Bernhard Brunner's Blog

Link to this comparison view

--- blog:nitko_web_server_security_assessment [2009-05-23 07:01] – created brb
+++ blog:nitko_web_server_security_assessment [2014-05-21 07:16] (current) – [Basic Scan] brb
@@ Line 1: / Line 1: @@
-====== Nitko web server security assessment ======
+====== Nikto web server security assessment ======
-Nitko performs automated tests agains webservers.
+Nikto performs automated tests agains webservers.
+======  ======
   * Program: http://www.cirt.net/nikto2
   * Installation: http://beginlinux.com/blog/2009/05/nikto-scan-apache-for-security-holes/
-======  ======
 Nikto does require the LibWhisker Perl module, but this is built into the program so it does not need to be installed.  You will want to install the Net::SSLeay Perl module if you want to test SSL.
 ===== Install Net::SSLeay =====
+or on Debian (or Ubuntu, of course)
+  apt-get install libcrypt-ssleay-perl libnet-ssleay-perl
+For all distributions, installing from CPAN:
   perl -MCPAN -e shell;
   Cpan> install Net::SSLeay
-or on Debian
-  apt-get install libcrypt-ssleay-perl libnet-ssleay-perl
 ===== Download nikto =====
@@ Line 34: / Line 37: @@
   perl nikto.pl -h 192.168.5.103
-{{tag>linux apache security}}
+{{tag>linux apache security ssl}}
 ~~LINKBACK~~
 ~~DISCUSSION~~