{"id":15028690,"url":"https://github.com/ascotbe/medusa","last_synced_at":"2026-10-19T08:48:25.985Z","repository":{"id":37622763,"uuid":"204725727","full_name":"Ascotbe/Medusa","owner":"Ascotbe","description":":cat2:Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中 ","archived":false,"fork":false,"pushed_at":"2024-03-03T05:27:14.000Z","size":66587,"stargazers_count":2236,"open_issues_count":5,"forks_count":342,"subscribers_count":46,"default_branch":"master","last_synced_at":"2026-09-23T01:38:31.863Z","etag":null,"topics":["cobaltstrike","cve","dnslog","email","exp","mail","medusa","metasploit-framework","payload","poc","readteam","virus","xss"],"latest_commit_sha":null,"homepage":"http://medusa.ascotbe.com","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Ascotbe.png","metadata":{"files":{"readme":"README.CN.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null},"funding":{"github":"ascotbe","ko_fi":"ascotbe","custom":["https://afdian.net/@ascotbe"]}},"created_at":"2019-08-27T14:50:20.000Z","updated_at":"2026-09-15T22:19:47.000Z","dependencies_parsed_at":"2024-03-06T17:19:36.043Z","dependency_job_id":"f6bd65f6-c870-46d8-8e9f-fe64015ab1b0","html_url":"https://github.com/Ascotbe/Medusa","commit_stats":{"total_commits":735,"total_committers":11,"mean_commits":66.81818181818181,"dds":"0.15918367346938778","last_synced_commit":"5a669dd2560b588fdb80b1d3e08af48a01d516da"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/Ascotbe/Medusa","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Ascotbe%2FMedusa","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Ascotbe%2FMedusa/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Ascotbe%2FMedusa/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Ascotbe%2FMedusa/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Ascotbe","download_url":"https://codeload.github.com/Ascotbe/Medusa/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Ascotbe%2FMedusa/sbom","scorecard":{"id":16871,"data":{"date":"2025-08-11","repo":{"name":"github.com/Ascotbe/Medusa","commit":"5a669dd2560b588fdb80b1d3e08af48a01d516da"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":2.4,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/checker.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"SAST","score":0,"reason":"no SAST tool detected","details":["Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: Web/TrojanOrVirus/pe2shc.exe:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: GNU General Public License v3.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/checker.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/Ascotbe/Medusa/checker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/checker.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/Ascotbe/Medusa/checker.yml/master?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating ascotbe/medusa:latest to ascotbe/medusa:latest@sha256:72068701cda8921a26bca4d92be00e8b8fb11bd52c276d2ae5bdc20ff3cdfc32","Warn: npmCommand not pinned by hash: Dockerfile:41","Warn: pipCommand not pinned by hash: Dockerfile:51","Info:   0 out of   1 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned","Info:   0 out of   1 pipCommand dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"55 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-x9w5-v3q2-3rhw","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6","Warn: Project is vulnerable to: GHSA-434g-2637-qmqr","Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m","Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw","Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p","Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747","Warn: Project is vulnerable to: GHSA-vjh7-7g9h-fjfh","Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc","Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx","Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc","Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-pfq8-rq6v-vf5m","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq","Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488","Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6","Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg","Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p","Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-5j4c-8p2g-v4jx","Warn: