Developer's Guide to Web Application Security

perl nikto.pl -update

By typing this command, you are first telling the server to use PERL.EXE on

your server to run the file nikto.pl.The –update switch is then used to tell nikto.pl

to run this command and update the database. As we’ll see in the next section, many

switches are used with Nikto to perform different tests or tasks. Nikto will then

connect to www.cirt.net and download an up-to-date version of the

scan_database.db database file, and any plug-in files that have been updated. Upon

doing this, you will have the latest version of the Nikto database, complete with all

the information to find the most recent misconfigurations, insecure or default ...