sullo/nikto
Nikto
Nikto is an open-source HTTP security auditing tool and web server vulnerability scanner. It functions as a reconnaissance engine designed to identify insecure server options, outdated software, and common vulnerabilities by analyzing HTTP responses.
The project differentiates itself through capabilities for intrusion detection evasion and web server fingerprinting. It uses request-level encoding and timing spacers to bypass security filters and employs signature-based identification to determine specific server software versions and misconfigurations.
The scanner covers broad capability areas including dictionary-based resource discovery to find hidden files and directories, proxy-based traffic routing for anonymizing the scan origin, and a plugin-based architecture for custom scan extensions. Findings are processed through a reporting system that supports multi-format data serialization for external analysis.
The tool includes a portable execution mode that allows the engine to run from a self-contained directory without requiring system-wide installation.
Features
- Web Vulnerability Scanning - Identifies security flaws, outdated software, and common vulnerabilities by probing web servers for known risks.
- Content Discovery - Finds unlinked files and directory names through dictionary attacks and brute forcing to uncover hidden content.
- Service Response Signatures - Determines server versions and software by matching response headers and banners against a database of known signatures.
- Dictionary-Based Resource Discovery - Identifies hidden files and directories by iterating through pre-defined lists of common names and paths.
- Infrastructure Misconfiguration Detectors - Identifies insecure server options and configuration errors that could expose the system to attack.
- Security Auditing Tools - Identifies insecure server options and common vulnerabilities by analyzing HTTP responses.
- Vulnerability Scanners - Provides a portable utility for detecting web vulnerabilities with support for custom plugins and proxy routing.
- Server Fingerprinting - Uses signature-based identification to determine specific server software versions and fingerprints.
- Resource Discovery Brute-Forcing - Employs dictionary-based attacks to discover hidden files and directories on the target web server.
- Reconnaissance Tools - Discovers hidden directories and identifies server software versions through dictionary attacks.
- Web Server Fingerprinting - Probes targets to determine specific server software versions and detect insecure server misconfigurations.
- Network Traffic Proxying - Directs network requests through intermediate servers to anonymize the scanner origin or bypass network firewalls.
- Custom Security Scan Extensions - Provides an extensibility system for adding custom tests and plugins to detect specific vulnerabilities.
- IDS Evasion Techniques - Uses encoding techniques and request spacers to bypass security filters and mask scanning activity.
- Security Software Evasion - Implements request-level encoding and timing spacers to bypass security filters and intrusion detection systems.
- HTTP Request Evasion - Bypasses security filters by modifying request encoding and inserting timing spacers between network probes.
- Vulnerability Scanners - Web server vulnerability scanner.
- Web Application Scanners - Comprehensive web server scanner for known vulnerabilities.
- Dynamic Analysis - Web server security scanner.
- Infrastructure Scanners - Classic web server scanner for identifying dangerous files and outdated software.
- Seguridad y privacidad - Web server scanner for identifying vulnerabilities.
- Security Tools - Nikto web server scanner
- Vulnerability Analysis - Web server scanner for identifying dangerous files and outdated software.
- Vulnerability Scanners - Web server vulnerability scanner.
- Vulnerability Scanning and Auditing - Web server scanner for comprehensive security testing.
- Web Vulnerability Scanners - Scanner for identifying web server vulnerabilities.
