Medusa

Medusa is intended to be a speedy, massively parallel, modular login brute-forcer. The goal is to support as many services which allow remote authentication as possible. Key features include thread-based parallel testing, flexible user input for targets, and a modular design where each service module is an independent .mod file, allowing easy extension without core modifications.

Use cases involve auditing network login services by attempting brute-force attacks on multiple hosts, usernames, or passwords simultaneously. Target information can be specified flexibly as single entries or files, including combination files for refined listings.

It is also referred to as a Parallel Network Login Auditor, making it suitable for security testing of remote authentication mechanisms across various protocols.

Medusa uses thread-based parallel testing to brute-force logins concurrently against multiple hosts, users, or passwords. It employs a modular design with independent .mod files for each service, enabling support for diverse remote authentication protocols. Flexible input methods allow single values or files for hosts (-h/-H), usernames (-u/-U), passwords (-p/-P), or combo files (-C), with logging to files via -O.