HackerTarget.com - Nikto Web Scan Sample Report --------------------------------------------------------------------------- - Nikto 1.36/1.39 - www.cirt.net + Target IP: xx.126.xx.110 + Target Hostname: www.testsite.com + Target Port: 80 + Start Time: Sun Jul 29 14:48:24 2007 --------------------------------------------------------------------------- - Scan is dependent on "Server" string which can be faked, use -g to override + Server: Apache + Server: Apache/1.3.29 (Unix) mod_perl/1.28 PHP/4.3.4 + No CGI Directories found (use '-C all' to force check all possible dirs) + /robots.txt - contains 19 'disallow' entries which should be manually viewed (added to mutation file lists) (GET). + Apache/1.3.29 appears to be outdated (current is at least Apache/2.0.47). Apache 1.3.28 is still maintained and considered secure. + mod_perl/1.28 appears to be outdated (current is at least 1.99_10) + PHP/4.3.4 appears to be outdated (current is at least 4.3.4RC2) + /.htaccess - Contains authorization information (GET) + /.htpasswd - Contains authorization information (GET) + /phpBB2/includes/db.php - Some versions of db.php from phpBB2 allow remote file inclusions. Verify the current version is running. See http://www.securiteam.com/securitynews/5BP0F2A6KC.html for more info (GET) + /\">