Nikto Web Scanner

Nikto
Stable release
2.1.5 / December 17, 2012
Written in Perl
Available in English
License GPL
Website http://www.cirt.net/Nikto2

Nikto Web Scanner is a Web server scanner that tests Web servers for dangerous files/CGIs, outdated server software and other problems. It performs generic and server type specific checks. It also captures and prints any cookies received.

The Nikto code itself is Open Source (GPL), however the data files it uses to drive the program are not.[1]

Chris Sullo, the CFO of Open Security Foundation has written this scanner for vulnerability assessment.[2]

Functions

Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/CGIs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Scan items and plugins are frequently updated and can be automatically updated.

Variations

There are some variations of Nikto, one of which is MacNikto. MacNikto is an AppleScript GUI shell script wrapper built in Apple's Xcode and Interface Builder, released under the terms of the GPL. It provides easy access to a subset of the features available in the Open Source, command-line driven Nikto web security scanner, installed along with the MacNikto application. [3] [4]

References

  1. ↑ "Data file distributed with Nikto with non-Open Source licence notice at the top".
  2. ↑ "OSVDB Profile".
  3. ↑ "MacNikto".
  4. ↑ "Yet another Nikto GUI".
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.