Memcache是大型网站用来提高网站访问速度的有效手段,但现在针对memcache安全性的研究分析还基本上没有。本文提出了一种针对memcache的内存注入攻击方法。实验结果表明在特定条件下,通过memcache内存注入,能直接获取和修改计算机中原有保存的内存数据,直接威胁到主机安全,是一个潜在的巨大威胁。 Memcache is an effective way for large websites to speed up website visits, but there is basically no research on the security of memcache. This article presents a memcache memory injection attack method. The experimental results show that under certain conditions, memcache memory injection can directly acquire and modify the original stored data in the computer, which directly threatens the host security. This is a potentially huge threat.