Password Attacks
Medusa
Parallel, modular online credential brute-forcing tool.
Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.
When
Alternative to Hydra for multi-threaded service auth testing.
How
Select module; hosts/users/passes; tune threads.
Why
Another solid option in the online attack toolkit.
Commands & usage
medusa -h 192.168.1.10 -u admin -P passes.txt -M ssh
medusa -H hosts.txt -U users.txt -P passes.txt -M ftp
Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.
Comparisons
Tags
Related in Password Attacks
Hashcat
GPU-accelerated password recovery tool supporting hundreds of hash types.
John the Ripper
CPU-focused password cracker with jumbo community builds.
Hydra
Online password brute-forcer for many network services.
Crowbar
Brute force tool specializing in RDP, VPN, VNC key/password attacks.
CeWL
Custom wordlist generator from target website wording.
Crunch
Wordlist generator for charsets and patterns.