1. Home
  2. Forums Index
  3. General SEO Issues / Crawler, Spider, and User Agent ID 6:14 am May 21, 2026

Forum Moderators: open

Message Too Old, No Replies

Nikto

Web Security Scanner

         

TorontoBoy

5:40 pm on Jul 22, 2017 (gmt 0)

5+ Year Member Top Contributors Of The Month



Nikto is a web security and vulnerability scanner. It is part of the Kali Linux distribution, popular with hackers. Nikto is available for open source install to any linux computer. Let Nikto loose on your web site and it will perform 6,608 different tests, and 7,790 server requests. More white hat than black hat, Nikto is far from stealthy. In fact you will see Nikto take over your server and therefore your log. With near 7k of tests, Nikto does take time to run, so be patent.

Nikto has a lot of different UAs that look like:
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:000001)

Other UAs include:
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:apache_expect_xss)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:apacheusers: invalid user)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:apacheusers: known user)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:cgi dir check)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:clientaccesspolicy)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:crossdomain)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:embedded detection)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:favicon)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:getinfo)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:headers: Translate-f #1)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:httpoptions: DEBUG)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:httpoptions: OPTIONS *)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:httpoptions: OPTIONS /)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:map_codes)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:multiple_index)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:parked detection)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:Port Check)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:put_del_test: PUT)
Mozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:robots)

A Nikto run will also include a number of POSTS to your server.

[edited by: keyplyr at 4:32 am (utc) on Jul 23, 2017]
[edit reason] remove software link [/edit]

keyplyr

6:34 pm on Jul 22, 2017 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Thanks TorontoBoy

lucy24

10:55 pm on Jul 22, 2017 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Is this something that shows up on its own, or in response to a request on your part?

And is that Nikto as in Klaatu Barada, or something entirely different?

TorontoBoy

11:26 pm on Jul 22, 2017 (gmt 0)

5+ Year Member Top Contributors Of The Month



Someone, the listening PC, downloads and runs the Nikto software against your site. Hopefully the site owner has approved this. You will see these UAs in your logs, but the IP addresses will be the listening PC. The listening PC will receive information about security vulnerabilities, in the form of Common Vulnerabilities and Exposures.

These CVEs can then be cross-referenced and used in programs such as Metasploit in order to attack the vulnerability with an exploit and payload, and, if successful, gain control of your site and server.

[edited by: keyplyr at 4:33 am (utc) on Jul 23, 2017]
[edit reason] remove software link [/edit]

dstiles

10:28 am on Jul 24, 2017 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Included in the Software Centre in (at least) linux Mint 17 (and probably Ubuntu) so potentally common. I have a notion to run it against one of my own servers to check it's as secure as I think. Thanks, TorontoBoy.

From linux software centre's description...

Nikto is a pluggable web server and CGI scanner written in Perl, using rfp's LibWhisker to perform fast security or informational checks.

Features:
- Easily updatable CSV-format checks database
- Output reports in plain text or HTML
- Available HTTP versions automatic switching
- Generic as well as specific server software checks
- SSL support (through libnet-ssleay-perl)
- Proxy support (with authentication)
- Cookies support
 

Join The Conversation

Moderators and Top Contributors

Hot Threads This Week

  1. Home
  2. Forums Index
  3. General SEO Issues / Crawler, Spider, and User Agent ID 6:14 am May 21, 2026