CmdID

CmdID / Commands

nikto

Web server scanner which performs tests against web servers for multiple items. tldr-pages

On several platforms 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Perform a basic Nikto scan against a target host

perl nikto.pl -host 192.168.0.1Identify

Specify the port number when performing a basic scan

perl nikto.pl -host 192.168.0.1 -port 443Identify

Scan ports and protocols with full URL syntax

perl nikto.pl -host https://192.168.0.1:443/Identify

Scan multiple ports in the same scanning session

perl nikto.pl -host 192.168.0.1 -port 80,88,443Identify

Update to the latest plugins and databases

perl nikto.pl -updateIdentify

What detects it

Sigma process creation rules that name nikto
highLinux HackTool ExecutionNasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])