Kali Linux 2018: Assuring Security by Penetration Testing - Fourth Edition

Nikto

Nikto is a basic web server security scanner. It scans and detects the vulnerabilities on web applications usually caused by misconfigurations on the server, default and insecure files, and outdated server applications. As Nikto is purely built on LibWhisker2, it supports out-of-the-box cross-platform deployment, SSL, host authentication methods (NTLM/Basic), proxies, and several IDS-evasion techniques. It also supports sub-domain enumeration, application security checks (XSS, SQL injection, and so on), and is capable of guessing authorization credentials using a dictionary-based password attack.

To use nikto, you can navigate to the Applications menu | 03 – Web Application Analysis | Web Vulnerability Scanner | nikto, or in your Terminal ...