Medusa
Parallel login brute forcer with a module per service.
Network authentication brute forcer, hydra's sibling and built on the same idea: one module per protocol (`ssh`, `ftp`, `smbnt`, `http`, `mysql`, `vnc`, `rdp`) and aggressive parallelism. It differs in that threads and targets are controlled separately (`-t` per host, `-T` hosts at a time), which makes it comfortable for spraying one password across many machines. Mind the lockout policies: in a real domain a high `-t` against a service with lockout leaves accounts locked and the engagement exposed.
Family Cracking & wordlists
Flags -h -U -P -M -t -f
Concepts Targeted password bruteforce (cewl, custom wordlists), Brute Force, Password Spraying
Cheatsheet Login brute forcing (online)
Installation
sudo apt install -y medusaUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- PayDayProving Grounds Practice