Nikto Web Scanner

Scan web servers for vulnerabilities and misconfigurations using nikto.

Tool Status

• Tool installed: !command -v nikto > /dev/null 2>&1 && echo "YES -- $(nikto -Version 2>/dev/null | head -1)" || echo "NO -- Install: brew install nikto (macOS) | apt install nikto (Debian/Ubuntu)"
• Wrapper scripts available: !test -f scripts/nikto/scan-specific-vulnerabilities.sh && echo "YES -- use wrapper scripts for structured JSON output" || echo "NO -- using standalone mode with direct commands"

Mode: Wrapper Scripts Available

If wrapper scripts are available (shown as YES above), prefer these commands. They provide structured JSON output and educational context.

Vulnerability Scanning

• bash scripts/nikto/scan-specific-vulnerabilities.sh <target> -j -x -- Scan for specific vulnerability types using tuning flags

Multi-Target Scanning

• bash scripts/nikto/scan-multiple-hosts.sh <hostfile> -j -x -- Scan multiple web servers from a host list or nmap output