Nikto

Description

Nikto is an open-source web server scanner that tests for over 6,700 potentially dangerous files and programs, outdated server versions, and version-specific problems. It checks for server configuration issues including multiple index files, HTTP server options, and identifies installed web servers and software through headers and favicons.

Use Cases

• Web server misconfiguration detection
• Identifying outdated software and known vulnerabilities
• Pre-engagement web application surface assessment

Attack Phases

MITRE ATT&CK Techniques (2)