[Nikto-discuss] problem with nikto output to metasploit

macubergeek macubergeek at comcast.net
Thu Jun 28 17:50:28 CDT 2012

I've been learning nmap/nessus scanning via msfconsole
into the backend Postgres database.

Everything has been working fine so I've moved on to Nikto but am having
issues. Problem is the Nikto results don't appear to be showing up in the
database. I've been looking in the Notes section of the database btw.

Here's what I've been doing:

1. Start msfrpcd
./msfrpcd -S -U MetaUser -P Securepass -p 55553

2. Scan into msfrpcd
cd /pentest/web/nikto
./nikto.pl -Format msf -o
MetaUser:Securepass at http://localhost:55553/RPC2 -h target_ip

When I do this I get this error:
Can't call method "value" on an undefined value at
/pentest/web/nikto/plugins/nikto_report_msf.plugin line 194.

Here is line 194 from that plugin:
192     $resp = $cli->send_request($req);
194     if ($resp->{'result'}->value eq "success") {
195         $TEMPLATES{'msftoken'}     = $resp->{'token'}->value;
196         $TEMPLATES{'msflasttoken'} = time();

Any one have any ideas what's fubar here?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://attrition.org/pipermail/nikto-discuss/attachments/20120628/b94489d4/attachment.html>

More information about the Nikto-discuss mailing list