list-plugins List all available plugins, perform no testing id+ Host authentication to use, format is id:pass or id:pass:realm (if not specified the format will be taken from the file extension passed to -output) followredirects Follow 3xx redirects to new location dbcheck Check database and other key files for syntax errorsĪ Use a carriage return (0x0d) as a request spacerī Use binary value 0x0b as a request spacer Cgidirs+ Scan these CGI dirs: 'none', 'all', or values like '/cgi/ /cgi-a/' check6 Check if IPv6 is working (connects to or value set in nf)

ask+ Whether to ask about submitting updates Scan web server for known vulnerabilities :~# nikto -h + 371 requests: 0 error(s) and 9 item(s) reported on remote host + Allowed HTTP Methods: GET, HEAD, POST, OPTIONS Apache 2.0.65 (final release) and 2.2.29 are also current. + Apache/2.2.22 appears to be outdated (current is at least Apache/2.4.12). The following alternatives for 'index' were found: index.html + Apache mod_negotiation is enabled with MultiViews, which allows attackers to easily brute force file names. + Uncommon header 'tcn' found, with contents: list

+ 'robots.txt' contains 1 entry which should be manually viewed. + No CGI Directories found (use '-C all' to force check all possible dirs)

This could allow the user agent to render the content of the site in a different fashion to the MIME type + The X-Content-Type-Options header is not set. This header can hint to the user agent to protect against some forms of XSS + The X-XSS-Protection header is not defined. + The anti-clickjacking X-Frame-Options header is not present. + Server leaks inodes via ETags, header found with file /, inode: 287, size: 11832, mtime: Fri Feb 2 15:27:56 2018 DARK Tool Documentation: Nikto Usage Example - Nikto v2.1.6

Advanced ip scanner kali linux