CIRT.net

Paul over at Tenable Security Podcast has put together a concise video on how to integrate Nikto directly into Nessus. Definitely worth watching if you're trying to get that set up.

Introducing... Site Crunch!

Site Crunch is a script which will recursively walk through a directory structure and do its best to compress or otherwise "minify" the files it finds. It is designed to help optimize web sites, so it works against JPG and PNG images, as well as CSS, JavaScript and HTML files. My limited testing shows sites can often quite easily shed 10% of their bulk--not an insignificant amount!

More details and downloads can be found here: http://cirt.net/SiteCrunch.

Finally here... the shiny new product store!

You can get Nikto t-shirts, mugs, mouse pads and more. I'll even take customization requests and try to get new products out there--suggestions welcome.

We're happy to announce the immediate availability of Nikto 2.1.3!

Nikto is an open source web server scanner which performs
comprehensive tests against web servers for multiple items, including
over 6400 potentially dangerous files/CGIs, checks for outdated versions
of over 1000 servers, and version specific problems on over 270 servers.

In addition to the usual list of minor bug fixes, 2.1.3 contains some new functionality and improvements, including:

Seccubus automates regular vulnerability scans and provides delta reporting. On 8/1, the project released version 1.5 "The DefCon Edition." This version includes support for controlling Nikto through Seccubus directly, leveraging the NBE report format which Frank Breedijk (Seccubus' author) wrote and released with the 2.1.2 version of Nikto.

In addition to working with Seccubus, Frank's NBE report format should allow for easy Nikto integration into any program which supports Nessus imports.

In Nikto 2.1.1, the facillity to call only specific plugins was added. This was mainly designed as a debugging and development feature so that it is easier to test one plugin without running all of the tests. This was a very simple plugin string that consisted of a simple comma separated list of plugin names.

In Nikto 2.1.2 it was discovered that this facillity was of more use than previously thought and could fix one of the basic flaws with the current plugin system: that of passing parameters to the plugin, something that had been hacked via using -mutate-options.