From subs at qcontinuum.plus.com Wed Nov 12 09:57:56 2014 From: subs at qcontinuum.plus.com (John) Date: Wed, 12 Nov 2014 15:57:56 -0000 Subject: [Nikto-discuss] Can't update new version of Nikto Message-ID: I have just received a new testing laptop and am having to install Nikto from scratch. I have downloaded the latest Windows version (2.1.5) and ran perl nikto.pl -update. I Get the following error: + ERROR (): Unable to get www.cirt.net/nikto/UPDATES/2.1.6/versions.txt I'm not sure why Nikto can't get its updates. I'm running Srawberry perl, which I understand is supported. I have downloaded and installed Net:SSLeay, but I can't find Libwhisker either on Cpan or PPM. Since the Nikto website says it runs on Strawberry, I assume that the neccessary components are included by default? -- John. From csullo at gmail.com Wed Nov 12 10:02:31 2014 From: csullo at gmail.com (Sullo) Date: Wed, 12 Nov 2014 11:02:31 -0500 Subject: [Nikto-discuss] Can't update new version of Nikto In-Reply-To: References: Message-ID: I would run the version from GIthub (either using git or downloading a zip): https://github.com/sullo/nikto It should have libwhisker with it, but you'll still need to install the SSL components as you said. After that you won't do updates using -update, but either use git pull or downloading a new zip--at least until the update process gets replaced. -Sullo On Wed, Nov 12, 2014 at 10:57 AM, John wrote: > > I have just received a new testing laptop and am having to install Nikto > from scratch. I have downloaded the latest Windows version (2.1.5) and ran > perl nikto.pl -update. I Get the following error: > > + ERROR (): Unable to get www.cirt.net/nikto/UPDATES/2.1.6/versions.txt > > I'm not sure why Nikto can't get its updates. I'm running Srawberry perl, > which I understand is supported. I have downloaded and installed > Net:SSLeay, but I can't find Libwhisker either on Cpan or PPM. Since the > Nikto website says it runs on Strawberry, I assume that the neccessary > components are included by default? > > > -- > John. > _______________________________________________ > Nikto is sponsored by Netsparker, a false positive free web application > security scanner. > Visit https://www.netsparker.com/ for more information. > _______________________________________________ > Nikto-discuss mail list > Nikto-discuss at attrition.org > https://attrition.org/mailman/listinfo/nikto-discuss > -- http://www.cirt.net | http://richsec.com/ -------------- next part -------------- An HTML attachment was scrubbed... URL: From resident.deity at gmail.com Wed Nov 19 07:29:14 2014 From: resident.deity at gmail.com (a) Date: Wed, 19 Nov 2014 13:29:14 +0000 Subject: [Nikto-discuss] Nikto Plugin Tutorial In-Reply-To: References: <581AC794-9C83-40BA-AA0E-A4F17FA080E9@gmail.com> Message-ID: This must have the record for the longest delay in responding; but the first: every request performed by Nikto. It's mainly used by plugins like auth to poke credentials into the request. There's a similar postauth so you can essentially grep the responses or check the headers. On 18 August 2014 12:34, raymond lukanta wrote: > Hi again, > > In the docs (http://cirt.net/nikto2-docs/expanding.html#id2792681), > there's a prefetch hook. > > In the explanation, it is said that "The prefetch phase is called before > every request to the server". > > My question is what does "every request" means? Every request done by > Nikto or every request done by the plugin that defines that hook? > > Thanks. > > -- > Raymond L > > ------------------------------ > Subject: Re: [Nikto-discuss] Nikto Plugin Tutorial > From: csullo at gmail.com > Date: Sat, 21 Jun 2014 09:54:40 -0400 > CC: nikto-discuss at attrition.org > To: raymond_pluto at hotmail.com > > > Raymond > > I don't know of a full tutorial other than the docs ( > http://cirt.net/nikto2-docs/expanding.html#id2792681) on it. You might > start with an existing plugin which has similar functionality and start > modifying it. > > Feel free to post questions as well! > > Regards, > Sullo > > > On Jun 21, 2014, at 12:47 AM, raymond lukanta > wrote: > > Hi All, > > I want to create new Nikto plugin. > > I've been googling but what I found was this book: > > http://books.google.co.id/books?id=iV8DRekYvg0C&printsec=frontcover&dq=Network+Security+Tools:+Writing,+Hacking,+and+Modifying+Security+Tools&hl=en&sa=X&ei=xAylU4DPGc7JuAS39YCwCA&ved=0CBsQ6AEwAA#v=onepage&q&f=false > > > On page 86, the author give some explanation, but I think the author use > the older Nikto version. > > Is there anybody have some tutorial that I can follow? > > Thanks. > -- > Raymond L > > _______________________________________________ > Nikto is sponsored by Netsparker, a false positive free web application > security scanner. > Visit https://www.netsparker.com/ for more information. > _______________________________________________ > Nikto-discuss mail list > Nikto-discuss at attrition.org > https://attrition.org/mailman/listinfo/nikto-discuss > > > _______________________________________________ > Nikto is sponsored by Netsparker, a false positive free web application > security scanner. > Visit https://www.netsparker.com/ for more information. > _______________________________________________ > Nikto-discuss mail list > Nikto-discuss at attrition.org > https://attrition.org/mailman/listinfo/nikto-discuss > -------------- next part -------------- An HTML attachment was scrubbed... URL: