Name: Nikto
Rating: 10 (2 reviews)
Author: Open Source

Customer Training

Help Desk

Web and Video Conferencing

Customer Support

Batch Management Software

Functional Testing

Mobile App Development

Development

Business Intelligence (BI)

Collaboration

Data Extraction

File Sharing

Policy Management

Privacy Policy Generators

Statistical Analysis

Enterprise

Accounting

Accounts Payable

Crypto Tax

Subscription Management

Finance and Accounting

Applicant Tracking

Corporate Learning Management

HR Management

Payroll

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

API Management

Business Internet Service Providers (ISPs)

Cloud Storage

Configuration Management

Consulting and Advisory Services

Data Analytics  and BI Services

Embedded Business Intelligence (BI)

Fraud Detection

Infrastructure-as-Code (IaC)

Integration Platform as a Service (iPaaS)

IoT Device Management

Managed Public Cloud Infrastructure

Network Performance Monitoring

Secure Email Gateway

Sensitive Data Discovery

System Monitoring

Technology Scouting Software

Tower Servers

Web Portal

Website Hosting

WiFi Hotspot

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Audience Engagement

Audio Editing

Content Management

Email Marketing

Headless CMS

Marketing Automation

Press Release Management

Product Intelligence

Social Media Advertising

Social Media Management

Survey & Forms Building

Web Analytics

Marketing

Project Management

Professional Services

Customer Relationship Management (CRM)

Government Contracting

Quote to Cash

Sales Enablement

eCommerce Analytics

Sales

Cloud Access Security Brokers

Secure Access Service Edge (SASE)

Security

Commercial Drone

Direct Secure Messaging

Geographic Information

Medical Billing

Oil and Gas

Vertical-Specific

root

Overview

Pricing

ProductDemos

Features

ProductDetails

Comparisons

ReviewsAndRatings

large

medium

Wireshark is a free and open source network troubleshooting tool.

Wireshark

Packet Analyzer

Open Source

small

Metasploit is open source network security software described by Rapid7 as the world’s most used penetration testing framework, designed to help security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness.

Metasploit

Penetration Testing

Rapid7

The Burp Suite, from UK-based alcohol-themed software company PortSwigger Web Security, is an application security and testing solution.

PortSwigger Burp Suite

PortSwigger Web Security

John the Ripper is a penetration testing tool used to find and crack weak passwords.

John the Ripper

Top Rated 2024

Veracode is a software security firm that identifies flaws and vulnerabilities across the software development lifecycle. Veracode’s Software Security Platform uses advanced AI algorithms trained on vast datasets of code, for more precise identification and rectification of security flaws.

Veracode

Application Security

Titania Nipper

Vulnerability Management

Configuration Monitoring

Vulnerability Classification

Titania Ltd

AcuSensor from Maltese company Acunetix is application security and testing software.

Websites Scanned: 5

Websites Scanned: 6-10

Websites Scanned: 11-20

Websites Scanned: 21-35

Websites Scanned: 36-50

Websites Scanned: Over 50

Acunetix by Invicti

Invicti Security

Since 2004, Mandiant has been a partner to security-conscious organizations. Mandiant’s approach helps organizations develop more effective and efficient cyber security programs and instills confidence in their readiness to defend against and respond to cyber threats.

Mandiant Advantage Security Validation

Security Validation

Mandiant Advantage Security Validation Verodin

Mandiant

Hashcat is a password recovery tool that can also be used in security testing (e.g. password cracking, exposing flaws).

Hashcat

Office Migration and Repair

Hydra is a password cracking tool used for penetration testing.

Hydra

Nikto is an open source fast (not stealthy) vulnerability testing tool that can be used in penetration testing or purple team exercises.

Nikto

Application Security Testing is a key element of ensuring that web applications remain secure. Various tools and managed services exist to provide continuous testing, besides application security platforms that include app testing as part of their functionality. Penetration Testing (Pen Testing) Tools provide means to conduct authorized, ethical hacking of applications in production, to locate vulnerabilities that may be exploited by hackers.

This is a quick demo on obtaining and using Nikto to test the security of your web server.  I have chosen to use apache for the web server being scanned and as always my preference is to run on Linux, specifically Ubuntu 11.04.  

There is a slight synchronization issue between the audio and video in the last 60 seconds.  

Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6400 potentially dangerous files/CGIs, checks for outdated versions of over 1000 servers, and version specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Scan items and plugins are frequently updated and can be automatically updated.

Nikto is not designed as an overly stealthy tool. It will test a web server in the quickest time possible, and is fairly obvious in log files. However, there is support for LibWhisker's anti-IDS methods in case you want to give it a try (or test your IDS system).

Not every check is a security problem, though most are. There are some items that are "info only" type checks that look for things that may not have a security flaw, but the webmaster or security engineer may not know are present on the server. These items are usually marked appropriately in the information printed. There are also some checks for unknown items which have been seen scanned for in log files.

Nikto is written by Chris Sullo and David Lodge.
http://cirt.net/Nikto2

Nikto Web Server Scanner Demo by NetcladSecurity

Slovak Band DEMO 6 - Nikto Nezna

Martin Gabor Demo 2020 Cower Nikto Nezna Jak To boly.

Nikto Demo

nikto demo

NIKTO+LOG DEMO

Likelihood to Recommend

Reviews

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Home

Penetration Testing Tools

Qualys TruRisk Platform

Archer Integrated Risk Management Platform

Microsoft Teams

Tenable Nessus

It is one of the best open-source command line web server vulnerability scanner tools available in the market as of now. I have been using this tool for the last 7 years It also checks for checking server configuration items such as the presence of multiple index files, and HTTP server options, and will attempt to identify installed web servers and software.

Product Usage

Pros and Cons

Well known tool
Source code available
Wweb server vulnerability scanner

Things done well

Can be made GUI based for ease of users
User community should be there
Development and support should be available

Things done poorly

Nikto is well suited for scanning web server-related vulnerabilities for small and medium enterprises. We can utilise it for checking server default files and security misconfigurations.  It is not suited well for some users because it is CLI based tool and not a GUI based. Also, community and OEM support are not available for this tool.

Identifying common web server vulnerabilities
Open source tool
Identify outdated servers and programs
Not a very costly product

Most Important Features 3.4.21

Improved security posture of organisation.
Improved in regulatory and corporate compliance.
Easy to use result in adaptation of this tool by business users.

Return on Investment

Alternatives

Qualys Cloud Platform, Microsoft Teams, Archer Integrated Risk Management Platform

Other Software Used

Senior consultant

Nikto 2022-06-22 12:22:53

Operating Systems	Unspecified
Mobile Application	No

Nikto

Overview

What is Nikto?

One of the best web server vulnerability scanner tool

Pricing

Nikto

What is Nikto?

Entry-level set up fee?

Offerings

Would you like us to let the vendor know that you want pricing?

Alternatives Pricing

Wireshark

What is Wireshark?

Product Demos

NIKTO+LOG DEMO

nikto demo

Nikto Demo

Martin Gabor Demo 2020 Cower Nikto Nezna Jak To boly.

Slovak Band DEMO 6 - Nikto Nezna

Nikto Web Server Scanner Demo by NetcladSecurity

Product Details

What is Nikto?

Nikto Technical Details

Comparisons

Compare with

Wireshark

Metasploit

PortSwigger Burp Suite

John the Ripper

Veracode

Titania Nipper

Acunetix by Invicti

Mandiant Advantage Security Validation

Hashcat

Hydra

Reviews and Ratings

Reviews

No reviews found