How Hackers Scan Vulnerabilities of Any Website | Nikto - Kali Linux

Summary

Key Points

• Nikto is an open-source web server scanner used to identify vulnerabilities such as outdated software, dangerous files, and misconfigurations. 0:13
• Nikto can identify the web server software and its version, such as Engine X in the example. 1:16
• The scanner can detect missing security headers, like the 'X-Content-Type-Options' header, which can lead to clickjacking attacks. 1:22
• Nikto can find exposed sensitive files, such as 'phpinfo.php', which can reveal system details and specific PHP vulnerabilities. 1:42
• The tool can also identify exposed administrative login pages, which attackers could exploit using brute-force attacks. 2:02
• Nikto can scan websites using HTTPS and can automatically handle SSL encryption. 2:41
• Users can specify a particular port to scan using the '-p' option. 2:43
• Scan results can be saved to a file using the '-o' option followed by the desired filename. 3:05
• The video shows how to use Nikto on Kali Linux by typing 'nikto -h [URL]' in the terminal. 3:09
• The manual page for Nikto can be accessed by typing 'man nikto' to learn more about its functionalities. 3:09