This repository contains useful scripts and commands for evaluating SDRaD

To measure the restart time of a Dockerized Memcached, use the following commands:

docker run  -d --restart unless-stopped  -p 11211:11211 memcached

docker system events --filter 'event=start' --filter 'event=die' | cut -d : -f 3

To monitor the Resident Set Size (RSS) used by Memcached, execute:

/usr/bin/time -v memcached ...

Maximum resident set size (kbytes)

• CVE-2011-4971 can be reproducible using this script

This example demonstrates how to store and retrieve a simple value.

telnet 127.0.0.1 11211
set test 0 100 5
sdrob
get test

• CVE-2009-2629

  • PoC-implementation can be found this script, originally sourced from this external repository

• CVE-2022-3786

  • PoC-implementation can be found here
  • generate the key and malicious cert ./client/gen.sh
  • run the ./client/run_client.sh