Installation

Installation

Prerequisites

Medusa is pure Bash and ships no vendored dependencies. It relies on tools already present (or installable) on the host.

Tool	Requirement	Used for
docker	required	Container deployment
docker compose or docker-compose	required	Service orchestration
git	required	Cloning official upstream repositories
curl	recommended	Downloading CLI installers
python3	recommended	UUID generation
pip3 (or pipx)	recommended	Installing CLI tools (semgrep, prowler, sigma…)
openssl	recommended	Random password generation

Medusa detects both the Docker Compose plugin (docker compose) and the legacy standalone binary (docker-compose), preferring the plugin.

Missing recommended tools do not block startup, Medusa runs with reduced capabilities and warns. Missing required tools are reported but execution continues.

Verify prerequisites

./medusa.sh check

This reports missing critical and recommended tools without deploying anything.

Install

git clone https://github.com/WhiteMuush/Medusa.git
cd Medusa
chmod +x medusa.sh
./medusa.sh

Everything stays inside the cloned directory. Deployments are written to medusa_deployments/ (git-ignored), never outside the project tree.

Running as root

Medusa warns when launched as root but does not block it:

[!] Running as root - proceed with caution!

Some CLI installers (system packages via apt-get, Malcolm, Nmap raw scans) legitimately need elevated privileges and will offer to re-run themselves with sudo. Prefer running Medusa as a normal user in the docker group and let it escalate only when a specific operation requires it.

Uninstall

Medusa has no installer and writes nothing outside its directory. To remove it completely:

./medusa.sh stop all      # stop running containers first
rm -rf /path/to/Medusa    # removes the toolkit and all medusa_deployments/

Removing a single tool (and its data) is done through the menu or ./medusa.sh remove <tool>.

---

Next: Usage · Configuration