Nikto Description
Nikto, an Open Source (GPL), web server scanner, performs extensive tests against web servers for multiple items. It checks for over 6700 potentially hazardous files/programs, outdated versions of more than 1250 servers, as well as version-specific problems on more than 270 servers. It will also check for server configuration items, such as multiple index files and HTTP server options. It will also attempt to identify any installed web servers or software. Scan items and plugins can be automatically updated. Nikto is not intended to be a stealthy tool. It will quickly test a web server and make it visible in log files and to an IPS/IDS. If you're interested in giving it a shot (or testing your IDS system), LibWhisker supports anti-IDS methods. While not all checks are a security issue, most are.
Nikto Alternatives
Acunetix
Acunetix is the market leader for automated web application security testing and is the preferred tool for many Fortune 500 customers. Acunetix can detect and report on a wide range of web application vulnerabilities. Acunetix's industry-leading crawler fully supports HTML5/JavaScript and Single-page applications. This allows auditing of complex, authenticated apps. Acunetix is the only technology that can automatically detect out of-band vulnerabilities. It is available online as well as on-premise. Acunetix includes integrated vulnerability management capabilities to help enterprises manage, prioritize and control all types of vulnerability threats. These features are based on business criticality. Acunetix is compatible with popular Issue Trackers, WAFs, and is available online on Windows, Linux, and Online
Learn more
Nsauditor Network Security Auditor
Nsauditor network security auditor is a powerful tool that scans networks and hosts for potential vulnerabilities and provides security alerts. Vulnerability Scanning Software and Network Security Auditing Software Nsauditor network auditor scans the enterprise network for any possible hacker methods and generates a report. Network Security Auditing Software, Vulnerability Scaner Network Security Auditing Software, and VulnerabilityScanner Nsauditor Network Auditing Software significantly reduces the cost of managing enterprise networks. This software allows IT personnel and system administrators to gather information from all computers on the network without installing any server-side programs and creates a report detailing potential problems.
Learn more
DefectDojo
DefectDojo is available for you to try. Review the demo and log in with your sample credentials. DefectDojo is available at Github. It has a setup script that makes it easy to install. You can download a docker container that contains a pre-built version DefectDojo. You can track when vulnerabilities are added to a build and when they are remediated. DefectDojo's API makes it easy to track when a product has been assessed. It also tracks security tests that are performed on each build. DefectDojo can track every security test on-demand, including the build-id and commit hash. There are many reports available for testing, engagements, products. To track the most important products in your company, products can be grouped together into critical products. Developers can easily combine similar findings into one finding, rather than multiple ones.
Learn more
N-Stalker
N-Stalker Web Application Security Scanner (X) is a sophisticated Web Security Assessment tool for your web applications. N-Stalker incorporates the well-known N-Stealth HTTP Security Scanner and its 39,000 Web Attack Signature databases. It also has a patent-pending Component-oriented Web Application Security Assessment tech. This makes N-Stalker a must-have security tool for developers, system/security admins, IT auditors, and staff. The most comprehensive package for developers, IT security professionals and governance professionals. It includes security checks for web applications and server infrastructure. This tool is for IT professionals and Web Server Administrators. It can help you assess the security of your web server infrastructure. A community edition that includes a limited set of security checks for both web server infrastructure and application.
Learn more
Integrations
Company Details
Company:
CIRT.net
Website:
cirt.net/Nikto2
Media
Recommended Products
Extended Threat Intelligence | SOCRadar
Enterprises need full-spectrum cyber intelligence—beyond social media and the dark web. SOCRadar monitors cloud buckets, dark web leaks, and external threats in real time. Automate takedowns, detect brand impersonations, and stay ahead of evolving attacks. Strengthen your security with Extended Threat Intelligence.
Product Details
Platforms
SaaS
Type of Training
Documentation
Customer Support
Online
Nikto Features and Options
Nikto Lists
Nikto User Reviews
Write a Review- Previous
- Next