<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>I have a question about Nikto capabilities. <div>In the Nikto description, it is said that Nikto is a web server scanner. But, in the -Tuning option (<a href="http://cirt.net/nikto2-docs/options.html#id2741238" target="_blank" style="font-size: 12pt;">http://cirt.net/nikto2-docs/options.html#id2741238</a><span style="font-size: 12pt;">), there're a test for SQL injection and XSS. Actually, it makes me confused.</span></div><div><span style="font-size: 12pt;"><br></span></div><div>I need explanation why Nikto do the test for SQL injection and XSS. Because <span style="font-size: 12pt;">I think, injection and XSS is web application related (CMIIW).</span></div><div><br></div><div><br></div><div>Thanks.</div><div><br><font size="2"><span style="color:rgb(79, 129, 189);font-family:Arial, sans-serif;line-height:17px;background-color:rgb(255, 255, 255);">--</span><br style="line-height:17px;color:rgb(79, 129, 189);font-family:Arial, sans-serif;"><span style="color:rgb(79, 129, 189);font-family:Arial, sans-serif;line-height:17px;background-color:rgb(255, 255, 255);">Raymond</span></font></div> </div></body>
</html>