Medusa
Medusa - Brute Forcing Techniques
Medusa is one of the better multipurpose cracker tools available with Kali Linux.
It supports many different modes of authentication and also allows you to define
your own plugins should you encounter anything it doesn’t inherently support.
You can invoke medusa by using the following command line:
medusa [-h host | -H file] [-u username | -U file ] [-p password | -P
file] [-C file ] –M MODULE [OPTIONS]
Medusa supports a number of modules. You can find out which modules your
version supports by executing the following command:
$ medusa –d
The previous command will produce a list of the supported modules. If you’d like to
use one of them, you can specify the name of the module using the –M switch, as in
the preceding usage specification. Here’s an example, targeting the SSH service on
192.168.10.1050
$ medusa –h 192.168.10.100 –u steve –P /usr/share/wordlists/rockyou.
txt –M ssh
The previous command will produce the following output:
Similarly, you could target other services, as shown in the following commands:
$ medusa –h 192.168.10.105 –u k3170makan –P /usr/share/wordlists/rockyou.
txt –M ftp
$ medusa –h 192.168.10.105 –u k3170makan –P /usr/share/wordlists/rockyou.
txt –M http
$ medusa –h 192.168.10.105 –u k3170makan –P /usr/share/wordlists/rockyou.
txt –M web-form