请使用者遵守 中华人民共和国网络安全法，勿将Medusa项目用于非授权的测试，Medusa项目开发者不负任何连带法律责任。
The project is licensed under
GPL.Free for non-commercial use.The project development manpower is insufficient. If you find a problem or have comments, please contact us.
bashVer. Online
BotVer. Online
WebVer. Under development
中文文档 | EnglishDocumentation
http://medusa.ascotbe.com
http://medusa.ascotbe.com/Documentation/#/PluginDirectory
# Need nmap(example for ubuntu
apt-get install nmap
# clone project files
git clone https://github.com/Ascotbe/Medusa.git
cd Medusa
# Install python packages
pip3 install -r Medusa.txt
# Use the scanner
python3 MedusaScan.py -u www.ascotbe.com# If download speed too slow when cloning, then you can use proxy.
# Global proxy setting
git config --global http.proxy http://127.0.0.1:1080
git config --global https.proxy https://127.0.0.1:1080| Command | Number of parameters | Effect | Annotation |
|---|---|---|---|
| -u | 1 | Input single url（Use http:// or https:// first better than none, do not use any paremeters follow the url |
example : -u https://www.ascotbe.com or -u https://192.168.0.1 |
| -a | 1 | Specify header files or use random headers | When using this feature, please refer to the documentation for this content |
| -f | 1 | The filename includes urls that want to scan. | -u or -f must exists one and only one |
| -p | 1 | You need to fill in the IP of your proxy, if you have a port you need to bring the port | to use BURP as a proxy then you should pass in 127.0.0.1:8080 |
| -m | 1 | Scan for single module,such as: Struts2 or Apache, etc. | The specific content can be entered by the corresponding name in the project Modules folder. |
| -t | 1 | Threads usage setting, default(-t 15) | None |
| -s | 0 | Subdomain search by DNS and search engine | Mod by Sublist3r, IP enumerate not support. |
| -se | 0 | Contains -s funcitons, in addtional, enumerate by dictionary(time consuming) |
can not use this with -s at the same time. |
# clone project files
git clone https://github.com/Ascotbe/Medusa.git
cd Medusa
# Install python packages
pip3 install -r Medusa.txt
# Configuring look at BOT document
https://www.ascotbe.com/Medusahttp://medusa.ascotbe.com/Documentation/#/UpDataLog
https://www.ascotbe.com/Loophole
- If you find that the corresponding vulnerability cannot be scanned by the plug-in, please submit the [Bug] issue
- If you have any problems that cannot be solved by the documentation, please submit an issue of [help]
- If you have any good comments or ideas, please submit [idea] issue
- QQ group：690021184（Secret code：6CF2D42B629E5AA4E6C293B290798878）
- GitHub issue
