Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools.

Key Features

• 100% Rust - Legba is entirely written in Rust, does not have native dependencies and can be easily compiled for all operating systems and architectures. 🦀
• Multi Protocol - Support for HTTP, DNS, SSH, FTP, SMTP, RDP, VNC, SQL databases, NoSQL, LDAP, Kerberos, SAMBA, SNMP, STOMP, MQTT and more.
• High Performance - Async/concurrent architecture with customizable workers for maximum speed.
• Flexible Credentials - Multiple input formats including wordlist files, ranges, permutations, and expression generators.
• Smart Session Management - Save and restore session state to resume interrupted scans.
• Advanced Rate Control - Rate limiting, delays, jittering, and retry mechanisms for stealth and stability.
• AI Ready - REST API, Model Context Protocol (MCP) server, and custom binary plugin support.
• Recipe System - YAML-based configuration for complex authentication scenarios.
• Multiple Output Formats - Export results in various formats for easy integration with other tools.

Quick Start

Download one of the precompiled binaries from the project latest release page, or if you're a Homebrew user, you can install it with a custom tap:

brew tap evilsocket/legba https://github.com/evilsocket/legba
brew install evilsocket/legba/legba

You are now ready to go! 🚀

legba smb --target domain.local --username administrator --password wordlist.txt

For the usage and the complete list of options check the project documentation.

AI Agent Skill

If you use an AI coding agent (Claude Code, Cursor, Copilot, OpenCode, etc.), you can install the legba skill to give it full knowledge of the tool — syntax, plugins, recipes, and API:

npx skills add https://github.com/evilsocket/legba --skill legba

Once installed, your agent will know how to construct legba commands, write recipes, and configure the REST API or MCP server without needing to look things up manually.

Contributors

Star History

License

Legba is released under the GPL 3 license. To see the licenses of the project dependencies, install cargo license with cargo install cargo-license and then run cargo license.