[Nikto-discuss] Disabling interactive question

[Frank Breedijk]

Indeed, I'm just a little afraid of the performance impact since the latest nikto is listening to keystrokes during scanning. 

Frank Breedijk
..-. .-. .- -. -.-
T: +31 (0)20-7506500 E: fbreedijk at schubergphilis.com W: www.schubergphilis.com


-----Original Message-----
From: Jabra [mailto:jabra at spl0it.org] 
Sent: 07 September 2010 16:45
To: Frank Breedijk
Cc: Jabra; nikto-discuss at attrition.org
Subject: Re: [Nikto-discuss] Disabling interactive question

Using: echo "yes" will only pass one instance of "yes" to nikto if it asks for user input. 

Using: yes | nikto would pass as many "yes" inputs until nikto completes.

Regards,
Jabra

On 07.Sep.2010 04:40PM +0200, Frank Breedijk wrote:
> I can see it is still morning there and end of workday here ;)
> Yes|nikto ... will work. Nikto does take y for an answer.
> 
> Frank Breedijk
> ..-. .-. .- -. -.-
> T: +31 (0)20-7506500 E: fbreedijk at schubergphilis.com W: 
> www.schubergphilis.com
> 
> 
> -----Original Message-----
> From: Jabra [mailto:jabra at spl0it.org]
> Sent: 07 September 2010 16:38
> To: Frank Breedijk
> Cc: Jabra; nikto-discuss at attrition.org
> Subject: Re: [Nikto-discuss] Disabling interactive question
> 
> I'm not seeing such an option...
> 
> 
> Not to be too picky shouldn't it be 'yes yes |nikto' ?
> 
> 
> Regards,
> Jabra
> 
> 
> 
> On 07.Sep.2010 04:30PM +0200, Frank Breedijk wrote:
> > I know, however, it is a bit impractical to have to check if this is present, especially as I don't know where the configuration file will be in the system. Is there a command line option to disable it?
> > 
> > The following will do the trick, but feels like cheating:
> > echo y | nikto .....
> > 
> > Frank Breedijk
> > ..-. .-. .- -. -.-
> > T: +31 (0)20-7506500 E: fbreedijk at schubergphilis.com W: 
> > www.schubergphilis.com
> > 
> > -----Original Message-----
> > From: Jabra [mailto:jabra at spl0it.org]
> > Sent: 07 September 2010 16:29
> > To: Frank Breedijk
> > Cc: nikto-discuss at attrition.org
> > Subject: Re: [Nikto-discuss] Disabling interactive question
> > 
> > There is an option in the nikto.conf to not ask the user if they 
> > want to send updates to cirt.net
> > 
> > Regards,
> > Josh
> > 
> > On 07.Sep.2010 04:24PM +0200, Frank Breedijk wrote:
> > > When there is a mismatch between the server signature and the signature on file, Nikto asks you to submit it. Is there a way to disable this prompt ? Since I run nikto from Seccubus I need to make sure it finishes and not spends forever waiting for user input.
> > > 
> > >       
> > > ******************************************************************
> > > **
> > > *
> > >       Portions of the server's ident string (Apache/2.2.9) are not 
> > > in
> > >       the Nikto database or is newer than the known string. Would 
> > > you like
> > >       to submit this information (*no server specific data*) to 
> > > CIRT.net
> > >       for a Nikto update (or you may email to sullo at cirt.net) (y/n)? 
> > > 
> > > Kind regards,
> > > Frank Breedijk
> > > 
> > > 
> > > Schuberg Philis
> > > Boeing Avenue 271
> > > 1119 PD Schiphol-Rijk
> > > schubergphilis.com
> > > 
> > > +31 20 750 65 38
> > > +31 6 4382 2637
> > > _______________________________________________
> > > Nikto-discuss mailing list
> > > Nikto-discuss at attrition.org
> > > https://attrition.org/mailman/listinfo/nikto-discuss
> > 
> > --
> > Jabra < jabra at spl0it.org >
> > http://www.spl0it.org
> 
> --
> Jabra < jabra at spl0it.org >
> http://www.spl0it.org

--
Jabra < jabra at spl0it.org >
http://www.spl0it.org