Klementinus Kennyvito Salim

Nikto is a website scanner that scan websites for outdated server, dangerous files, directories, etc. It performs many tests against a website to gather and report back security vulnerabilities that can be exploited. It is a popular tool among system admin and security professionals as it can detect difficult problems.

To scan a target website, use the command in kali linux: nikto -host <target>. In the target space, it can either be a domain or an IP address.

Example : nikto -host pentest.id

In this example, we are able to find information regarding the server which is cloudflare, and multiple IP addresses are found.