Nikto Web Scanner is a Web server scanner that tests Web servers for dangerous files/CGIs, outdated server software and other problems. It performs generic and server type specific checks. It also captures and prints any cookies received.

The Nikto code itself is Open Source (GPL), however the data files used to drive it are not.

Chris Sullo

Chris Sullo

Chris Sullo is the CFO and Treasurer of Open Security Foundation. He is a distinguished security expert known as the author of Nikto scanner. He is specialised in web-security and pen-testing.- OSVDB :...

, the CFO of Open Security Foundation has written this scanner for vulnerability assessment.

Functions

Nikto performs comprehensive tests against web servers for multiple items, including over 6400 potentially dangerous files/CGIs, versions on over 1200 servers, and version specific problems on over 270 servers.

Variations

There are some variations of Nikto, one of which is MacNikto. MacNikto is an AppleScript GUI shell script wrapper built in Apple's Xcode and Interface Builder, released under the terms of the GPL. It provides easy access to a subset of the features available in the Open Source, command-line driven Nikto web security scanner, installed along with the MacNikto application.

External links

• CIRT Nikto Page