Tag: Nikto

  • Vulnerability Disclosure Forensics: /cgi-bin/upload.cgi

    Vulnerability Disclosure Forensics: /cgi-bin/upload.cgi

    Yesterday, Chris Sullo of Nikto fame, asked me a simple question; in so many words, what was the “first web vuln”. To be clear, he is asking about the first vulnerability in a web server / service / program. Seems relatively straight-forward but I challenge anyone to answer it with their own data set, especially…

  • Using Nessus to call Nikto

    Using Nessus to call Nikto

    [This was originally published on the Tenable blog.] Earlier this year, Michel Arboi wrote a blog post explaining how to use Nessus to call Nikto and incorporate the results into Nessus output. Most newcomers to Nessus have enabled the nikto.nasl wrapper only to find it produced no output. Some Nessus users have found various ways to ensure…