On the heels of us posting about Ncrack, Nmap’s new password brutforcer, the foofus group had go and update Medusa!

Medusa, which has been our go-to tool for years, is now 2.0! This is it’s first major release in two years, and it has a multitude of useful changes.

-Pool-based thread handling
-Modules now request next credential set
-Secondary user credential queue added for missed login tests.
-Host and User-level Resume
-Multiple Module fixes

It’s not like pentesters have never had multiple tools to do the same thing, in fact we like both Ncrack and Medusa (and at this time Medusa has far more supported protocols/services).

Check out the changes here

The usage here

and download it here