[Nikto-discuss] Classification of lighttpd and a false positive

Alexander Lehmann lehmann at arcor-so.net
Sun Dec 14 02:39:46 UTC 2008


I ran nikto against a server running lighttpd, this way I noticed two
things that may be changed in the detection:

first, though 1.5.0 is available, the current production branch is 1.4,
so the current version is 1.4.20 right now. I think 1.5.0 is a pre-release.

second, you get a false positive for ghttpd, since it matches li(ghttpd)

bye, Alexander

More information about the Nikto-discuss mailing list