Mastering Kali Linux for Web Penetration Testing

Next steps with Nikto

Once we have a full array of DNS records and other relevant intelligence, we typically shift into scanning for vulnerabilities (also known as vulns). Nikto is my preferred scanner and I'll usually keep these results for tuning tools that scan vulnerabilities but also pivot into later phases. Nikto exports into several file types, including HTML, XML, TXT, and CSV, and using it begins the active recon phase.

Because it is an active tool, its use constitutes a legally provoking act, and as such, it is advised to only use it in practice against lab machines and for systems where you have explicit permission to test. I don't have enough collateral for posting bail on your behalf.

To use Nikto, we'll need to identify the ...