This allows you to quickly run an analysis from any possible system, be it officially a Windows machine or something else. It is of course supplied as standard in the security-researching Linux distribution Kali Linux, which is also available as a live environment. Most Linux distributions today offer Nikto in their package manager, but it can also be downloaded as a Perl program from the project’s website.

You can save report in various formats such as HTML, XML, CSV.

Nikto scan for over 6700 items to detect misconfiguration, risky files, etc. This tool maps the servers in a network, with Nikto they then hunt deeper for a specific target. Nikto, on the other hand, is also used by attackers who use it in addition to a scan tool like nmap. The software is designed, for example, to screen a web server for security issues, such as misconfigured Apache extensions or outdated software versions.

Nikto is a tool that you can target a specific system to perform a scan on all kinds of possibly outdated parts. As a user, you need root access to check the databases, server components and scripting, and that access is usually reserved for customers of expensive hosting packages. It is quite easy to see if your application is running a recent version, but the deeper you go into the system, the more difficult it gets. If you do not run your blog or web server yourself, you often depend on the security level that your provider uses.

Nikto is a standard part of Kali linux, but you can also use it separately in another distribution or live environment.

There are handy free tools to run a scan on your web server, whether it is your own or you rent space from a hosting party.

Nikto windows