atom.xml

<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">

 <title>CIRT.net: The Blog</title>
 <link href="https://sullo.github.io/atom.xml" rel="self"/>
 <link href="https://sullo.github.io/"/>
 <updated>2021-06-27T13:52:45-04:00</updated>
 <id>https://sullo.github.io</id>
 <author>
   <name>Chris Sullo</name>
   <email>sullo@cirt.net</email>
 </author>

 
 <entry>
   <title>Nikto Interactive</title>
   <link href="https://sullo.github.io/2021/06/26/nikto-interactive/"/>
   <updated>2021-06-26T00:00:00-04:00</updated>
   <id>https://sullo.github.io/2021/06/26/nikto-interactive</id>
   <content type="html">&lt;p&gt;So you have Nikto going, but you’re not really sure what’s happening, or how long the scan is going to take?&lt;/p&gt;

&lt;p&gt;No problem.&lt;/p&gt;

&lt;p&gt;Nikto has several interactive features you can use while a scan is in progress. If you just want to find out the current status, simply press the space bar to find out what the program is doing, how many requests have been made, and a guesstimate of how long the rest is going to take. You can automate this output every 500 requests by turning on progress reporting by pressing ‘p’ (similarly, pressing it again will turn it off).&lt;/p&gt;

&lt;p&gt;&lt;img src=&quot;/public/images/blog-nikto-status.png&quot; alt=&quot;Status&quot; /&gt;&lt;/p&gt;

&lt;p&gt;If you want to get a better feel for how the server is responding to each request, you can turn verbose mode on or off by pressing the ‘v’ key.&lt;/p&gt;

&lt;p&gt;&lt;img src=&quot;/public/images/blog-nikto-verbose.png&quot; alt=&quot;Savedir feature&quot; /&gt;&lt;/p&gt;

&lt;p&gt;If you’d like a lot of info, debug is also available by pressing ‘d’.&lt;/p&gt;

&lt;p&gt;&lt;img src=&quot;/public/images/blog-nikto-debug.png&quot; alt=&quot;Savedir feature&quot; /&gt;&lt;/p&gt;

&lt;p&gt;If you’re running up against the end of your testing window, no need to cancel and start again later—simply press a ‘P’ to pause all operations. Nikto will sit around and wait until you’re ready to resume by hitting a ‘P’ again.&lt;/p&gt;

&lt;p&gt;&lt;img src=&quot;/public/images/blog-nikto-pause.png&quot; alt=&quot;Savedir feature&quot; /&gt;&lt;/p&gt;

&lt;p&gt;If you’re giving up or totally out of time, you can press ’N’ to move on to the next host/port (if you ran more than one, or finish up if not) or ‘q’ to quit scanning entirely. Both N/q will wrap up current operations and write report/save output, terminating the program normally and more gracefully than a hard exit will.&lt;/p&gt;

&lt;p&gt;There are a few more interactive commands which you may find handy for debugging or getting more info from a server, such as reporting cookies, errors, redirections, etc. See the entire list below.&lt;/p&gt;

&lt;p&gt;One last note: keyboard input is checked every 10 requests, so on very slow scans you might need to wait until input is polled.&lt;/p&gt;

&lt;p&gt;Here’s the full list:&lt;/p&gt;
&lt;ul&gt;
  &lt;li&gt;SPACE - Report current scan status&lt;/li&gt;
  &lt;li&gt;v - Turn verbose mode on/off&lt;/li&gt;
  &lt;li&gt;d - Turn debug mode on/off&lt;/li&gt;
  &lt;li&gt;e - Turn error reporting on/off&lt;/li&gt;
  &lt;li&gt;p - Turn progress reporting on/off&lt;/li&gt;
  &lt;li&gt;r - Turn redirect display on/off&lt;/li&gt;
  &lt;li&gt;c - Turn cookie display on/off&lt;/li&gt;
  &lt;li&gt;o - Turn OK display on/off&lt;/li&gt;
  &lt;li&gt;a - Turn auth display on/off&lt;/li&gt;
  &lt;li&gt;q - Quit&lt;/li&gt;
  &lt;li&gt;N - Next host&lt;/li&gt;
  &lt;li&gt;P - Pause&lt;/li&gt;
&lt;/ul&gt;

</content>
 </entry>
 
 <entry>
   <title>Replay Nikto Findings With The Save Option</title>
   <link href="https://sullo.github.io/2021/06/23/nikto-replay-requests/"/>
   <updated>2021-06-23T00:00:00-04:00</updated>
   <id>https://sullo.github.io/2021/06/23/nikto-replay-requests</id>
   <content type="html">&lt;p&gt;When running Nikto, you have the ability to save all findings in plaintext files by using the -Save option. This option takes one argument, a directory name, which will be used or created to save all findings, one per text file.  Each file will be named in the following format: HOSTNAME_PORT_DATE_TESTID.txt&lt;/p&gt;

&lt;p&gt;&lt;img src=&quot;/public/images/blog-nikto-savedir.png&quot; alt=&quot;Savedir feature&quot; /&gt;&lt;/p&gt;

&lt;p&gt;These save files contain basic test information such as the test ID and message, the full HTTP response, and JSON representations of both the request and response. They also contain a “Reason” for the finding—for example “Response Code Match” (the code from the HTTP response matched the test database) or “Content Match” (versus the response body), which is helpful for debugging.
This text file can be used for evidence of a test finding later, and can also serve as documentation for reports.&lt;/p&gt;

&lt;p&gt;&lt;img src=&quot;/public/images/blog-nikto-json.png&quot; alt=&quot;JSON object&quot; /&gt;&lt;/p&gt;

&lt;p&gt;Additionally, the JSON can be used to replay the original test’s request by using the included replay.pl program (note that Nikto will need the &lt;a href=&quot;http://search.cpan.org/~makamaka/JSON-PP-2.27203/lib/JSON/PP.pm&quot;&gt;JSON::PP&lt;/a&gt; module installed).
replay.pl has only two options:      -file      -proxy&lt;/p&gt;

&lt;p&gt;By supplying the Nikto save file as the -file option value, replay.pl will parse the request and send it to the original target server. The -proxy option will route the request through the specified proxy (format host:port), which makes it easy to move a request from the command line to a tool like &lt;a href=&quot;https://portswigger.net/&quot;&gt;Burp&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;&lt;img src=&quot;/public/images/blog-nikto-replay.png&quot; alt=&quot;replay.pl&quot; /&gt;&lt;/p&gt;

&lt;p&gt;This type of replay is especially handy when rechecking findings after application changes have been implemented. The output will again provide the original Nikto test information, and will show both the headers and body of the new request.&lt;/p&gt;

&lt;p&gt;One final tip—by supplying a “.” to the -Save option, Nikto will automatically name and create a new directory in the format: savedir_HOST_PORT_DATETIME&lt;/p&gt;

</content>
 </entry>
 

</feed>