Medusa

Parallel, modular online brute-forcer.

KaliParrothigh

pkg: medusa

Medusa is a speedy, modular login brute-forcer supporting many services, designed for massively parallel testing.

Syntax

medusa -h {host} -u {user} -P {wordlist} -M {module}

Example

medusa -h 10.0.0.5 -u admin -P rockyou.txt -M ssh

Brute-forces SSH for admin using the rockyou list via the ssh module.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

`-h` <10.0.0.5>	Single target host.
`-H` <hosts.txt>	File of target hosts.
`-u` <admin>	Single username.
`-U` <users.txt>	Username list file.
`-p` <Password1>	Single password.
`-P` <rockyou.txt>	Password list file.
`-M` <ssh>	Module to use (ssh, ftp, smbnt, http, …).
`-t` <4>	Parallel logins per host.
`-f`	Stop after first valid credential.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

Usage examples

medusa -h 10.0.0.5 -u admin -P rockyou.txt -M ssh

Brute-force SSH for admin.

medusa -H hosts.txt -U users.txt -P pass.txt -M smbnt -f

Spray SMB creds across many hosts, stop on first hit.

Advantages

Highly parallel
Modular protocol support
Stable for large jobs

Disadvantages

Loud; triggers lockouts
Fewer modules than Hydra
Detectable

Tags

#brute-force#online

Official docs: Medusa ↗

Related commands

Hydra

Fast online brute-force for many protocols.

Ncrack

High-speed network authentication cracker (Nmap project).

Frequently asked questions

What is Medusa used for?

Medusa is a speedy, modular login brute-forcer supporting many services, designed for massively parallel testing.

What is an example Medusa command?

A common example is: medusa -h 10.0.0.5 -u admin -P rockyou.txt -M ssh — Brute-forces SSH for admin using the rockyou list via the ssh module.

Is Medusa part of Kali Linux?

Yes. Medusa ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install medusa.

What category of security tool is Medusa?

Medusa is a Password Attacks tool with a high-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →