[FTP|SQL|Cache] Injections

This document discusses techniques for infecting websites through cache injection attacks. It describes how an attacker can compromise a website by injecting an iframe or JavaScript that redirects visitors to a controlled webpage. It provides examples using Memcached, an unauthenticated caching system, to overwrite cache values with malicious content like iFrames linking to infection kits. The document demonstrates password sniffing and manipulating cached price data as potential attacks. It notes that while no public infections using these techniques have been seen, caching systems like Memcached that listen publicly pose an attractive target for attackers.