9b6b971922f60e7594a3f4635a090f395a95e1:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/network/misconfig/memcached-stats.yaml

References

Related Vulnerabilities