nikto
TLDR
Scan web server
$ nikto -h [http://example.com]
Scan specific port$ nikto -h [example.com] -p [8080]
Scan with SSL$ nikto -h [https://example.com]
Output to file$ nikto -h [example.com] -o [report.html] -Format htm
Scan multiple hosts$ nikto -h [hosts.txt]
Update database$ nikto -update
Tune scan type$ nikto -h [example.com] -Tuning [x]
SYNOPSIS
nikto [options]
DESCRIPTION
nikto is a web server vulnerability scanner. It checks for dangerous files and misconfigurations.
The tool tests for thousands of issues. Identifies outdated software and known vulnerabilities.
nikto scans web servers.
PARAMETERS
-h HOST
Target host/URL.-p PORT
Target port(s).-o FILE
Output file.-Format TYPE
Output format (htm, txt, csv, xml).-Tuning TYPE
Scan tuning options.-update
Update scan database.--help
Display help information.
CAVEATS
Authorized testing only. Noisy scanner. Perl-based tool.
HISTORY
Nikto was created by Chris Sullo as an open source web server scanner for security testing.
