{"id":6,"date":"2009-02-17T11:35:41","date_gmt":"2009-02-17T17:35:41","guid":{"rendered":"http:\/\/www.foofus.net\/blog\/?p=6"},"modified":"2009-02-17T11:35:41","modified_gmt":"2009-02-17T17:35:41","slug":"medusa-15-release","status":"publish","type":"post","link":"http:\/\/h.foofus.net\/?p=6","title":{"rendered":"Medusa 1.5 Release"},"content":{"rendered":"<p>Fellow Pen-testers:<\/p>\n<p><strong>Version 1.5 of Medusa is now available for public download.<\/strong><\/p>\n<p>What is Medusa? Medusa is a speedy, massively parallel, modular, login brute-forcer for network services created by the geeks at Foofus.net. It currently has modules for the following services: AFP, CVS, FTP, HTTP, IMAP, MS-SQL, MySQL, NCP (NetWare), NNTP, PcAnywhere, POP3, PostgreSQL, rexec, rlogin, rsh, SMB, SMTP (AUTH\/VRFY), SNMP, SSHv2, SVN, Telnet, VmAuthd, VNC. It also includes a basic web form module and a generic wrapper module for external scripts.<\/p>\n<p>While Medusa was designed to serve the same purpose as THC-Hydra, there are several significant differences. For a brief comparison, see:<\/p>\n<p><a title=\"http:\/\/www.foofus.net\/jmk\/medusa\/medusa-compare.html\" href=\"http:\/\/www.foofus.net\/jmk\/medusa\/medusa-compare.html\">http:\/\/www.foofus.net\/jmk\/medusa\/medusa-compare.html<\/a><\/p>\n<p>It&#8217;s been over a year since version 1.4 was released and there has been a bunch of changes. This release includes multiple bug fixes, several new modules and additional module functionality. The following is a quick rundown on some of the new features. A somewhat detailed report is available here:  <a title=\"http:\/\/www.foofus.net\/jmk\/medusa\/ChangeLog\" href=\"http:\/\/www.foofus.net\/jmk\/medusa\/ChangeLog\">http:\/\/www.foofus.net\/jmk\/medusa\/ChangeLog<\/a><\/p>\n<p>* AFP &#8211; new module (still marked as unstable)<br \/>\n* HTTP &#8211; digest auth support<br \/>\n* IMAP &#8211; STARTTLS, NTLM support<br \/>\n* POP3 &#8211; STARTTLS, LOGIN, PLAIN, NTLM support<br \/>\n* SMBNT &#8211; LM, LMv2, NTLMv2 support<br \/>\n* SMTP &#8211; NTLM support<br \/>\n* TELNET &#8211; AS\/400 (TN5250) support<br \/>\n* misc. core and module bug fixes<\/p>\n<p>Finally, the main documentation and actual files are located here:<\/p>\n<p><a title=\"http:\/\/www.foofus.net\/jmk\/medusa\/medusa.html\" href=\"http:\/\/www.foofus.net\/jmk\/medusa\/medusa.html\">http:\/\/www.foofus.net\/jmk\/medusa\/medusa.html<\/a><br \/>\n<a title=\"http:\/\/www.foofus.net\/jmk\/tools\/medusa-1.5.tar.gz\" href=\"http:\/\/www.foofus.net\/jmk\/tools\/medusa-1.5.tar.gz\">http:\/\/www.foofus.net\/jmk\/tools\/medusa-1.5.tar.gz<\/a><\/p>\n<p>Medusa was developed on Gentoo Linux and FreeBSD. Some limited testing has been done on other platforms\/distributions (OpenBSD, Debian, Ubuntu, Darwin, Mac OS X, Solaris). If people wish to contribute patches to fix portability issues, I&#8217;d be happy to accept them. There are probably lots of bugs which have yet to surface. Please let me know if you encounter issues, fix a bug or just find the application useful.<\/p>\n<p>Enjoy,<br \/>\nJoe<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Fellow Pen-testers: Version 1.5 of Medusa is now available for public download. What is Medusa? Medusa is a speedy, massively parallel, modular, login brute-forcer for network services created by the geeks at Foofus.net. It currently has modules for the following services: AFP, CVS, FTP, HTTP, IMAP, MS-SQL, MySQL, NCP (NetWare), NNTP, PcAnywhere, POP3, PostgreSQL, rexec, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[27,22],"class_list":["post-6","post","type-post","status-publish","format-standard","hentry","category-medusa","tag-medusa","tag-tool-release"],"_links":{"self":[{"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/posts\/6","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/h.foofus.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6"}],"version-history":[{"count":0,"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/posts\/6\/revisions"}],"wp:attachment":[{"href":"http:\/\/h.foofus.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/h.foofus.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/h.foofus.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}