medusa

A modular and parallel login brute-forcer for a variety of protocols. More information: <https://manned.org/medusa>.

Install

All systems
curl cmd.cat/medusa.sh
Debian Debian
apt-get install medusa
Ubuntu
apt-get install medusa
Arch Arch Linux
pacman -S medusa
image/svg+xml Kali Linux
apt-get install medusa
Fedora
dnf install medusa
Windows (WSL2)
sudo apt-get update sudo apt-get install medusa
Raspbian
apt-get install medusa
Dockerfile
dockerfile.run/medusa

A modular and parallel login brute-forcer for a variety of protocols. More information: <https://manned.org/medusa>.

  • Execute brute force against an FTP server using a file containing usernames and a file containing passwords:
    medusa -M ftp -h host -U path/to/username_file -P path/to/password_file
  • Execute a login attempt against an HTTP server using the username, password and user-agent specified:
    medusa -M HTTP -h host -u username -p password -m USER-AGENT:"Agent"
  • Execute a brute force against a MySQL server using a file containing usernames and a hash:
    medusa -M mysql -h host -U path/to/username_file -p hash -m PASS:HASH
  • Execute a brute force against a list of SMB servers using a username and a pwdump file:
    medusa -M smbnt -H path/to/hosts_file -C path/to/pwdump_file -u username -m PASS:HASH

© tl;dr; authors and contributors