Nikto
web security
An open source web server scanner which performs comprehensive tests against web servers for multiple items, including dangerous files and outdated software.
web scanningvulnerability detectionserver testing
Legal & Ethical Use
- Web server security assessment
- Vulnerability identification
- Compliance checking
- Authorized testing
Installation
bash
$
sudo apt install niktoBasic Commands
bash
$
nikto -h http://target.comBasic scan
bash
$
nikto -h target.com -sslForce SSL
bash
$
nikto -h target.com -o report.html -Format htmGenerate HTML report
Advantages
- Comprehensive checks
- Regular updates
- Easy to use
- Detailed reports
Limitations
- Noisy scanning
- Can be slow
- Many false positives