Last chance for features in Nikto 2.1.0

I've decided to stop procrastinating and put the final polish on the next version of Nikto and aim for a mid-July release date.

This is the last chance to guide the remaining tasks I have left. If you want some super great feature or needed bug fix in the next version, head over to assembla ( and raise a ticket, post on the discussion list or send me an email.

What not to do when changing a configuration file

We've had a couple of bugs raised after some people have upgraded Nikto 2.02 to Nikto 2.03 and kept the same configuration file.

To fix a bug there was a wee change to the configuration file with Nikto 2.03, but there was no extra check in the code to give the new setting a default value.

If you have problems with Nikto 2.03 failing to find web servers, check config.txt and ensure that the below line is present:


(This line defines which HTTP methods Nikto uses to check whether an HTTP server is listening).

Anonymous tickets and spamming

The more observant may have noticed that several spamming tickets were created within the Nikto development trac instance, this compounded with a time when I couldn't get to my mail account, means that we've had around 100 spams in the trac database.

These have now been deleted and I've revoked rights for anonymous users to raise tickets to prevent more spammers from wasting my time.

This means that if you need to raise a ticket for Nikto, you'll have to either create an account within Assembla, or you'll need to contact me via email or the Nikto mailing list.

Blogging @ Work

Just a quick note that I've decided this whole "blog" thing isn't just a fad, so I've started writing over at the work blog since, well, they pay me. So go subscribe.

Bug in nikto 2.03 - update now!

There was a small mistake in the release of Nikto 2.03; whilst fixing one bug, I'd introduced a more serious one: SSL scanning didn't work.

Running Nikto via Nessus

Michel Arboi and Brian Martin have written a long post on Tenable's blog detailing exactly how to get Nessus to run Nikto automatically. This has been a question that's come up time and again on the mailing lists, so hopefully this will help everyone out.