NIKTO: A WEBSERVER SCANNER FOR VULNERABILITY

 WHAT IS NIKTO?

Nikto is an open source (GPL) web server scanner that performs vulnerability scanning against web servers for multiple items, including dangerous files and programs. Nitko checks for outdated versions of web server software.

 Checks for server configuration errors, Checks for CGI vulnerabilities, and Captures and prints any cookies received. 

MAIN FEATURES:

Nikto is free to use, open source and frequently updated

Can be used to scan any web server (Apache, Nginx, Lighttpd, Litespeed, etc.)

Scans against 6,700+ known vulnerabilities and version checks for 1,250+ web servers (and growing)

Scans for configuration-related issues such as open index directories

SSL certificate scanning

Ability to scan multiple ports on a server with multiple web servers running

Ability to scan through a proxy and with http authentication

Ability to specify maximum scan time, exclude certain types of scans and unusual report headers seen as well.

KALI BASED INSTALLATION:

1. First, refresh your APT package lists and install any pending updates:

sudo apt-get update && sudo apt-get upgrade

2. Next, install the Nikto web scanner with the command:

sudo apt-get install nikto -y

3. To verify that the Nikto website vulnerability scanner is installed and ready for use, run the command:

nikto

4. Which should then give you a similar output which lists the version of Nikto installed:

root@home:~# nikto

- Nikto v2.1.5

HOW NIKTO CAN HELP?

Identify vulnerabilities: Helps identify potential risks and vulnerabilities in web applications and servers 

Mitigate risks: Helps mitigate potential risks and vulnerabilities 

Strengthen security: Helps strengthen customer trust by ensuring data protection 

Prevent attacks: Helps prevent malicious attacks on web servers