ssh module doesn't work

[Pablo Catalina]

$ medusa -d | grep ssh
    + ssh.mod : Couldn't load "/usr/lib/medusa/modules/ssh.mod" [/usr/lib/medusa/modules/ssh.mod: undefined symbol: libssh2_banner_set]

Or try to use it:
$ medusa -h localhost -u root -P /usr/share/dict/british-english -e ns -t 10 -M ssh
Medusa v2.0 [http://www.foofus.net] (C) JoMo-Kun / Foofus Networks <email address hidden>

IMPORTANT: Couldn't load "ssh" [/usr/lib/medusa/modules/ssh.mod: undefined symbol: libssh2_banner_set]. Place the module in the medusa directory, set the MEDUSA_MODULE_NAME environment variable or run the configure script again using --with-default-mod-path=[path].
IMPORTANT: Couldn't load "ssh" [/usr/lib/medusa/modules/ssh.mod: undefined symbol: libssh2_banner_set]. Place the module in the medusa directory, set the MEDUSA_MODULE_NAME environment variable or run the configure script again using --with-default-mod-path=[path].
invokeModule failed - see previous errors for an explanation

$ dpkg -l | grep medusa
ii medusa 2.0-3.1 amd64 fast, parallel, modular, login brute-forcer for network services

$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 12.10
Release: 12.10
Codename: quantal

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Bruno Thomsen (bth-v)]

$ medusa -q
Medusa v2.0 [http://www.foofus.net] (C) JoMo-Kun / Foofus Networks <email address hidden>

  Available modules in "." :

  Available modules in "/usr/lib/medusa/modules" :
    + cvs.mod : Brute force module for CVS sessions : version 2.0
    + ftp.mod : Brute force module for FTP/FTPS sessions : version 2.0
    + http.mod : Brute force module for HTTP : version 2.0
    + imap.mod : Brute force module for IMAP sessions : version 2.0
    + mssql.mod : Brute force module for M$-SQL sessions : version 2.0
    + mysql.mod : Brute force module for MySQL sessions : version 2.0
    + ncp.mod : Couldn't load "/usr/lib/medusa/modules/ncp.mod" [/usr/lib/medusa/modules/ncp.mod: undefined symbol: str_upper]
    + nntp.mod : Brute force module for NNTP sessions : version 2.0
    + pcanywhere.mod : Brute force module for PcAnywhere sessions : version 2.0
    + pop3.mod : Brute force module for POP3 sessions : version 2.0
    + postgres.mod : Couldn't load "/usr/lib/medusa/modules/postgres.mod" [/usr/lib/medusa/modules/postgres.mod: undefined symbol: PQstatus]
    + rexec.mod : Brute force module for REXEC sessions : version 2.0
    + rlogin.mod : Brute force module for RLOGIN sessions : version 2.0
    + rsh.mod : Brute force module for RSH sessions : version 2.0
    + smbnt.mod : Brute force module for SMB (LM/NTLM/LMv2/NTLMv2) sessions : version 2.0
    + smtp-vrfy.mod : Brute force module for enumerating accounts via SMTP VRFY : version 2.0
    + smtp.mod : Brute force module for SMTP Authentication with TLS : version 2.0
    + snmp.mod : Brute force module for SNMP Community Strings : version 2.0
    + ssh.mod : Couldn't load "/usr/lib/medusa/modules/ssh.mod" [/usr/lib/medusa/modules/ssh.mod: undefined symbol: libssh2_banner_set]
    + svn.mod : Couldn't load "/usr/lib/medusa/modules/svn.mod" [/usr/lib/medusa/modules/svn.mod: undefined symbol: apr_array_make]
    + telnet.mod : Brute force module for telnet sessions : version 2.0
    + vmauthd.mod : Brute force module for the VMware Authentication Daemon : version 2.0
    + vnc.mod : Brute force module for VNC sessions : version 2.0
    + web-form.mod : Brute force module for web forms : version 2.0
    + wrapper.mod : Generic Wrapper Module : version 2.0

CRITICAL: invokeModule called with no name
CRITICAL: invokeModule failed - see previous errors for an explanation

[Grond (grond66)]

I have a fix for this bug.

medusa 2.0's support for NCP, Postgres, SSH, and SVN bruteforcing is broken.
The problem is with the original source and has nothing to do with ubuntu packaging it.
These problems have been fixed upstream in version 2.1.1.

