Skip to main content

Medusa: A Speedy, Parallel And Modular Login Brute-forcing Tool


About Medusa
   Medusa is a speedy, parallel, and modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible. The author considers following items as some of the key features of this application:

   Thread-based parallel testing. Brute-force testing can be performed against multiple hosts, users or passwords concurrently.

   Flexible user input. Target information (host/user/password) can be specified in a variety of ways. For example, each item can be either a single entry or a file containing multiple entries. Additionally, a combination file format allows the user to refine their target listing.

   Modular design. Each service module exists as an independent .mod file. This means that no modifications are necessary to the core application in order to extend the supported list of services for brute-forcing.

   Multiple protocols supported. Many services are currently supported (e.g. SMB, HTTP, MS-SQL, POP3, RDP, SSHv2, among others).

   See doc/medusa.html for Medusa documentation. For additional information:

Building on macOS

#getting the source
git clone https://github.com/jmk-foofus/medusa
cd medusa

#macOS dependencies
brew install freerdp
$ export FREERDP2_CFLAGS='-I/usr/local/include'
$ export FREERDP2_LIBS='-I/usr/local/lib/freerdp'

#building
./configure
make

#executing

./src/medusa
Medusa's Installation
   Medusa is already installed on Kali Linux, Parrot Security OS, BlackArch and any other Linux distros based for security pentesting purposes.

   For Debian-based distro users, open your Terminal and enter this command:
sudo apt install medusa

   For Arch Linux-based distro users, enter this command: sudo pacman -S medusa

About the author:

You might like these similar tools:

Read more


Comments

Popular posts from this blog

The Dawn of a Global Bitcoin Gold Rush: Why Governments May Soon Join the Race

Picture a world where governments, not just early adopters and tech enthusiasts, scramble to hold Bitcoin before their geopolitical rivals do. This scenario, once considered science fiction, is becoming increasingly plausible. As major asset managers hint at portfolio exposure, U.S. political leaders signal a shift toward pro-crypto regulation, and states within the U.S. prepare strategic Bitcoin reserves, the stage is set for a massive influx of institutional and governmental participation. Far from the fleeting hype cycles of the past, this is a moment backed by data, historical patterns, and powerful players with trillions of dollars at their disposal. In 2020, Bitcoin's meteoric rise coincided with a similar point in its four-year halving cycle. Fast forward to 2024: conditions now are even more favorable, with unprecedented scarcity in the market and global interests aligning to accelerate adoption. The impatience seen in some corners of the crypto community, worried that Bitc...

When Berachain Meets AI: 9 Projects Riding the Next Big Wave

Artificial Intelligence (AI) and blockchain are arguably two of the hottest narratives in tech today. With Berachain's mainnet launch just around the corner, combining AI with this innovative blockchain opens up exciting possibilities. In this article, we'll dive into nine AI-driven projects on Berachain, each offering unique use cases and solutions. Baosdotfun 1. Baosdotfun: The Launchpad for AI DAOs Baosdotfun acts as an incubator for AI-driven DAOs, focusing on areas like yield farming and trading strategies. Their "DAO seasons" introduce new AI agents every few months, providing fresh opportunities for users. Key features: Supports multiple AI agents. Focus on decentralized autonomous organizations (DAOs). Official Links: Baosdotfun Website Baosdotfun on Twitter Beradigm 2. Beradigm: Maximizing BGT Farming Beradigm specializes in yield farming to accumulate BGT, a governance token central to Berachain's ecosystem. Using AI, Beradigm optimizes farming strategie...

7 Expert Tips to Dodge the Deadly Crypto Trading Pitfalls

Have you ever experienced that rush when your crypto portfolio hits an all-time high — only to see those gains vanish as quickly as they appeared? In the volatile world of cryptocurrency, it's easy to be seduced by the numbers on the screen. But those dazzling gains can be nothing more than illusions if not managed properly. This article explores the psychological traps and common mistakes many traders fall into, offering seven essential tips to help you safeguard your capital and trade smarter. The Euphoria That Sets You Up for Failure Imagine this: your portfolio is ablaze with green, your ATH (All-Time High) shimmers on the screen, and you feel unstoppable. The temptation to capture that moment and share it with friends is overwhelming. However, what you see isn't liquid cash . Once you factor in trading fees, commissions, and taxes, those soaring numbers shrink dramatically. This false sense of security often leads traders to: Overestimate their gains: Believing that digit...