About Legba
Legba is a multiprotocol credential bruteforcer, password sprayer and enumerator written in Rust on the Tokio asynchronous runtime. It is aimed at security testers and emphasizes performance, stability and lower resource use than similar tools.
Key features
- 01Support for HTTP, SSH, FTP, SMTP and many other protocols
- 02Async concurrent architecture with configurable workers
- 03Credential input from wordlists, ranges, permutations and expressions
- 04Save and restore session state to resume scans
- 05Rate limiting, delays, jitter and retry controls
- 06REST API, MCP server and YAML recipe configuration
Use cases
- 01Testing weak passwords during authorized penetration tests
- 02Auditing credentials across multiple protocol services
- 03Resuming an interrupted scan from saved session state
MCP support
Legba includes a Model Context Protocol (MCP) server alongside its REST API, allowing AI assistants to drive the tool. The README also provides an installable legba skill for AI coding agents.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project READMElegba
Join the project community on our server!
Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools.
Key Features
- 100% Rust - Legba is entirely written in Rust, does not have native dependencies and can be easily compiled for all operating systems and architectures. 🦀
- Multi Protocol - Support for HTTP, DNS, SSH, FTP, SMTP, RDP, VNC, SQL databases, NoSQL, LDAP, Kerberos, SAMBA, SNMP, STOMP, MQTT and more.
- High Performance - Async/concurrent architecture with customizable workers for maximum speed.
- Flexible Credentials - Multiple input formats including wordlist files, ranges, permutations, and expression generators.
- Smart Session Management - Save and restore session state to resume interrupted scans.
- Advanced Rate Control - Rate limiting, delays, jittering, and retry mechanisms for stealth and stability.
- AI Ready - REST API, Model Context Protocol (MCP) server, and custom binary plugin support.
- Recipe System - YAML-based configuration for complex authentication scenarios.
- Multiple Output Formats - Export results in various formats for easy integration with other tools.
Quick Start
Download one of the precompiled binaries from the project latest release page, or if you're a Homebrew user, you can install it with a custom tap:
brew tap evilsocket/legba https://github.com/evilsocket/legba
brew install evilsocket/legba/legba
You are now ready to go! 🚀
legba smb --target domain.local --username administrator --password wordlist.txt
For the usage and the complete list of options check the project documentation.
AI Agent Skill
If you use an AI coding agent (Claude Code, Cursor, Copilot, OpenCode, etc.), you can install the legba skill to give it full knowledge of the tool — syntax, plugins, recipes, and API:
npx skills add https://github.com/evilsocket/legba --skill legba
Once installed, your agent will know how to construct legba commands, write recipes, and configure the REST API or MCP server without needing to look things up manually.
Contributors
Star History
License
Legba is released under the GPL 3 license. To see the licenses of the project dependencies, install cargo license with cargo install cargo-license and then run cargo license.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.