If you want to test an SSL host and will run into the following error, you need to install additional libraries. See the documentation for a full list of features and how to use them. > perl -o report.html -Format htm -host įinally you will find a report.html file in the directory you executed the command. To determine what items exactly found on the remote server, you can use the following switch > perl -Tuning 123bde -host -sslĪfter a scan you will find at the end how many requests were run against the web server and how many vulnerabilities (items on remote host) where found. Show Help, you can also use the option -help to list all options. The actual Nikto Perl script, you will find inside the program folder. Help is available from other Windows Perl developers on the #win32 irc channel on (see website for access through a browser).

Strawberry Perl: A 100% Open Source Perl for Windows that is exactly the same as Perl everywhere else this includes using modules from CPAN, without the need for binary packages.

In order to use Nikto on Windows, you first need to install the latest version of Perl as mentioned above if not already installed.Īfter that you can download Nikto by using also the following git clone command as with Linux. You can also use on most distributions the install program as it is available by default in their system repositories.īy installing Nikto this way, you do not have to prefix with the perl command. In contrast to Windows, Perl is installed on most Linux distributions by default. The installation for Linux and Windows can be done by using the git clone command.Īfter that you can go to the program directory where you will find the perl script. However, there is support for LibWhisker’s anti-IDS methods in case you want to give it a try (or test your IDS system). It will test a web server in the quickest time possible, and is obvious in log files or to an IPS/IDS. Nikto is not designed as a stealthy tool. Scan items and plugins are frequently updated and can be automatically updated. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Nikto is an Open Source ( GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. Nikto is a free software command-line vulnerability scanner that scans webservers for. In this post I want to show how to install and using the nikto command-line vulnerability scanner.

Install Nikto