I suggest to the developers that they package version 2.1.1 and put it in the repositories.

I have also sent this information to <email address hidden>.

[Luciano Bello (luciano-debian)]

On Tuesday 31 December 2013 07:32:15 Grond wrote:
> I suggest to the developers that they package version 2.1.1 and put it
> in the repositories.

I'm really sorry about the current state of the medusa Debian package. I will
upload the new upstream version soon.

Promised.

/luciano

[Luciano Bello (luciano-debian)]

I'm not a launchpad user, so let me know if I did something wrong in the workflow. I don't know why this report was not closed after 2.1.1 upload. 2.1.1 is out there since long.

[Grond (grond66)]

Might also want to look into uploading 2.1.1 into the debian repository.
(It's still at version 2.0-3.1)

On Sun, Nov 02, 2014 at 11:10:40AM -0000, Luciano Bello wrote:
> I'm not a launchpad user, so let me know if I did something wrong in the
> workflow. I don't know why this report was not closed after 2.1.1
> upload. 2.1.1 is out there since long.
>
> ** Changed in: medusa (Ubuntu)
> Status: Confirmed => Fix Released
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1083516
>
> Title:
> ssh module doesn't work
>
> Status in “medusa” package in Ubuntu:
> Fix Released
>
> Bug description:
> $ medusa -d | grep ssh
> + ssh.mod : Couldn't load "/usr/lib/medusa/modules/ssh.mod" [/usr/lib/medusa/modules/ssh.mod: undefined symbol: libssh2_banner_set]
>
>
> Or try to use it:
> $ medusa -h localhost -u root -P /usr/share/dict/british-english -e ns -t 10 -M ssh
> Medusa v2.0 [http://www.foofus.net] (C) JoMo-Kun / Foofus Networks <email address hidden>
>
> IMPORTANT: Couldn't load "ssh" [/usr/lib/medusa/modules/ssh.mod: undefined symbol: libssh2_banner_set]. Place the module in the medusa directory, set the MEDUSA_MODULE_NAME environment variable or run the configure script again using --with-default-mod-path=[path].
> IMPORTANT: Couldn't load "ssh" [/usr/lib/medusa/modules/ssh.mod: undefined symbol: libssh2_banner_set]. Place the module in the medusa directory, set the MEDUSA_MODULE_NAME environment variable or run the configure script again using --with-default-mod-path=[path].
> invokeModule failed - see previous errors for an explanation
>
>
> $ dpkg -l | grep medusa
> ii medusa 2.0-3.1 amd64 fast, parallel, modular, login brute-forcer for network services
>
>
> $ lsb_release -a
> No LSB modules are available.
> Distributor ID: Ubuntu
> Description: Ubuntu 12.10
> Release: 12.10
> Codename: quantal
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ubuntu/+source/medusa/+bug/1083516/+subscriptions

--

Attached is my PGP public key.
Primary key fingerprint: B7C7 AD66 D9AF 4348 0238 168E 2C53 D8FA 55D8 9FD9

If you have a PGP key (and a minute to spare)
please send it in reply to this email.

If you have no idea what PGP is, feel free
to ignore all this gobbledegook.

[Luciano Bello (luciano-debian)]

On Sunday 02 November 2014 20.09.19 Grond wrote:
> Might also want to look into uploading 2.1.1 into the debian repository.
> (It's still at version 2.0-3.1)

What you mean? https://packages.qa.debian.org/m/medusa.html

The stable version is old because... well... stable is old ;)

/l