# Exploitation

> Extract cache data and session tokens from unauthenticated Memcached

- **URL:** https://hackindex.io/services/memcached/exploitation
- **Service:** [Memcached](https://hackindex.io/services/memcached.md)
- **Published:** 2026-03-17
- **Updated:** 2026-03-29

Memcached exploitation leverages the service's lack of built-in security for direct impact. Primary techniques include reading and writing cached data without authentication, poisoning cache entries to manipulate application behavior, and using exposed instances for UDP amplification attacks.

The subpages cover practical exploitation methods, from cache manipulation that affects the application layer to abusing Memcached as a reflection vector.

## Guides

- [Memcached Session Token Extraction](https://hackindex.io/services/memcached/exploitation/memcached-session-token-extraction.md)
- [Memcached Unauthenticated Cache Read](https://hackindex.io/services/memcached/exploitation/memcached-unauthenticated-cache-read.md)