Nikto – Web Application Vulnerability Scanner
Overview
Nikto is an open-source command-line web application vulnerability scanner that scans for 6700 potentially dangerous files/programs. It also looks for misconfigurations, checks for outdated versions of over 1250 servers, and find version-specific problems on over 270 servers. Nikto is a loud tool so it will get logged and flagged by IDS/IPS. Note that not every "problem" found is a security issue. You will need to confirm the vulnerability manually.
Nikto has features such as:
Easily updatable CSV-format checks database
Output reports in plain text or HTML
Available HTTP versions automatic switching
Generic as well as specific server software checks
SSL support (through libnet-ssleay-perl)
Proxy support (with authentication)
Cookies support
Nik...