[Nikto-discuss] db_404_strings processing

[Sullo]

That should work. what is the response code you're sending for 404s, is it
200 or something else?

Also, you can put them in udb_404_strings so an update won't step on your
own changes.

-Sullo

On Mon, Nov 19, 2012 at 12:06 PM, Geoff Galitz <geoff at galitz.org> wrote:

>
>
> Hi all.
>
> I am getting what seem to be false positives.  I suspect nikto is not
> recognizing the custom 404s we send out.  I've added some of the text and
> some of the unique code of our 404 to db_404_strings but it does not seem
> to help.
>
> I am wondering if I need to do anything special after simply adding some
> text to that file?  Currently I have this:  <div id="not-found-content"
> style="bottom: 98px;">
>
> Would special punctuation cause a problem?
>
> -G
>
>
>
> ------------------------------
> Geoff Galitz
> http://www.galitz.org
>
> _______________________________________________
> Nikto-discuss mailing list
> Nikto-discuss at attrition.org
> https://attrition.org/mailman/listinfo/nikto-discuss
>



-- 

http://www.cirt.net     |      http://richsec.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://attrition.org/pipermail/nikto-discuss/attachments/20121119/d47ab47e/attachment.html>