Another feature of the program is finding hidden resources like servlets, directories, and scripts. WFuzz is another brute-force password-cracking tool, much like Medusa and THC Hydra. Legality or illegality is largely dependent on the motives and purposes behind each person’s use of the software. The mere use of THC Hydra is not illegal. Such passwords are shown only to the user, and there have been no reports to date of THC Hydra making unauthorized modifications to user’s files. THC Hydra does not collect or store any recovered passwords on online servers. By typing “hydra -h”, users will be shown the various commands and syntaxes that can be used with THC Hydra. Like the main software, xHydra may also be downloaded from the Github repository. xHydra is also pre-installed on Kali Linux operating systems, but users of other Linux OS’s may install xHydra by using the command “sudo apt-get install hydra-gt”. To begin using THC Hydra, users can download xHydra, a GUI that makes the software much easier to use. In addition to the brute-force method, THC Hydra can also use dictionary attacks, using external wordlists. One key difference is that THC Hydra can be installed on Windows, macOS, Linux, Free BSD, and Solaris, notably more platforms than Medusa supports. Like Medusa, THC Hydra is also an online password cracking tool that uses a brute-force password guessing method. THC Hydra has seen many comparisons to Medusa as a password cracker, but there are notable differences between the two software. Medusa is completely legal to use as long as users ensure that the passwords obtained are their own or belong to people who have given authority or consent for password recovery. Any cracked passwords are available only to the user, which may allay some privacy fears. Medusa is safe to use, provided that the user’s hardware can run the program itself.Īs for privacy, Medusa does not store any information obtained for or inputted by the user.

Users can also type the “medusa” command on the command screen to see the available commands used with the software.Īs with other password crackers, Medusa is merely a command tool that cannot read, modify, or otherwise tamper with users’ files. Linux users who do not have Medusa pre-installed can type “sudo apt-get install medusa” on the command line to install Medusa. For Kali Linux users, Medusa is already pre-installed. There is currently no support for Windows. Medusa is a command-line tool that currently supports Linux, SunOS, BSD, and macOS.

John the ripper software illegal