5. Medusa
Description:
Medusa is a brute-force, parallel login cracker that is designed to be fast, modular, and easy to use. It supports a wide range of protocols, such as HTTP, FTP, SSH, SMB, and more.
Examples:
- Basic SSH Brute Force Attack:
- medusa -h 192.168.1.10 -u root -P /usr/share/wordlists/rockyou.txt -M ssh
- Basic SSH Brute Force Attack:
Explanation: Attempts to brute-force SSH on the target host (192.168.1.10) with the username root and the password list rockyou.txt.
- FTP Login Attack:
- medusa -h 192.168.1.10 -U users.txt -P passwords.txt -M ftp
- FTP Login Attack:
Explanation: Brute-forces FTP login using a list of usernames (users.txt) and passwords (passwords.txt) on the target.
- SMTP Login Attack:
- medusa -h 192.168.1.10 -U users.txt -P passwords.txt -M smtp
- SMTP Login Attack:
Explanation: Uses Medusa to brute-force SMTP login on the target IP, using the usernames and passwords provided.