Security Automation with Ansible 2

Nikto – web server scanner

Nikto is an open source web server assessment tool written in Perl to perform security configuration checks and web server and application scanning using its checklist of items to scan.

Some of the checks Nikto does includes the following:

• Server and software misconfigurations
• Default files and programs
• Insecure files and programs
• Outdated servers and programs

Nikto setup and execution Ansible playbook looks like the following:

- name: Nikto Playbook  hosts: scanner  remote_user: ubuntu  become: yes  vars:    domain_name: idontexistdomainnamewebsite.com # Add the domain to scan    report_name: report.html    tasks:    - name: installing pre requisuites      apt:        name: "{{ item }}"        state: present        update_cache: yes      with_items: - git ...