[Nikto-discuss] db_variables bug

[Sullo]

David Lodge wrote:
> On Mon, 11 Aug 2008 18:23:26 +0100, Ryan Dewhurst <ryandewhurst at gmail.com>  
> wrote:
>> Hello,
>> Been trying to add my own variables to nikto. Ive read in the manual that
>> you should put these in the config.txt file if you do not want them to be
>> over written when nikto is updated. When putthing the variable in
>> config.txt, nikto does not pick up on them. I added my custom variables  
>> to
>> db_variables, this does get picked up by nikto but it only uses the last
>> variable in the list and does not try all of them.
> 
> Okay; this looks like a bug in the documentation - config.txt is really a  
> config file for nikto to find the databases and plugins; not for the  
> actual tests. I'll fix this as part of the updates to documentation I'm  
> planning...


For version 1.x these would go in config.txt, but 2.x they should be in
a file called "udb_variables" so they get picked up at run-time (similar
to any other user-defined database). Damn documentation!

:-)

-Sullo