<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div apple-content-edited="true"><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Thanks for the feedback. If I uses theses options Nikto doesn't tell me about any problems any more ; here's a test : </div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br></div><div style="orphans: 2; text-align: -webkit-auto; text-indent: 0px; widows: 2; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">hstd# nikto -Plugins "@@none;nikto_outdated;nikto_versions" -no404 -h <a href="http://www.domain.com">http://www.domain.com</a></div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">- Nikto v2.1.5</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">---------------------------------------------------------------------------</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">+ Target IP: bla.bla.</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">+ Target Hostname: <a href="http://www.domain.com">www.domain.com</a></div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">+ Target Port: 80</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">+ Start Time: 2013-09-02 09:58:56 (GMT2)</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">---------------------------------------------------------------------------</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">+ Server: Apache/2.2.6 (Unix) PHP/5.2.5 mod_ssl/2.2.6 OpenSSL/0.9.8g</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">+ 6545 items checked: 0 error(s) and 0 item(s) reported on remote host</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">+ End Time: 2013-09-02 09:58:56 (GMT2) (0 seconds)</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">---------------------------------------------------------------------------</div></div><div apple-content-edited="true"><br></div>So the server runs a vulnerable version of php but Nikto doesn't give me any information about it. Is there something i'm missing ?</div><div apple-content-edited="true"><br></div><div apple-content-edited="true">Thanks !</div><div apple-content-edited="true">TD</div><div apple-content-edited="true"><br class="Apple-interchange-newline">
</div>
<br><div><div>Le 1 sept. 2013 à 15:28, <a href="mailto:csullo@gmail.com">csullo@gmail.com</a> a écrit :</div><br class="Apple-interchange-newline"><blockquote type="cite"><div bgcolor="#FFFFFF"><div>I am not near a computer, sorry, but you want to use the -no404 option combined with -Plugins. </div><div><br></div><div>It should be like: -Plugins "@@none;nikto_outdated;nikto_versions"</div><div><br></div><div>Those are from memory so check output of -list-plugins to be sure those are correct. </div><div><br></div><div>Also see:<br><a href="http://cirt.net/nikto2-docs/options.html#id2741238">http://cirt.net/nikto2-docs/options.html#id2741238</a></div><div><br></div><div>I'm not sure it will be one request but probably 2-3 if you set the options right, since it tests ssl and possibly more than one method. You can use -ssl and -nossl to save a request if you know ahead of time or don't mind guessing based on port. </div><div><br></div><div>Let us know how it turns out!</div><div><br></div><div>-Sullo</div><div><br></div><div>On Aug 30, 2013, at 9:30 AM, Thiébaut Devergranne <<a href="mailto:t.devergranne@gmail.com">t.devergranne@gmail.com</a>> wrote:<br><br></div><div></div><blockquote type="cite"><meta http-equiv="Content-Type" content="text/html charset=us-ascii">Hi guys, <div><br></div><div>I'm very new to Nikto and I'm trying to find out how to conduct a server version tests (like php, asp) sending the minimal number of requests, ideally one. </div><div><br></div><div>I understand it's possible to do that using the -Plugin parameter but i'm kind of lost after that.</div><div><br></div><div>Anyone could help to put me on the right track ? </div><div>Thanks<br><div apple-content-edited="true"><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline" style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><br class="Apple-interchange-newline">
</div>
<br></div></blockquote><blockquote type="cite"><span>_______________________________________________</span><br><span>Nikto-discuss mailing list</span><br><span><a href="mailto:Nikto-discuss@attrition.org">Nikto-discuss@attrition.org</a></span><br><span><a href="https://attrition.org/mailman/listinfo/nikto-discuss">https://attrition.org/mailman/listinfo/nikto-discuss</a></span><br></blockquote></div></blockquote></div><br></body></html>