

dbcheckĬheck the scan databases for syntax errors. Specify an alternative config file to use instead of the config.txt located in the install directory. If this is option is not specified, all CGI directories listed in config.txt will be tested.

A literal value for a CGI directory such as "/cgi-test/" may be specified (must include trailing slash). Special words "none" or "all" may be used to scan all CGI directories or none, (respectively). A brief version of this text is available by running Nikto with the -h (-help) option. Optionsīelow are all of the Nikto command line options and explanations. It can be updated automatically from the command-line, and supports the optional submission of updated version data back to the maintainers. It supports SSL, proxies, host authentication, IDS evasion and more. Nikto is built on LibWhisker (by RFP) and can run on any platform which has a Perl environment. usr/local/bin/nikto DescriptionĮxamine a web server to find potential problems and security vulnerabilities, including: Update to the latest plugins and databases: perl -update.Scan multiple ports in the same scanning session: perl -h 192.168.0.1 -p 80,88,443.Scan ports and protocols with full URL syntax: perl -h.Specify the port number when performing a basic scan: perl -h 192.168.0.1 -p 443.Perform a basic Nikto scan against a target host: perl -h 192.168.0.1.Scan web server for known vulnerabilities Examples (TL DR)
