Nikto Security Tool

Nikto is an Open Source, web server scanner which tests against web servers for multiple vulnerable items, including over 6700 potentially dangerous files. It also checks for outdated versions of over 1200 servers, and even version specific problems on over 250 servers. It will also perform configuration checks on items such as; multiple index files; HTTP server options; and will attempt to identify the installed software and server information. Updates to Nikto and its plugins are frequentd and can be automated. Nikto is not designed to be a stealthy tool and exceptionally quick when it comes to testing a webserver. There is also support for LibWhisker’s anti-IDS (intrusion detection system) methods in case you want to give it a try.

We have successfully integrated the Nikto Scanner Online into our penetration testing tools platform. The software is perfect for performing rapid web server vulnerability tests and assessments with its huge and constantly updated database of rogue/bad files. You can view a selection of here. If you are looking for someone to.

NIKTO:- Nikto is a web scanner which test the web servers /URL of the target. Nikto performs the comprehensive scan, checks the outdated version of servers. It scans over 6700 vulnerable programs/directories. Nikto checks the configuration of the server like multiple index files, backup files lying on the server and other things. This tool is currently maintained by David Lodge but lot of contributors has involved in making of the tool. As per past researches done by in international institute of cyber security, nikto examine the web servers/URLs and can be used in further hacking activities. To launch nikto simply type nikto –help in linux terminal.

This tool is preinstalled in kali linux distribution. ===============OUTPUT SNIP============== • In the above screen shot, nikto also offers full list of options which tells what exactly each and every option perform while scanning the target. FOR SCANNING THE URL:- • Type nikto -h • After scanning URL, the query has detected that XSS header is not encrypted so any attacker can use script attack method to hijack the scripts of the target.

• In the above scanned output there is another vulnerability with OSVDB-8450. This OSVDB (Open Sourced Vulnerability Database) entry can be found on google by simply typing the OSVDB no:- OSVDB-8450 on google search. One of the link found while searching this OSVDB details can be seen below: • In the above screen shot, the vulnerability can reveal the directories on the remote server. This Attacker can also use the brute force method to find the password.

This vulnerability can be exploited as shown below:./././] SCAN USING ANY PLUGINS:- • Type nikto -h plugins:cookie • The plugin cookie is used in grabbing the cookies of the target. If particular vulnerability found, it can be used in session hijacking. • Attacker can gain some unauthorised information which not publicly available.

Nikto not only checks for CGI vulnerabilities but does so in an evasive manner, so as to elude intrusion detection systems. If you have Web servers serving up CGI scripts, Nikto can be an excellent resource for checking the security of these servers. Trilead vm explorer pro edition keygen software generator. Tags: Nessus, Nikto, Security, Tools. Nikto – security tools for Linux Nikto is an open source (GPL licensed) web server scanner for Linux that allow you to perform comprehensive tests against 6400 potentially dangerous files/CGIs, Regularly checks for outdated versions of over 1200 servers, and solve version specific problems on over 270 servers.