CIRT.net

Nikto 2.1.4 available!

sullo — Sun, 20 Feb 2011 04:59:40 +0000

We're happy to announce the immediate availability of Nikto 2.1.4!

Nikto is an open source web server scanner which performs comprehensive tests against web servers for multiple items, including over 6400 potentially dangerous files/CGIs, checks for outdated versions of over 1000 servers, and version specific problems on over 270 servers.

This release contains a number of important bug fixes, as well as new functionality and improvements, including:

HTTPS Everywhere Rules

sullo — Wed, 24 Nov 2010 03:07:59 +0000

Here are some easy rules to use for HTTPS Everywhere with cirt.net and assembla.com.

File: assembla.xml

File: cirt.xml

Use it by placing it in the HTTPSEverywhereUserRules/ subdirectory in your Firefox profile directory, and then restarting Firefox.

Using Nikto with Nessus (Video)

sullo — Wed, 27 Oct 2010 16:59:18 +0000

Paul over at Tenable Security Podcast has put together a concise video on how to integrate Nikto directly into Nessus. Definitely worth watching if you're trying to get that set up.

Introducing: Site Crunch -- Optimize Your Site

sullo — Sun, 26 Sep 2010 04:00:11 +0000

Introducing... Site Crunch!

Site Crunch is a script which will recursively walk through a directory structure and do its best to compress or otherwise "minify" the files it finds. It is designed to help optimize web sites, so it works against JPG and PNG images, as well as CSS, JavaScript and HTML files. My limited testing shows sites can often quite easily shed 10% of their bulk--not an insignificant amount!

More details and downloads can be found here: http://cirt.net/SiteCrunch.

Nikto Products!

sullo — Sat, 18 Sep 2010 03:42:00 +0000

Finally here... the shiny new product store!

You can get Nikto t-shirts, mugs, mouse pads and more. I'll even take customization requests and try to get new products out there--suggestions welcome.

Nikto 2.1.3 available!

sullo — Mon, 06 Sep 2010 04:21:31 +0000

We're happy to announce the immediate availability of Nikto 2.1.3!

Nikto is an open source web server scanner which performs
comprehensive tests against web servers for multiple items, including
over 6400 potentially dangerous files/CGIs, checks for outdated versions
of over 1000 servers, and version specific problems on over 270 servers.

In addition to the usual list of minor bug fixes, 2.1.3 contains some new functionality and improvements, including:

Seccubus 1.5 with Nikto support

sullo — Thu, 05 Aug 2010 18:17:10 +0000

Seccubus automates regular vulnerability scans and provides delta reporting. On 8/1, the project released version 1.5 "The DefCon Edition." This version includes support for controlling Nikto through Seccubus directly, leveraging the NBE report format which Frank Breedijk (Seccubus' author) wrote and released with the 2.1.2 version of Nikto.

In addition to working with Seccubus, Frank's NBE report format should allow for easy Nikto integration into any program which supports Nessus imports.

Specifiying Individual Plugins

dave — Fri, 16 Jul 2010 09:51:58 +0000

In Nikto 2.1.1, the facillity to call only specific plugins was added. This was mainly designed as a debugging and development feature so that it is easier to test one plugin without running all of the tests. This was a very simple plugin string that consisted of a simple comma separated list of plugin names.

In Nikto 2.1.2 it was discovered that this facillity was of more use than previously thought and could fix one of the basic flaws with the current plugin system: that of passing parameters to the plugin, something that had been hacked via using -mutate-options.

Nikto's Interactive Features & Status Reporting

sullo — Mon, 12 Jul 2010 02:48:38 +0000

Nikto 2.1.2 introduces some much needed status reporting, along with some new interactive features.

First up, the Display mode "P" will print a progress report to STDOUT every 500 tests (configurable in nikto.conf or via -Plugins). During a scan, you'll see something like this:

- Tests completed: 3000 47%

On systems with POSIX support, there are several interactive features you can use during scans. While running, any of the following keys can be pressed to report status or make display changes:

Nikto 2.1.2 available!

sullo — Sat, 10 Jul 2010 04:05:04 +0000

We're happy to announce the immediate availability of Nikto 2.1.2!

Nikto is an open source web server scanner which performs
comprehensive tests against web servers for multiple items, including
over 6400 potentially dangerous files/CGIs, checks for outdated versions
of over 1000 servers, and version specific problems on over 270 servers.

In addition to the usual laundry list of minor bug fixes, 2.1.2 contains some new functionality and improvements,
including: