webapp-nikto

name	webapp-nikto
description	Web server vulnerability scanner for identifying security issues, misconfigurations, and outdated software versions. Use when: (1) Conducting authorized web server security assessments, (2) Identifying common web vulnerabilities and misconfigurations, (3) Detecting outdated server software and known vulnerabilities, (4) Performing compliance scans for web server hardening, (5) Enumerating web server information and enabled features, (6) Validating security controls and patch levels.
version	0.1.0
maintainer	[e-mail]
category	offsec
tags	["web-security","vulnerability-scanner","nikto","server-security","web-assessment"]
frameworks	["OWASP","CWE","NIST"]
dependencies	{"packages":["nikto"],"tools":["perl"]}
references	["https://cirt.net/Nikto2","https://github.com/sullo/nikto","https://owasp.org/www-project-web-security-testing-guide/"]

Nikto Web Server Scanner

Overview

Nikto is an open-source web server scanner that performs comprehensive tests against web servers for multiple security issues including dangerous files, outdated software versions, and server misconfigurations. This skill covers authorized security assessments of web servers and applications.

IMPORTANT: Nikto generates significant traffic and is easily detected. Only use with proper written authorization on systems you own or have explicit permission to test.

Quick Start

Basic web server scanning:

# Scan single host
nikto -h http://example.com

# Scan with SSL
nikto -h https://example.com

# Scan specific port
nikto -h example.com -p 8080

# Scan multiple ports
nikto -h example.com -p 80,443,8080

Core Workflow

Web Server Assessment Workflow

Progress: [ ] 1. Verify authorization for web server testing [ ] 2. Identify target web servers and ports [ ] 3. Perform initial reconnaissance scan [ ] 4. Run comprehensive vulnerability assessment [ ] 5. Analyze and categorize findings [ ] 6. Document vulnerabilities with remediation [ ] 7. Generate and deliver security report [ ] 8. Verify no testing artifacts remain

Work through each step systematically. Check off completed items.

1. Authorization Verification

CRITICAL: Before any web server scanning:

• Confirm written authorization from web server owner
• Verify scope includes web server vulnerability assessment
• Understand acceptable scanning windows
• Document emergency contact procedures
• Confirm no production impact restrictions

2. Basic Scanning

Perform basic web server scans:

# Standard scan
nikto -h http://example.com

# Scan with specific User-Agent
nikto -h http://example.com -useragent "Mozilla/5.0..."

# Scan through proxy
nikto -h http://example.com -useproxy http://proxy:8080

# Scan with authentication
nikto -h http://example.com -id username:password

# SSL/TLS scan
nikto -h https://example.com -ssl

# Force SSL even on non-standard ports
nikto -h example.com -p 8443 -ssl

3. Advanced Scanning Options