Using nikto to find vulnerabilities


What is Nikto? Nikto is a server scanner that is able to scan potentially dangerous files, check outdated version of a software, and checking index files on a server. For more information about Nikto, you can find it on its official github right here


  1. Open up kali linux machine
  2. Nikto is pre-installed on a kali linux OS based machine, to use it, type
    nikto -h

  3. To run the scan, type the following command on your terminal
    nikto -h

    the target host ip address can also be changed to the website address

Leave a Reply

Your email address will not be published. Required fields are marked *