NIKTO.PL(1) NIKTO.PL(1) (NAME) nikto.pl - (SYNOPSIS) nikto.pl [options...] (DESCRIPTION) (Nikto) . : o o o o o o LibWhisker2 (LW2) (Perl) . SSL . . (OPTIONS) -ask yes|no|auto . : yes ( ) no ( ) auto ( ). -Add-header header:value HTTP ( ). -check6 IPv6 ( ipv6.google.com nikto.conf ). -Cgidirs dirs CGI. "none" "all" . CGI "/cgi-test/" ( ). -config file nikto.conf. -dbcheck (syntax). -Display options / : 1 ( ) 2 ( ) 3 ( 200/OK) 4 ( URL ) D ( ) E ( HTTP) P ( STDOUT) S ( IP ) V ( ). -evasion technique ( IDS): 1 ( URI) 2 ( ) 3 ( URL) 4 ( ) 5 ( ) 6 ( TAB ) 7 ( URL) 8 ( ) A ( carriage return ) B ( 0x0b ). -followredirects 3xx . -Format format : csv ( ) json ( JSON) htm ( HTML) sql ( SQL ) sqld (SQL MySQL/PostgreSQL) txt ( ) xml ( XML). . -output . : sqld DB_TYPE DB_HOST DB_PORT DB_NAME nikto.conf NIKTO_DB_USER NIKTO_DB_PASS . -Help . -host target () . IP . (-) stdout . nmap -oG . -id id:pass[:realm] (Basic) . "id:password" "id:password:realm" . -ipv4 IPv4. -ipv6 IPv6. -key file . -list-plugins . -maxtime time ( 1h 60m 3600s). -mutate options : 1 ( ) 2 ( ) 3 ( ) 4 ( cgiwrap) 6 ( ). -mutate-options options (mutates). -no404 404. -nocookies . -nointeractive . -nolookup (name lookup) IP. -noslash URL ( '/admin/' '/admin'). -nossl SSL . -Option name=value nikto.conf . -output file ('.' ). . -Format . -Pause seconds ( ) . -Platform platform : nix (/) win () all ( ). -Plugins list (: ALL). -port ports () TCP . . ( 80-90) ( 80,88,90) . 80 . -RSAcert file . -root path /directory . -Save directory ('.' ). -ssl SSL . HTTPS HTTP (timeout) . -timeout seconds . . -Tuning options . . "x" . : o 0 - (File Upload) o 1 - / (Interesting File / Seen in logs) o 2 - / (Misconfiguration / Default File) o 3 - (Information Disclosure) o 4 - (XSS//HTML) o 5 - - (Inside Web Root) o 6 - (Denial of Service) o 7 - - (Server Wide) o 8 - / (Command Execution / Remote Shell) o 9 - (SQL Injection) o a - (Authentication Bypass) o b - (Software Identification) o c - (Remote Source Inclusion) o d - (WebService) o e - (Administrative Console) o x - ( ) -url target / ( -host). -Userdbs type . : all ( ) tests ( db_tests udb_tests). -useragent string (useragent) . -useproxy proxy HTTP http://server:port. -Version . -vhost hostname Host . -404code codes HTTP (). "302,301" . -404string string (). . DSL (DSL MATCHERS) DSL . : o BODY: !BODY: -- . o HEADER: !HEADER: -- HTTP. o COOKIE: !COOKIE: -- HTTP. () o CODE: !CODE: -- HTTP. BODY:login&&!BODY:logout&&HEADER:X-Powered-By&&COOKIE:sessionid (FILES) nikto.conf . . nikto.conf . : o ( /etc/nikto.conf) o ( $HOME/nikto.conf) o ( ./nikto.conf) ${NIKTO_DIR}/databases/db* . ${NIKTO_DIR}/plugins/*.plugin . (wrapper) . ${NIKTO_DIR}/templates . (BUGS) : o SOCKS (AUTHORS) Chris Sullo David Lodge . . CIRT, Inc. LibWhisker (c) 2009 Jeff Forristal (wiretrip.net) . (C) . (SEE ALSO) [1] (NOTES) 1. http://www.cirt.net http://www.cirt.net 2.5 12/24/2025 NIKTO.PL(1)