Nikto : Vulnerability Scanner COMMANDS

Jawstar
1 min readJan 4, 2025

--

Auth : Jawstar

Nikto is a web server scanner that identifies vulnerabilities.

Basic Commands:

1. Scan a Website:

Command: nikto -h http://192.168.1.5

Use Case: Scan a web server for known vulnerabilities.

Example: Identify potential security issues on a web server.

2. Scan with SSL:

Command: nikto -h https://192.168.1.5

Use Case: Scan a web server using HTTPS.

Example: Test a secure web server for vulnerabilities.

3. Save Scan Results to a File:

Command: nikto -h http://192.168.1.5 -o results.txt

Use Case: Save the output of the scan to a text file.

Example: Document the results of a web server scan for future reference.

4. Scan Multiple Ports:

Command: nikto -h http://192.168.1.5 -p 80,443,8080

Use Case: Scan a web server on multiple ports.

Example: Check for vulnerabilities on all web services running on a server.

5. Scan Specific Directories:

Command: nikto -h http://192.168.1.5 -Tuning 2

Use Case: Focus the scan on interesting directories and files.

Example: Target sensitive directories like /admin or /config.

6. Run Nikto in Quiet Mode:

Command: nikto -h http://192.168.1.5 -quiet

Use Case: Run the scan without verbose output.

Example: Perform a quiet scan with minimal output.

Support me Guys

HAPPY HUNTING

Medium

--

--

Jawstar
Jawstar

Written by Jawstar

I'm a Penetration Tester, Cyber security researcher & Top 1% in Tryhackme

No responses yet