[Nikto-discuss] Nikto Not Finding Webserver

[maddaemon at gmail.com]

On Tue, Jan 13, 2009 at 7:27 PM, David Lodge <dave at cirt.net> wrote:
>> I just reinstalled nikto from ports (FreeBSD 7.0-RELEASE) and
>> attempted to scan a host and got the following:
>> + No web server found on 10.0.10.25:443
>
> Nikto makes some guesses as to what the web server is (or if there is one).
> If checks (by default) both HEAD and GET methods both with SSL and without.
>
> But sometimes it may get it wrong! You're using nikto 2.03, which has
> slightly tuned detection in (which is good). I can't really make a guess
> without the output.
>
> Try running a nikto.pl -host <blah> -D d and sending on the stuff around the
> http detection (it should be the first connections). The resulting output is
> massive, so you may want to redirect to a file and then send it on.
>
> Thanks
>
> dave
>

No need to redirect...

MadDaemon at darkhorse [~]$ nikto -h 10.0.10.25 -D d
- Nikto v2.03/2.04
---------------------------------------------------------------------------
D:Wed Jan 14 16:12:26 2009 - Target id:1:ident:10.0.10.25:ports_in:80:vhost:=:
D:Wed Jan 14 16:12:26 2009 - Target id:1:ident:10.0.10.25:ports_in:80:
+ No web server found on 172.20.10.25:80
---------------------------------------------------------------------------
+ 1 host(s) tested

Test Options: -h 172.20.10.25 -D d
---------------------------------------------------------------------------
D:Wed Jan 14 16:12:26 2009 T:Wed Jan 14 16:12:26 2009: Ending

Also tried port 443 with the same results (I also used the FQDN):

MadDaemon at darkhorse [~]$ nikto -h tracker.mydomain.tld -ssl -port 443 -D d
- Nikto v2.03/2.04
---------------------------------------------------------------------------
D:Wed Jan 14 16:22:55 2009 - Target
id:1:ident:tracker.mydomain.tld:ports_in:443:vhost:=:
D:Wed Jan 14 16:22:55 2009 - Target
id:1:ident:tracker.mydomain.tld:ports_in:443:
+ No web server found on 172.20.10.25:443
---------------------------------------------------------------------------
+ 1 host(s) tested

Test Options: -h tracker.mydomain.tld -ssl -port 443 -D d
---------------------------------------------------------------------------
D:Wed Jan 14 16:22:55 2009 T:Wed Jan 14 16:22:55 2009: Ending