"Security is a state of being, not a state to be achieved. By testing your configurations, you can find holes that you may have missed "
Distro : Trustix 2.2
Kernel : 2.4.32
Step by step :
root@test /# cd /usr/local/src
root@test src# wgethttp://search.cpan.org/CPAN/authors/id/F/FL/FLORA/Net_SSLeay.pm-1.30.tar.gz
root@test src# tar -xzvf Net_SSLeay.pm-1.30.tar.gz
root@test src# cd ./Net_SSLeay.pm-1.30
root@test src# perl Makefile.PL
root@test src# make
root@test src# make install
root@test src# wget http://www.cirt.net/nikto/nikto-current.tar.gz
root@test src# tar -xzvf nikto-current.tar.gz
root@test src# wget http://www.wiretrip.net/rfp/libwhisker/LW.pm
root@test src# cp LW.pm ./nikto-1.35/LW.pm
root@test src# mv nikto-1.35/ /usr/local/nikto
root@test src# cd /usr/local/nikto
root@test nikto# perl nikto.pl -update
Test inside :
root@test nikto# perl nikto.pl -h localhost
---------------------------------------------------------------------------
- Nikto 1.35/1.36 - www.cirt.net
+ Target IP: 127.0.0.1
+ Target Hostname: localhost
+ Target Port: 80
+ Start Time: Thu Aug 24 16:56:02 2006
---------------------------------------------------------------------------
- Scan is dependent on "Server" string which can be faked, use -g to override
+ Server: Apache/2.0.55 (Trustix Secure Linux/Linux)
+ Allowed HTTP Methods: GET,HEAD,POST,OPTIONS,TRACE
+ HTTP method 'TRACE' is typically only used for debugging. It should be disabled. OSVDB-877.
+ Apache/2.0.55 appears to be outdated (current is at least Apache/2.0.58). Apache 1.3.33 is still maintained and considered secure.
+ /~root - Enumeration of users is possible by requesting ~username (responds with Forbidden for real users, not found for non-existent users) (GET).
+ / - Appears to be a default Apache install. (GET)
+ /icons/ - Directory indexing is enabled, it should only be enabled for specific directories (if required). If indexing is not used, the /icons directory should be removed. (GET)
Test Outside :
root@test nikto# perl nikto.pl -h www.google.com
---------------------------------------------------------------------------
- Nikto 1.35/1.36 - www.cirt.net
+ Target IP: 66.249.89.99
+ Target Hostname: www.google.com
+ Target Port: 80
+ Start Time: Thu Aug 24 16:58:01 2006
---------------------------------------------------------------------------
- Scan is dependent on "Server" string which can be faked, use -g to override
+ Server: GWS/2.1
+ The root file (/) redirects to: http://www.google.co.id/
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ /robots.txt - contains 86 'disallow' entries which should be manually viewed (added to mutation file lists) (GET).
+ GWS/ - Could be the Google Web Server. 2.0 seems to be current.
+ / - Redirects to http://www.google.co.id/ , Default Jrun 2 server running.
+ / - Redirects to http://www.google.co.id/ , Cisco VoIP Phone deafult web server found.
+ / - Redirects to http://www.google.co.id/ , Default Sybase Jaguar CTS server running.
+ / - Redirects to http://www.google.co.id/ , Default Jrun 3 server running.
+ / - Redirects to http://www.google.co.id/ , Default Lantronix printer found.
+ / - Redirects to http://www.google.co.id/ , Default IBM Tivoli Server Administration server is running.
+ / - Redirects to http://www.google.co.id/ , Default Jrun 4 server running.
+ / - Redirects to http://www.google.co.id/ , Default Xerox WorkCentre server is running.
+ / - Redirects to http://www.google.co.id/ , PeopleSoft appears to be running.
+ / - Redirects to http://www.google.co.id/ , Samba-swat web server. Used to administer Samba.
+ /%00 - Redirects to http://www.google.co.id/ , Appending /%00 to a request to the web server may reveal a directory listing.
+ /%00/ - Redirects to http://www.google.co.id/ , Remote directories can be retrieved, (this may be a Roxen server), upgrade the server.
+ /a? - Redirects to https://www.google.com/a?%3Cscript%3Ealert('Vulnerable')%3C/script%3E , Server is vulnerable to Cross Site Scripting (XSS) in the error message if code is passed in the query-string. This may be a Null HTTPd server.
+ /a/ - Redirects to https://www.google.com/a/ , May be Kebi Web Mail administration menu.
+ /accounts/getuserdesc.asp - Redirects to https://www.google.com/accounts/getuserdesc.asp , Hosting Controller 2002 administration page is available. This should be protected.
Sumber : http://howtoforge.com/apache_security_testing_with_nikto
Pemimpin kharismatik Kuba ini sudah lama menjadi enemy Numero Uno Amerika, kawan akrab dari Che Guevara tokoh Revolusi Kuba.
Inilah sosok yg juga sangat ditakuti pihak Amerika, pemimpin Venezuela ini tidak takut akan Embargo Amerika.
Tokoh paling disegani sekaligus ditakuti di masa2 kejayaannya di Irak. Akhir yg dramatis bagi seorang yg kehidupan masa lalunya sangat glamour.
Presiden kharismatik Iran ini, akhir-akhir ini sedang sibuk menantang Israel di forum-forum pertemuan Eropa.
Pemimpin kharismatik Kuba ini sudah lama menjadi enemy Numero Uno Amerika, kawan akrab dari Che Guevara tokoh Revolusi Kuba.
Inilah sosok yg juga sangat ditakuti pihak Amerika, pemimpin Venezuela ini tidak takut akan Embargo Amerika.
Tokoh paling disegani sekaligus ditakuti di masa2 kejayaannya di Irak. Akhir yg dramatis bagi seorang yg kehidupan masa lalunya sangat glamour.
Presiden kharismatik Iran ini, akhir-akhir ini sedang sibuk menantang Israel di forum-forum pertemuan Eropa.
