hide2024-outline

So you have Nikto going, but you’re not really sure what’s happening, or how long the scan is going to take?

No problem.

Nikto has several interactive features you can use while a scan is in progress. If you just want to find out the current status, simply press the space bar to find out what the program is doing, how many requests have been made, and a guesstimate of how long the rest is going to take. You can automate this output every 500 requests by turning on progress reporting by pressing ‘p’ (similarly, pressing it again will turn it off).

hide2024-outline

When running Nikto, you have the ability to save all findings in plaintext files by using the -Save option. This option takes one argument, a directory name, which will be used or created to save all findings, one per text file. 

Each file will be named in the following format: HOSTNAME_PORT_DATE_TESTID.txt

hide2024-outline

It's no secret that the -update option hasn't done much in quite a while. This is not because the Nikto project is dead or idle... it's simply because the update/release process requires manual work from humans (there is an open ticket on replacing the update system entirely).

In the meantime: run Nikto directly from the git repo.

This is your best bet for keeping completely up-to-date, benefitting from the latest checks and enhancements, and keeping your installation running smoothly.

GIT Extractor

I promised last time that I would do a git extractor and, yes, I came across a site in the real world that used git to manage its releases. A quick script later and I had its web.config file and all of the internal goodies.

There's a much more detailed write up and the tool at the corporate blog of the company I work for.

Mercurial Extractor

This is an expansion of part of a talk I did for OWASP East Midlands.

If you actually read the articles posted up here you may have read about the svnpristine extractor that was written in October 2012 and not released until February 2013 (hey, it takes me a while).

Tools: 
Tools & Utils

SVN Pristine Extractor

So, you're sat on a customer site, and nothing is going right: patching is up to date, passwords are all set to complex values, user input is validated, you have to wear a suit and even the coffee doesn't taste very nice.

Oh, but wait! That scan against the internal web server reveals that:

hide2024-outline

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • next ›
  • ss梯子2022年
                  哇哇加速器pc版下载,哇哇加速器npv,哇哇加速器vnp,哇哇加速器vqn  4kxray机场安卓下载,4kxray机场vqn,4kxray机场vnp,4kxray机场免费试用  优米网络下载地址,优米网络npv,优米网络免费试用,优米网络7天试用  quickq官网入口下载,Quickq官网,quickq苹果版ios,quickq官方网站  萤火虫加速器破解版,萤火虫加速器密钥,极风加速器最新版,萤火虫加速器有什么用  蘑菇加速器安卓下载,蘑菇加速器mac下载,蘑菇加速器npv,蘑菇加速器免费永久加速