Ascotbe/Medusa

Health v2 · maintenance only

Adoption not part of the score

2235 stars · 342 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Medusa is a self-hosted red team arsenal platform written in Python that bundles tools such as an XSS platform, collaborative platform, CVE monitoring, AV-evasion payload generation, DNSLOG, phishing email, and file retrieval. It is deployed via Docker and intended only for legally authorized security testing.

Use cases

• run a self-hosted XSS payload platform
• monitor CVEs during a red team engagement
• generate antivirus-evading payloads
• set up a DNSLOG server for out-of-band testing
• send phishing emails in an authorized penetration test
• centralize red team tooling in one web platform

When to choose

• you need an all-in-one open-source red team platform
• you want CVE monitoring integrated with offensive tooling
• you need DNSLOG and XSS platforms self-hosted under your control

When to avoid

• you need a defensive or vulnerability-scanning-only tool
• you require commercial use - the license prohibits it
• you need an actively developed project - front-end work is stalled and restart timing is unknown

Facets

application · maturity maintenance

security penetration-testing vulnerability-scanning email webhook security penetration-testing developer-tools python self-hosted red-team offensive-security xss-platform dnslog cve-monitoring phishing-email cobaltstrike metasploit payload-generation av-evasion docker linux web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Ascotbe/Medusa")