diff --git a/net-analyzer/medusa/Manifest b/net-analyzer/medusa/Manifest
index afdebfa11..d984b217f 100644
--- a/net-analyzer/medusa/Manifest
+++ b/net-analyzer/medusa/Manifest
@@ -1 +1,2 @@
+DIST medusa-2.3.gh.tar.gz 417509 BLAKE2B c5d7c6ac3f0b7a3d8142c2c1750e579248e1f83789707611aaaed0f660dbc72f465afbae2bb0e4ac28d23b2ad653ba15e3ebba7d31301916cc23ef2b1863c72f SHA512 835f154189dee61dbc88866ef0ea09fca7f217eca28784ada5cc6f50bc8970ea220b0370a59dbb23c15911f814c0cf22d356b19d9ccadf2ed063d081c72e2ca2
 DIST medusa-2.3_rc1.tar.gz 411277 BLAKE2B f9b43cfdd8ee61977d2ce2d859b9d3d8fcbc0cd561751ef1e5662820a27bc2ba86ad3988bc74fa9191463cdd33a91c5a23619c5b89996c4fa2e5f858b9e1673d SHA512 ca24280d5024634ae9e28f9fd3230d63c1b4637bac7aba29a7aa84ee508ec265a5256079bf149ffd4d20b700f3d49eedd1ef7d0135bffde663fa8a284a8b33fe
diff --git a/net-analyzer/medusa/medusa-2.3.ebuild b/net-analyzer/medusa/medusa-2.3.ebuild
new file mode 100644
index 000000000..35bc9c5c0
--- /dev/null
+++ b/net-analyzer/medusa/medusa-2.3.ebuild
@@ -0,0 +1,56 @@
+# Copyright 2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+MODULES=( postgres +rdp +ssh subversion )
+
+inherit autotools
+
+DESCRIPTION="A modular, parallel, multiprotocol, network login auditor"
+HOMEPAGE="http://foofus.net/goons/jmk/medusa/medusa.html"
+
+#SRC_URI="https://github.com/jmk-foofus/medusa/releases/download/2.3/medusa-2.3.tar.gz"
+SRC_URI="https://github.com/jmk-foofus/medusa/archive/refs/tags/${PV}.tar.gz -> ${P}.gh.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="${MODULES[@]} debug"
+DOCS=( AUTHORS NEWS README.md TODO ChangeLog sample )
+
+RDEPEND="dev-libs/openssl:=
+	ssh? ( net-libs/libssh2 )
+	postgres? ( dev-db/postgresql:= )
+	rdp? ( net-misc/freerdp )
+	subversion? ( dev-vcs/subversion )
+	"
+	#afp was removed as unmaintained and unbuildable
+	#afp? ( net-fs/afpfs-ng )"
+#FIXME: CONFIG_NCP_FS
+
+DEPEND="${RDEPEND}"
+
+#S="${WORKDIR}/${PN}-${COMMIT_HASH}"
+
+src_prepare() {
+	sed -e "s:\$_dir/libssh2.so:/usr/$(get_libdir)/libssh2.so:" \
+		-e "s/module-svn/module-subversion/" \
+		-i configure.ac || die 'sed failed!'
+
+	eautoreconf
+	default
+}
+
+src_configure() {
+	local econfargs
+
+	for x in ${MODULES[@]}; do
+		econfargs+=( $(use_enable ${x/[[:punct:]]} module-${x/[[:punct:]]}) )
+	done
+
+	econf \
+		--with-default-mod-path="/usr/$(get_libdir)/medusa/modules" \
+		$(use_enable debug) \
+		${econfargs[@]}
+}
diff --git a/net-analyzer/medusa/medusa-2.3_rc1.ebuild b/net-analyzer/medusa/medusa-2.3_rc1.ebuild
index 4caec58d9..50f2c5d47 100644
--- a/net-analyzer/medusa/medusa-2.3_rc1.ebuild
+++ b/net-analyzer/medusa/medusa-2.3_rc1.ebuild
@@ -12,10 +12,11 @@ HOMEPAGE="http://foofus.net/goons/jmk/medusa/medusa.html"
 
 COMMIT_HASH="dd620697dbc3a4e06fa83a5666018a1128c8ac4d"
 SRC_URI="https://github.com/jmk-foofus/medusa/archive/${COMMIT_HASH}.tar.gz -> ${P}.tar.gz"
+S="${WORKDIR}/${PN}-${COMMIT_HASH}"
 
-KEYWORDS="~amd64 ~x86"
 LICENSE="GPL-2"
 SLOT="0"
+KEYWORDS="~amd64 ~x86"
 IUSE="${MODULES[@]} debug"
 DOCS=( AUTHORS NEWS README.md TODO ChangeLog sample )
 
@@ -31,8 +32,6 @@ RDEPEND="dev-libs/openssl:=
 
 DEPEND="${RDEPEND}"
 
-S="${WORKDIR}/${PN}-${COMMIT_HASH}"
-
 src_prepare() {
 	sed -e "s:\$_dir/libssh2.so:/usr/$(get_libdir)/libssh2.so:" \
 		-e "s/module-svn/module-subversion/" \