Content-type: text/html
Man page of NIKTO
NIKTO
Section: User Commands (1)
Updated: 2008-03-26
Index
Return to Main Contents
NAME
nikto - web security scanner
SYNOPSIS
nikto
-h host [options]
DESCRIPTION
nikto is a web server assessment tool. It is designed to find
various default and insecure files, configurations and programs on any
type of web server. It is designed to find many types of web server
problems including server and software misconfigurations, default
files and programs, insecure files and programs and outdated servers
and programs.
OPTIONS
You can find complete documentation of all options in the file
/usr/share/doc/nikto/nikto_manual.html
- -h, -host
-
Host(s) to target. Can be an IP address, hostname or text file of hosts.
- -Cgidirs
-
Scan these CGI directories in place of those specified in config.txt.
- -config
-
Specify an alternative config file in place of
/etc/nikto/config.txt
- -dbcheck
-
Check the scan databases for syntax errors.
- -evasion
-
Specify the LibWhisker IDS evasion technique to use. See the complete
manual for possible values.
- -findonly
-
Only discover HTTP(S) port and server headers.
- -Format
-
Save the output file in one of the specified format (csv, htm, txt or xml).
- -id
-
ID and password to use for authentication.
- -mutate
-
Specify mutation technique. See the complete manual for possible values.
- -nolookup
-
Do not perform name lookups on IP addresses.
- -output
-
Write report to the specified file.
- -p, -port
-
Which port(s) to test. Default to 80.
- -Pause
-
Delay in seconds between each test.
- -Display
-
Control the output of Nikto. See the complete manual, chapter 5, for
possible values.
- -root
-
Prepend the specified value to the beginning of every request.
- -ssl
-
Only test SSL on the ports specified.
- -Single
-
Perform a single request. See the complete manual for more information.
- -timeout
-
Delay in seconds before timeout.
- -Tuning
-
Specify which kind of tests to run against target. See the complete
manual for possible values.
- -update
-
Update the plugins and databases from cirt.net.
- -useproxy
-
Use the HTTP proxy defined in config.txt.
- -Version
-
Display versions of Nikto, plugins and database.
- -vhost
-
Specify the Host header to be sent with each request.
- -Help
-
Display extended help information.
FILES
- /etc/nikto/config.txt
-
Configuration file for nikto
- /var/lib/nikto/plugins
-
Plugins for nikto
AUTHOR
nikto was written by Chris Sullo.
This manual page was written by Vincent Bernat <bernat@luffy.cx>,
for the Debian project (but may be used by others).
Index
- NAME
-
- SYNOPSIS
-
- DESCRIPTION
-
- OPTIONS
-
- FILES
-
- AUTHOR
-
This document was created by
man2html,
using the manual pages.
Time: 03:41:11 GMT, September 24, 2010