[Nikto-discuss] Problem updating 2.10 of 2.1.0

[david lodge]

2009/12/5 Magnus <magnuspublic at mac.com>:
> Using BackTrack4 I have trouble updating:
> /pentest/scanners/nikto/nikto.pl -update
> + ERROR (404): Unable to get www.cirt.net/nikto/UPDATES/2.10/versions.txt
> (i do have a web connection)
> When I look at the URL: www.cirt.net/nikto/UPDATES/2.10/versions.txt I
> notice that it is misspelled.
> It should be www.cirt.net/nikto/UPDATES/2.1.0/versions.txt
> So just 2.1.0 instead of the 2.10. I cannot find a way to edit the update
> URL.

It does look like BT4 used the pre-release (2.10) version of Nikto. As
the naming scheme changed during development (from 2.10 to 2.1.0) then
the BT version will try and collect from the wrong path.

Two ways of working around this:
1. Get 2.1.0 from http://www.cirt.net/Nikto and use that - there will
be bug fixes etc.: 2.10 was a bit of a mess before I cleaned it up
prior to release.
2. Edit line 51 in nikto.pl:
$NIKTO{version}    = "2.10";

As Sullo said earlier, I'd really strongly advise that you grab 2.1.0
instead of hacking the version you currently have installed.