Find Vulnerabilities for Any Website Using Nikto

Find Vulnerabilities for Any Website Using Nikto - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Find Vulnerabilities for Any Website Using Nikto (/Thread-Find-Vulnerabilities-for-Any-Website-Using-Nikto)

Find Vulnerabilities for Any Website Using Nikto - Legolas - 08-02-2014

Hello everyone!

There are a number of tools and applications to find vulnerabilities in websites, but one of the simplest is nikto.

This small and simple tool examines a website and reports back to you the potential vulnerabilities that it found that you could use to exploit or hack the site.
In addition, it's one of the most widely used website vulnerabilities tools in the industry and in many circles considered the industry standard.

Although this tool is extremely useful and effective, it is NOT stealthy. Any website with an IDS or other security measures in place will detect that you are scanning it.
Originally designed for security testing, it was never meant to be stealthy.

Step 1: Fire Up Kali & Open Nikto

Let's fire up Kali and get started with nikto.
Once we have Kali up and running, go to Kali Linux -> Vulnerability Analysis -> Misc Scanners -> nikto, like in the screenshot below.

[Image: XwMabhP.png]

Although there are many options in using nikto, we will limit ourselves here to the basic syntax, such as this:

nikto -h <IP or hostname>

Step 2: Scan the Web Server

Let's start with a safe web server on our own network. In this case, I have started the http service on another machine on my network. There is not a website hosted by this machine, just the web server.
Let's scan it for vulnerabilities by typing:

nikto -h 192.168.1.104

Nikto responds with a lot of information, as you can see below.

[Image: lLBhBun.jpg]

First, it tells us the server is Apache 2.2.14, probably on Ubuntu. It nailed this info and gives up more information on other potential vulnerabilities on this web server.
Note near the bottom that it identifies some vulnerabilities with the OSVDB prefix. This is the Open Source Vulnerability Database.
This is a database maintained of known vulnerabilities at www.osvdb.org

Step 3: Scan the Site

Let's try another site. Let's see what nikto can tell us about this site.

nikto -h webscantest.com

Once again, it identifies the server (Apache) and then proceeds to identify numerous potential vulnerabilities pre-fixed with OSVDB.
We can take a look at that website at www.osvdb.org to learn more about these vulnerabilities.

[Image: vuln4.png]

Now, let's use this site to find information on one of the vulnerabilities identified by nikto as OSVDB-877.
We can put that reference number into the search function and it retrieves the following page.

[Image: vuln5.jpg]

Note, in lower half of this page there are cross-references to the various information sources about this vulnerability, as well as references to tools and filters such as Nikto, Nessus, and Snort.

[Image: vunl6.jpg]

Step 4: Scan car.com

Let's scan a few more sites and see what it can tell us about these sites.

nikto -h car.com

As you can see, it tells us that Car.com is using Microsoft's - IIS/7.0 as a web server and then lists numerous potential vulnerabilities.

Step 5: Scan Facebook

Finally, lets point nikto at www.facebook.com.

nikto -h facebook.com

As you can see, Facebook is tightly secured with few vulnerabilities.
As you can imagine, if Facebook weren't secure, every script-kiddie on the planet would be hacking it to see who his true love is chatting with online.

Step 6: Scan Twitter

nikto -h twitter.com

As you can see, Twitter is tightly secured too.

I hope you enjoyed this. :Thumbs-Up:

Credits for the text :

Spoiler:
occupythweb

RE: Find Vulnerabilities for Any Website Using Nikto - Lynux - 08-02-2014

Thank you for this amazing thread I have used Nikto in the past and found XSS vulnerabilities on quite a few sites but I thoroughly enjoyed reading this.

Once again thank you for the effort you put into this tutorial.

RE: Find Vulnerabilities for Any Website Using Nikto - Templar.Clown - 08-02-2014

Very nice and easy intro into nikto on kali. When I first started with kali I wish this was around. Every newbie should give this a read.

RE: Find Vulnerabilities for Any Website Using Nikto - Legolas - 08-02-2014

@Lynux,

thank you ! Confused

mile: I am glad you liked it.

(08-02-2014, 03:05 PM)Templar.Clown Wrote: Very nice and easy intro into nikto on kali. When I first started with kali I wish this was around. Every newbie should give this a read.

