Nikto


Nikto is a web application scanner designed to use the command line.

  • can identity:
    • known web server vulnerabilities and misconfigurations
    • web applications running on a server
    • potential known vulnerabilities in those web applications
  • can discover the type of HTTP server and web applications running on a host and expose vulnerabilities contained within them
  • scans using default settings can be easily performed using the command nikto -h
  • can quickly scan multiple web servers to detect any vulnerabilities

Resources

 - https://www.cirt.net/nikto2