Password Attacks
Medusa is a speedy, parallel, and modular login brute-forcer. It supports many protocols including HTTP, FTP, SSH, SMB, MySQL, and more.
sudo apt install medusa
medusa -h <host> -u <user> -P <wordlist> -M <module>
Medusa is a speedy, parallel, and modular login brute-forcer. It supports over 20 network protocols through its modular architecture, allowing it to test authentication on SSH, FTP, HTTP, SMB, MySQL, PostgreSQL, and many more services.
Created in 2001 by Foofus, Medusa's key advantage is its multi-host scanning capability. Unlike single-target tools, Medusa can brute-force credentials across multiple hosts simultaneously, making it ideal for network-wide credential auditing.
Medusa's modular design makes it easy to add support for new protocols. It includes resume functionality for interrupted sessions and can operate in non-intrusive mode for testing without triggering lockouts.
medusa -dDump the list of all installed/available authentication modulesmedusa -M ssh -qShow module-specific usage and options for the ssh modulemedusa -h 10.10.10.10 -u <USER> -p <PASS> -M sshTest a single username/password pair against SSH on one hostmedusa -h 10.10.10.10 -u <USER> -P /path/to/file -M sshTry a password list against one fixed username over SSHmedusa -h 10.10.10.10 -U target.txt -P /path/to/file -M sshTest every username and password combination from two filesmedusa -H target.txt -u <USER> -P /path/to/file -M sshAttack multiple hosts read from a file with one usernamemedusa -h 10.10.10.10 -C combo.txt -M sshUse a combo file of host:user:password entriesmedusa -h 10.10.10.10 -u <USER> -P /path/to/file -M ssh -e nsAlso test a null password and password equal to the usernamemedusa -h 10.10.10.10 -u <USER> -P /path/to/file -M ftp -fStop scanning a host after the first valid credential is foundmedusa -H target.txt -U target.txt -P /path/to/file -M ssh -FStop the whole audit after the first success on any hostmedusa -h 10.10.10.10 -u <USER> -P /path/to/file -M ssh -t 4Run 4 concurrent login attempts per hostmedusa -H target.txt -U target.txt -P /path/to/file -M ssh -T 5Test 5 hosts concurrentlymedusa -h 10.10.10.10 -U target.txt -P /path/to/file -M ssh -LParallelize using one username per thread instead of finishing each user firstmedusa -h 10.10.10.10 -u <USER> -P /path/to/file -M ftp -n 2121Target a service on a non-default TCP portmedusa -h 10.10.10.10 -u <USER> -P /path/to/file -M ftp -sEnable SSL for the connectionBrute-force credentials across multiple hosts simultaneously for network-wide auditing.
Test SSH and FTP services across entire server fleets for weak passwords.
Audit MySQL, PostgreSQL, and MSSQL database credentials across multiple servers.
Test SMB authentication across Windows networks for default or weak credentials.
Comprehensive credential testing across all network services in large environments.
Password Attacks
Faster single-target brute-forcer with more protocols and HTTP form support.
Information Gathering
Network scanner for discovering login services before brute-forcing them.
Password Attacks
Offline password cracker for hashes extracted from compromised systems.
Password Attacks
GPU-accelerated offline cracker for large hash sets discovered during Medusa scans.
Information Gathering
Network scanner for discovering additional services beyond Medusa's initial targets.
The interface lists each authentication attempt, clearly marking valid combinations with a noticeable tag.
This tool is designed for authorized security testing, educational purposes, and legitimate network administration only. Unauthorized access to computer systems is illegal.