Project is vulnerable to: GHSA-g3ch-rx76-35fx","Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T15:58:44.806Z","repository_id":37622763,"created_at":"2025-08-14T15:58:44.806Z","updated_at":"2025-08-14T15:58:44.806Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38352851,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-19T02:00:06.414Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cobaltstrike","cve","dnslog","email","exp","mail","medusa","metasploit-framework","payload","poc","readteam","virus","xss"],"created_at":"2024-09-24T20:08:54.054Z","updated_at":"2026-10-19T08:48:25.448Z","avatar_url":"https://github.com/Ascotbe.png","language":"Python","funding_links":["https://github.com/sponsors/ascotbe","https://ko-fi.com/ascotbe","https://afdian.net/@ascotbe"],"categories":[],"sub_categories":[],"readme":"\u003cimg src=\"https://github.com/Ascotbe/Medusa/blob/master/Medusa.png?raw=true\" width=\"1500\" alt=\"Medusa\" /\u003e \n\n\u003cp align=\"center\"\u003e\n    \u003ca href=\"https://github.com/Ascotbe/Medusa\"\u003e\u003cimg alt=\"Release\" src=\"https://img.shields.io/badge/Ascotbe-Medusa-green\"\u003e\u003c/a\u003e\n    \u003ca href=\"https://github.com/Ascotbe/Medusa\"\u003e\u003cimg alt=\"Release\" src=\"https://img.shields.io/github/repo-size/Ascotbe/Medusa\"\u003e\u003c/a\u003e\n    \u003ca href=\"https://github.com/Ascotbe/Medusa\"\u003e\u003cimg alt=\"Release\" src=\"https://img.shields.io/badge/python-3.7+-blueviolet\"\u003e\u003c/a\u003e\n    \u003ca href=\"https://github.com/Ascotbe/Medusa\"\u003e\u003cimg alt=\"Release\" src=\"https://visitor-badge.glitch.me/badge?page_id=https://github.com/Ascotbe/Medusa/README.md\"\u003e\u003c/a\u003e\n    \u003ca href=\"https://github.com/Ascotbe/Medusa\"\u003e\u003cimg alt=\"Release\" src=\"https://img.shields.io/badge/Version-1.0-red\"\u003e\u003c/a\u003e\n    \u003ca href=\"https://github.com/Ascotbe/Medusa\"\u003e\u003cimg alt=\"Release\" src=\"https://img.shields.io/badge/LICENSE-GPL-ff69b4\"\u003e\u003c/a\u003e\n    \u003ca href=\"https://hub.docker.com/r/ascotbe/medusa\"\u003e\u003cimg alt=\"Release\" src=\"https://img.shields.io/docker/pulls/ascotbe/medusa.svg\"\u003e\u003c/a\u003e\n\t\u003ca href=\"https://github.com/ascotbe/Medusa/stargazers\"\u003e\u003cimg alt=\"Release\" src=\"https://img.shields.io/github/stars/ascotbe/Medusa.svg\"\u003e\u003c/a\u003e\n\u003c/p\u003e\n\n\n\u003ch1 align=\"center\" \u003eWelcome to Medusa\u003c/h1\u003e\n\n### :point_right:关于美杜莎\n\n\u003e本项目使用 `GPL`协议，未经授权，禁止使用商业用途。\n\u003e\n\u003e`Web`  **Alpha**版本已上线\n\u003e\n\u003e请下载releases版本使用，master分支正在重构前端（预计2022年底上线）\n\n#### **中文文档 |[EnglishDocumentation](https://github.com/Ascotbe/Medusa/blob/master/README.md)**\n\n### :bulb:使用文档\n\n```\nhttp://medusa.ascotbe.com\n```\n\n### :clipboard:安装说明\n\n```bash\nhttps://medusa.ascotbe.com/Documentation/#/Installation\n```\n\n### :space_invader:Web界面\n\n![demo](https://github.com/Ascotbe/Image/blob/master/Medusa/web_demo.gif?raw=true)\n\n\n### :four_leaf_clover:更新日志\n\n```\nhttp://medusa.ascotbe.com/Documentation/#/UpDataLog\n```\n\n### :green_heart:提交意见\n\n- 如果您有发现插件扫描不到对应的漏洞请提交[Bug]类的issue\n- 如果您有任何文档无法解决的问题请提交[help]类的issue\n- 如果您有什么好的意见或者想法请提交[idea]类的issue\n\n\n### :warning:免责声明\n\n在原有的[协议](https://github.com/Ascotbe/Medusa/blob/master/LICENSE)中追加以下内容：\n\n- 本项目禁止进行未授权商业用途\n- 本项目禁止二次开发后进行商业用途\n- 本项目仅面向**合法授权**的企业安全建设行为，在使用本项目进行检测时，您应确保该行为符合当地的法律法规，并且已经取得了足够的授权。\n- 如您在使用本项目的过程中存在任何非法行为，您需自行承担相应后果，我们将不承担任何法律及连带责任。\n- 在使用本项目前，请您**务必审慎阅读、充分理解各条款内容**，限制、免责条款或者其他涉及您重大权益的条款可能会以加粗、加下划线等形式提示您重点注意。 除非您已充分阅读、完全理解并接受本协议所有条款，否则，请您不要使用本项目。您的使用行为或者您以其他任何明示或者默示方式表示接受本协议的，即视为您已阅读并同意本协议的约束。\n\n\n### :palm_tree:贡献人员\n\n![commit](https://opencollective.com/Medusa/contributors.svg?width=890\u0026button=false)\n\n### :checkered_flag:时间轴\n\n![Alt](https://repobeats.axiom.co/api/embed/dde3107e3339aa21a9b244749737e8a39a650ab9.svg \"Repobeats analytics image\")\n\n![star](https://starchart.cc/Ascotbe/Medusa.svg)\n\n\n\n\n\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fascotbe%2Fmedusa","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fascotbe%2Fmedusa","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fascotbe%2Fmedusa/lists"}