Thank you a lot! :Smile:
Yes, i think it's useful and interesting for newbies. Also, i am planning to post other staff like this. :Thumbs-Up:

RE: Find Vulnerabilities for Any Website Using Nikto - Lynux - 08-02-2014

(08-02-2014, 03:47 PM)Legolas Wrote: @Lynux,

thank you ! mile: I am glad you liked it.

(08-02-2014, 03:05 PM)Templar.Clown Wrote: Very nice and easy intro into nikto on kali. When I first started with kali I wish this was around. Every newbie should give this a read.

Thank you a lot! :Smile:
Yes, i think it's useful and interesting for newbies. Also, i am planning to post other staff like this. :Thumbs-Up:

Sweet well I hope to be able to learn from each one of your posts, as I love Linux Biggrin

and enjoy learning about it.

RE: Find Vulnerabilities for Any Website Using Nikto - Templar.Clown - 08-02-2014

Back when I originally first used nikto I watched a youtube video smh... It was a Indian guy going "do dees" "tyap dees" "see deeees?" Newcomers should feel lucky haha.

RE: Find Vulnerabilities for Any Website Using Nikto - Lynux - 08-02-2014

(08-02-2014, 04:35 PM)Templar.Clown Wrote: Back when I originally first used nikto I watched a youtube video smh... It was a Indian guy going "do dees" "tyap dees" "see deeees?" Newcomers should feel lucky haha.

:troll: That must have been quite fun to watch to be honest, do you still have to link to the video?

RE: Find Vulnerabilities for Any Website Using Nikto - Templar.Clown - 08-02-2014

(08-02-2014, 05:59 PM)lynux Wrote:
(08-02-2014, 04:35 PM)Templar.Clown Wrote: Back when I originally first used nikto I watched a youtube video smh... It was a Indian guy going "do dees" "tyap dees" "see deeees?" Newcomers should feel lucky haha.

:troll: That must have been quite fun to watch to be honest, do you still have to link to the video?

No, honestly it was about maybe 5-6 years ago with BT. I'm sure with a little searching of youtube you can find something similar or even the exact video.

RE: Find Vulnerabilities for Any Website Using Nikto - gh05t3d - 08-02-2014

good tutorial with great pictures mate,i use it once in a while (under vpn) and also use some other valuable tools like golismero (python).
Thanks for the sharing mate.

RE: Find Vulnerabilities for Any Website Using Nikto - Psycho_Coder - 08-02-2014

To be frank I feel like Trashing this thread. I have good reasons to do so.

The thread was completely copied from :- http://null-byte.wonderhowto.com/how-to/hack-like-pro-find-vulnerabilities-for-any-website-using-nikto-0151729/

All you did was say at the end Credits in spoiler as occupytheweb. Who the hell is this occupytheweb ? Why not give a direct link. The only addition you did was the www.car.com part and took several multiple screenshots one after the other and posted. Just to increase the length. WTF ? Seriously, what you could have done is you have read the tutorial from that site, tested it yourself, introduced a few new commands that were in-built or functions and explain them in depth with screenshots . But what you did here is copyright infringement. You have not given a back link.

This is not the first time I have seen this coming from you, both of your Ultimate Guide to Meterpreter were copied from that site as well. As matter of fact many of your tutorials are like this. I always kept quite and thought that next time you won't do this. But crap you're repeatedly doing the same. I don't know why other mods didn't do or tell anything about this yet.

What is your intention in doing this ? Do you want to copy and paste every article by occupytheweb from that site and make new tutorials here. Is that your motive ?

If it is so then make a bot and extract the artciles. Classify the html tags and write equivalent BBcode and post it all at once. I would actually appreciate it then.

I should actually give you a warning of +3 now for a month. But I won't do that since a lot of members here think very highly of you and respect you. They might feel sad and just for them I won't do it.

What you could have done is give the link to that Site. So that the New learners can get it all at once.

This kind of activity makes HC no better than HF imho. I can't tolerate this since HC is very special to me.

I will close this thread now. Contact @bluedog.tar.gz to open this thread after he has read my reply.

All the mods if my reply is reported then please do not delete this thread or my reply or even open this thread, I request you'll heartily, I love HC as much as you'll do. I would like the admin to take actions whatever it maybe.

All I want is that whenever you copy a thread give the complete link to the original article under the heading taken from or Shared or Posted originally on <so and so site> then I have no objections since you're actually sharing the original thing.