NIKTO ON KALI LINUX

Nikto On Kali Linux

NIKTO ON KALI LINUX 
NIKTO ON KALI LINUX

INTRODUCTION
 
  • Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6500 potentially dangerous files/CGIs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers.
  • It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software.
  • Nikto is written by Chris Sullo and David Lodge.
HOW TO OPEN NIKTO ON KALI LINUX 
  • Kali Linux > Vulnerability Analysis > Misc Scanners > nikto
  • See the below image for more details -
NIKTO
NIKTO 
NIKTO OPENED
NIKTO  OPENED
NIKTO  OPENED
NIKTO HELP 
  • For help enter the command : nikto -help  
  • See the below image for more details -
NIKTO  HELP
NIKTO  HELP
CHECK DATABASE 
  • Command Used  : nikto -dbcheck
NIKTO  CHECK DATABASE
NIKTO  CHECK DATABASE

NIKTO UPDATE 
  • Command used to update is shown below -
  • Command : nikto -update 
  • See the below image for more details -
NIKTO  UPDATE
NIKTO  UPDATE

NIKTO VERSION 
  • To check nikto version , enter the command 
  • Command : nikto -Version 
  • See the below image for more details -
NIKTO  VERSION
NIKTO  VERSION

NIKTO LIST PLUGINS 
  • If you want to see the list of plugins , then you have to enter this command .
  • Command : nikto -list-plugins
  • See the below image for more details -
NIKTO  LIST PLUGINS
NIKTO  LIST PLUGINS

SCANNING FOR VULNERABILITIES
  • This is the live example image that i have perform in my lab . 
  • Command used : nikto -h http://www.abc.com
  • I hide ip address , hostname for security purpose . 
  • See the below image you will find the vulnerabilities like this image shows the  ' Frontpage ' vulnerability. 
  • See the below image for more details -
NIKTO STARTED
NIKTO STARTED

STATUS : INTERACTIVE FEATURE OF NIKTO 

  • Nikto contains several options which can be changed during an active scan.
During an active scan, pressing any of the keys below will turn on or off the listed feature or perform the listed action. Note that these are case sensitive.
  1. SPACE - Report current scan status
  2. v - Turn verbose mode on/off
  3. d - Turn debug mode on/off
  4. e - Turn error reporting on/off
  5. p - Turn progress reporting on/off
  6. r - Turn redirect display on/off
  7. c - Turn cookie display on/off
  8. o - Turn OK display on/off
  9. a - Turn auth display on/off
  10. q - Quit
  11. N - Next host
  12. P - Pause
OPTION 1 : SPACE : Press space to see the status .
  • See the below image how it look like .
NIKTO SPACE
NIKTO SPACE
 
OPTION 12: PAUSE
  • To pause the scan simply press Ctrl+p.
  • When you successfully pause the scan screen  will look like this ( as shown below ).
  • See the below image for more help .
NIKTO PAUSE

  • More examples will be added soon . If you wanna try more things then go through with manual guide.
  • Manual Guide : http://www.cirt.net/nikto2

Comments

Popular Posts