On the recordRead 4 Oct 202613 facts
Nikto
Plans and prices
Nikto
Free
Free software under GPLv3 · Database files are restricted to use with Nikto; commercial use requires a license
Read 4 Oct 2026 · github.com
On the record
- Authentication
- It supports Basic and NTLM host authentication and can guess credentials for Basic, NTLM, and Digest authorization realms.cirt.net · read 4 Oct 2026
- Custom checks
- Users can add custom checks through CSV files.cirt.net · read 4 Oct 2026
- Detection
- It identifies installed web servers and software using headers, content, and file analysis, and its scan items and plugins can update automatically.cirt.net · read 4 Oct 2026
- False positives
- The scanner uses headers, page content, hashing, and other methods to reduce false positives.cirt.net · read 4 Oct 2026
- Install options
- The project documents Perl installation, Docker images, and Windows installation.github.com · read 4 Oct 2026
- License terms
- Nikto 2.6 code is GPLv3, while its database files may only be distributed with and used in Nikto unless a commercial license is obtained from the author.cirt.net · read 4 Oct 2026
- Protocols and proxies
- Nikto supports IPv4, IPv6, and HTTP proxies.cirt.net · read 4 Oct 2026
- Purpose
- Nikto is an open-source web server scanner for security professionals, penetration testers, and system administrators.cirt.net · read 4 Oct 2026
- Reporting
- Scans can produce plain text, JSON, SQL, XML, HTML, or CSV reports, including direct reporting to MySQL and PostgreSQL.cirt.net · read 4 Oct 2026
- Scan controls
- Users can tune scans to include or exclude vulnerability check classes and scan multiple ports or servers, including servers listed in Nmap output.cirt.net · read 4 Oct 2026
- Scan coverage
- It checks for over 8,000 potentially dangerous or interesting files and programs and identifies outdated server versions and common misconfigurations.cirt.net · read 4 Oct 2026
- Support
- The project directs users to GitHub or Docker and its documentation for support, and asks users to open GitHub issues for bugs, feature requests, or questions.cirt.net · read 4 Oct 2026
- TLS and cookies
- Nikto detects TLS configuration and fingerprints, handles cookies automatically, and offers an option to disable cookie use.cirt.net · read 4 Oct 2026
