Ubuntu 14.04 LTS下安装Nikto Web Scanner

最新推荐文章于 2025-06-06 15:46:13 发布

转载最新推荐文章于 2025-06-06 15:46:13 发布 · 329 阅读

1 ·

CC 4.0 BY-SA版权

原文链接：https://my.oschina.net/HeAlvin/blog/373970

文章标签：

#数据库 #python #操作系统

2019独角兽企业重金招聘Python工程师标准>>>

What is Nikto web scanner and it’s use ?

Nikto Web-scanner is a open source web-server scanner which can be used to scan the web-servers for malicious programs and files. Nikto can be used to scan the outdated versions of programs too. Nikto will provide us a quick and easy scan to find out the dangerous files and programs in server, At the end of scan result with a log file. Using nikto we can scan http, https, httpd traffics too.

To run the Nikto we don’t need any hard resource using software’s, If our server installed with Perl it’s fine to run the nikto. It’s available for every Operating systems such as Linux, Unix like RedHat, Centos, Debian, Ubuntu,Solaris, BackTrack, MacOSX. Supports SSL, http proxy, Scan multiple ports on a server, Check for outdated server components etc.. We can get the output of result in following formats TXT, CSV, HTML, XML.

Newly released version of Nikto Web scanner:

Nikto released it’s version 2.1.5 in 2012 but it’s under updates for each and every new vulnerabilities till date.

vulnerabilities Database:

We can find each and every vulnerabilities database in following URL.

http://osvdb.org/

以上云云(自行google).

环境要求:

Hostname prodsrv.unixmen.com (prodsrv)
IP address 192.168.230.151
Operating system Ubuntu 14.04 LTS

执行如下命令检查主机名 IP地址系统版本

hostname

ifconfig |grep inet

lsb_release -a

安装开始:

登录官网https://cirt.net/Nikto2,官方列出了两种格式的安装包.

https://cirt.net/nikto/nikto-2.1.5.tar.bz2 https://cirt.net/nikto/nikto-2.1.5.tar.gz

下载安装包

wget https://cirt.net/nikto/nikto-2.1.5.tar.gz

tar -zxvf nikto-2.1.5.tar.gz

移动nikto-2.1.5下的所有文件到/usr/local/bin下:

cd ~

sudo cp -apvf nikto-2.1.5/* /usr/local/bin/

ls -l /usr/local/bin/

* Nikto config file need to be in /etc/, But now it’s currently under /usr/local/bin/ While having a look into conf we can find that nikto will skip the scan for ports 21 & 111, And from were it want to download it’s update and much more.

sudo vim /usr/local/bin/nikto-2.1.5/nikto.conf