Nikto

Nikto is a web server scanner for security professionals, penetration testers, and system administrators. It checks web servers for potentially dangerous or interesting files and programs and for outdated versions of thousands of servers.

It runs as a Perl script, either directly or through perl, and can also run as a Docker container. Its test database supports BODY, HEADER, COOKIE, and CODE matchers that combine with AND logic to target response content, headers, cookies, and status codes.

Scan tuning lets you focus on specific issue classes such as injection, misconfiguration, or command execution, and evasion techniques help test through filters. Results export to CSV, JSON, HTML, XML, plain text, or a SQL database for later review.