python-medusa
简介
python-medusa是一个闻名的爆破工具medusa的python库,可以帮助使用medusa进行端口爆破,希望能为使用者带来益处。如果您也想贡献好的代码片段,请将代码以及描述,通过邮箱( xinkonghan@gmail.com )发送给我。代码格式是遵循自我主观,如存在不足敬请指出!
**文档地址: ** https://python-medusa.xink.top/
**PyPi地址: ** https://pypi.org/project/python-medusa
**GitHub地址: ** https://github.com/hanxinkong/python-medusa
安装
pip install python-medusa
支持的协议 (不完全统计)
- AFP
- CVS
- FTP
- HTTP
- IMAP
- MS-SQL
- MySQL
- NCP (NetWare)
- NNTP
- PcAnywhere
- POP3
- PostgreSQL
- rexec
- rlogin
- rsh
- SMB
- SMTP (AUTH/VRFY)
- SNMP
- SSH
- SSHv2
- Telnet
- VmAuthd
- VNC
简单使用
✨在使用之前,请确保已安装medusa应用程序
from medusa import PortBlaster
mds = PortBlaster()
print("medusa version:", mds.medusa_version)
mds.brute(
hosts='192.168.2.185',
ports='22',
user='root',
password='root',
arguments='-M ssh',
isfile_hosts=False,
isfile_user=False,
isfile_password=False
)
print("medusa command line:", mds.command_line)
print(mds.get_medusa_last_output)
# print('medusa bruteinfo: ', mds.bruteinfo)
# print('medusa brutestats: ', mds.brutestats)
for host in mds.all_hosts:
print("Host: %s (%s)" % (host, mds[host]))
参数说明
| 字段名 | 类型 | 必须 | 描述 |
|---|---|---|---|
| hosts | string | 是 | 主机,可多个(用,号分隔) |
| ports | string | 否 | 端口,可多个(23,80,666-777) |
| user | string | 否 | 用户(默认:root) |
| password | string | 否 | 密码(默认:root) |
| arguments | string | 否 | 附加参数(详见附加参数说明) |
| isfile_hosts | boolean | 否 | 主机从文件导入,可多个(每行为一个) |
| isfile_user | boolean | 否 | 用户从文件导入,可多个(每行为一个) |
| isfile_password | boolean | 否 | 密码从文件导入,可多个(每行为一个) |
附加参数说明
-O [FILE] 指定成功后文件日志信息路径
-e [n/s/ns] N意为空密码,S意为密码与用户名相同
-M [TEXT] 模块执行名称
-m [TEXT] 传递参数到模块
-d 显示所有的模块名称
-n [NUM] 使用非默认端口
-s 启用SSL
-r [NUM] 重试间隔时间,默认为3秒
-t [NUM] 设定线程数量
-L 并行化,每个用户使用一个线程
-f 在任何主机上找到第一个账号/密码后,停止破解
-q 显示模块的使用信息
-v [NUM] 详细级别(0-6)
-w [NUM] 错误调试级别(0-10)
-V 显示版本
-Z [TEXT] 继续扫描上一次
依赖
内置依赖
reType Hints for Python.osType Hints for Python.shlexType Hints for Python.subprocessType Hints for Python.sysType Hints for Python.jsonType Hints for Python.
注:依赖顺序排名不分先后
链接
Github:https://github.com/hanxinkong/python-medusa
在线文档:https://python-medusa.xink.top
贡献者
许可证
该项目根据 MIT 许可条款获得许可.
免责声明
- 若使用者滥用本项目,本人 无需承担 任何法律责任.
- 本程序仅供娱乐,源码全部开源,禁止滥用 和二次 贩卖盈利. 禁止用于商业用途.
Metadata
Release files for python-medusa 1.0.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| python-medusa-1.0.1.tar.gz | 9.0 kB | Without provenance | Details for python-medusa-1.0.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| python_medusa-1.0.1-py3-none-any.whl | Python 3 | none | any | Details for python_medusa-1.0.1-py3-none-any.whl |
Total release size: 17.3 kB
Release files / python-medusa-1.0.1.tar.gz
| Download URL | python-medusa-1.0.1.tar.gz |
|---|---|
| Size | 9.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
689414d6a6f0521b055057698b9de116e4e2cc0d97a490b4994c9d3623518edf
|
|
BLAKE2b-256 checksum How to use checksums |
8f7217b175470043f8c862e1c42d7f16795e9fa6a561a581f7e43bef3b6ab8bc
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.2 CPython/3.9.12
|
Release files / python_medusa-1.0.1-py3-none-any.whl
| Download URL | python_medusa-1.0.1-py3-none-any.whl |
|---|---|
| Size | 8.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
fe6c6d4d06ead290b203f382cf79975550fbb21bd13d4bf4fd0b010213b1a309
|
|
BLAKE2b-256 checksum How to use checksums |
9f41bf38904f4a2445accde1fc62593801c13d7cc64c57c87893777fabc1238f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.2 CPython/3.9.12
|
Security for python-medusa 1.0.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.