security enabled verified medium v1.0.0

medusa

Parallel network login auditor for brute-forcing authentication across multiple protocols and services.

📋 Live Preview

medusa -h {target} -u {username} -P {password-list} -M {module}

🌍 target → 🌍 username → admin 🌍 password-list → 🌍 module → ssh

medusa -h {target} -u {username} -P {password-list} -M {module}

Sandbox: execFile · Timeout: 3600s

Capabilities

security.crack.password

security.auth.bruteforce

network.auth.test

Parameters

Name	Type	Required	Default	Description	Aliases
`flag-h`	string	No	-	Target hostname or IP address	`-h`, `--host`
`flag-H`	string	No	-	File with list of target hosts	`-H`, `--host-list`
`flag-u`	string	No	-	Single username to test	`-u`, `--username`
`flag-U`	string	No	-	File with list of usernames	`-U`, `--username-list`
`flag-p`	string	No	-	Single password to test	`-p`, `--password`
`flag-P`	string	No	-	File with list of passwords	`-P`, `--password-list`
`flag-M`	string	No	-	Service module to use (e.g. ssh, ftp, smbnt)	`-M`, `--module`
`flag-m`	string	No	-	Module-specific parameter	`-m`, `--module-parameter`
`flag-t`	integer	No	-	Number of parallel threads (default 5)	`-t`, `--threads`
`flag-f`	boolean	No	-	Stop after first valid credential found	`-f`, `--stop-after-first`
`flag-F`	boolean	No	-	Stop all hosts after first credential	`-F`, `--stop-all-first`
`flag-O`	string	No	-	Output file for results	`-O`, `--output`
`flag-e`	string	No	-	Extra checks (n=null, s=same-as-login)	`-e`, `--extra`
`flag-s`	integer	No	-	Target port number	`-s`, `--port`
`flag-r`	integer	No	-	Number of retries on failure	`-r`, `--retry`
`flag-R`	integer	No	-	Retry period in seconds	`-R`, `--retry-period`
`flag-c`	integer	No	-	Timeout in seconds	`-c`, `--timeout`
`flag-q`	boolean	No	-	Quiet mode (suppress banner)	`-q`, `--quiet`
`flag-v`	integer	No	-	Verbose level (1-6)	`-v`, `--verbose`
`flag-d`	boolean	No	-	Debug mode	`-d`, `--debug`
`C`	boolean	No	-	File containing colon-separated "user:pass" combos	`-C`
`W`	boolean	No	-	Fail wait time in seconds	`-W`
`Z`	boolean	No	-	Number of seconds to wait between retries	`-Z`
`b`	boolean	No	-	Suppress startup banner	`-b`
`c`	boolean	No	-	Connection timeout in seconds	`-c`
`d`	boolean	No	-	Dump all received data to display	`-d`
`g`	boolean	No	-	Group number for connection throttling	`-g`
`n`	boolean	No	-	Use numeric UID/GUID for display	`-n`
`w`	boolean	No	-	Error wait time in seconds	`-w`
`z`	boolean	No	-	Number of seconds to wait between connections	`-z`

Artifacts

Type	Description	MIME	Schema	Trust
`security.crack.results`	Brute-force results log	text/plain	-	verified

Contract

Inputs

network.target.ip

Target IP address or hostname

security.username.list

File containing usernames

security.password.list

File containing passwords

Outputs

security.valid.credentials

Successfully discovered credentials

Side effects: network_trafficfilesystem_write

Workflow Edges

Produces

security.valid.credentials

Consumes

network.target.ipsecurity.username.listsecurity.password.list

Resource Profile

Resource	Value
CPU	medium
Memory	128 MB
Network	high
Disk I/O	low

Examples

Brute-force SSH with password list

medusa -h 192.168.1.100 -u root -P passwords.txt -M ssh

Brute-force FTP with username list

medusa -h 192.168.1.100 -U users.txt -P passwords.txt -M ftp

Multiple hosts from file with verbose output

medusa -H targets.txt -U users.txt -P passwords.txt -M smbnt -v 4

HTTP form-based authentication

medusa -h 192.168.1.100 -U users.txt -P passwords.txt -M web-form -m FORM:"/login.php" -m DENY-SIGNAL:"Login failed"

Stop on first credential found

medusa -h 192.168.1.100 -u admin -P passwords.txt -M ssh -f

Extra checks for null and same-as-login

medusa -h 192.168.1.100 -u admin -P passwords.txt -M ssh -e ns

Save results to file

medusa -h 192.168.1.100 -u admin -P passwords.txt -M ssh -O results.txt

Custom port and timeout

medusa -h 192.168.1.100 -u admin -P passwords.txt -M mysql -s 3307 -c 10

Documentation

Medusa — Parallel Network Login Auditor

Medusa is a massively parallel network login auditor designed to brute-force authentication credentials across numerous services. Its modular architecture supports pluggable protocol modules for extensibility.

Supported Modules

Module	Service	Default Port
`ssh`	SSH	22
`ftp`	FTP	21
`smbnt`	SMB/NTLM	445
`web-form`	HTTP Form	80/443
`mysql`	MySQL	3306
`pop3`	POP3	110
`imap`	IMAP	143
`vnc`	VNC	5900

Threading Model

-t controls threads per host (default 5)
Medusa parallelizes across hosts when using -H
More threads increase speed but may trigger rate limiting

Module Parameters

Use -m to pass module-specific options:

medusa -h target -U users -P pass -M web-form -m FORM:"/login.php" -m DENY-SIGNAL:"Invalid"
Use -m multiple times for multiple parameters

Related Tools

hydrancrack