<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Meaning there may be very specific product checks in db_tests but nothing generic in terms of sessions. </div><div><br>On Feb 9, 2014, at 3:44 AM, raymond lukanta <<a href="mailto:raymond_pluto@hotmail.com">raymond_pluto@hotmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr">What do you mean with "generic"?<br><br><font size="2"><span style="color:rgb(79, 129, 189);font-family:Arial, sans-serif;line-height:17px;background-color:rgb(255, 255, 255);">--</span><br style="line-height:17px;color:rgb(79, 129, 189);font-family:Arial, sans-serif;"><span style="color:rgb(79, 129, 189);font-family:Arial, sans-serif;line-height:17px;background-color:rgb(255, 255, 255);">Raymond Lukanta</span></font><br><br><div><hr id="stopSpelling">Subject: Re: [Nikto-discuss] Nikto Session Management Vulnerabilities<br>From: <a href="mailto:csullo@gmail.com">csullo@gmail.com</a><br>Date: Sat, 8 Feb 2014 08:01:03 -0500<br>CC: <a href="mailto:nikto-discuss@attrition.org">nikto-discuss@attrition.org</a><br>To: <a href="mailto:raymond_pluto@hotmail.com">raymond_pluto@hotmail.com</a><br><br><div>Correct--there are no generic session management issues tested by Nikto.</div><div><br></div><div>Regards,</div><div>Sullo</div><div><br>On Feb 8, 2014, at 2:51 AM, raymond lukanta <<a href="mailto:raymond_pluto@hotmail.com">raymond_pluto@hotmail.com</a>> wrote:<br><br></div><blockquote><div>
<style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:Calibri;
}
--></style>
<div dir="ltr">Hi,<div><br></div><div>As I read on <a href="http://cirt.net/nikto2-docs/options.html" target="_blank">http://cirt.net/nikto2-docs/options.html</a>, I don't find any session management vulnerabilities that can be detected by Nikto.</div><div>Am I right? Because for my final project, I want to extend Nikto so Nikto can detect session management vulnerabilities.</div><div><br></div><div>I'm looking forward for the response.</div><div>Thanks.<br><br><font size="2"><span style="color:rgb(79, 129, 189);font-family:Arial, sans-serif;line-height:17px;background-color:rgb(255, 255, 255);">--</span><br style="line-height:17px;color:rgb(79, 129, 189);font-family:Arial, sans-serif;"><span style="color:rgb(79, 129, 189);font-family:Arial, sans-serif;line-height:17px;background-color:rgb(255, 255, 255);">Raymond</span></font></div> </div>
</div></blockquote><blockquote><div><span>_______________________________________________</span><br><span>Nikto-discuss mailing list</span><br><span><a href="mailto:Nikto-discuss@attrition.org">Nikto-discuss@attrition.org</a></span><br><span><a href="https://attrition.org/mailman/listinfo/nikto-discuss" target="_blank">https://attrition.org/mailman/listinfo/nikto-discuss</a></span><br></div></blockquote></div> </div>
</div></blockquote></body></html>