Hello, There is userid:password option at Nikto. From the nikto man page: <quote> -id ID and password to use for host Basic host authentication. Format is "id:password". </quote> Does it mean that Nikto hasn't supported the http-method-request post form authentication? Many thanks! -- Zaki Akhmad