DO NOT DEAL WITH THIS MEMBER
Hi there,
I own a website and would like to use nikto for scanning my website for any potential vulnerabilities. The thing is I do not know if I need to ask my hosting provider for permission to do this? Just for information I am using a shared hosting plan. So do I actually need any permission for this from my hosting company, or can I just go ahead and scan my website with nothing to worry about?
Thanks in advance 🤝
DO NOT DEAL WITH THIS MEMBER
Just scan the website.............
Nikto is pretty much literal shit-tier when it comes to scanning, better off doing it yourself manually or seeing if any plugins or frameworks or whatever running on your site are outdated/vulnerable. Check exploit0db and that should cover most of them.
humble rubyist in a world of pythonistas
(Dec 17, 2016 04:20 PM)Faith Connors Wrote: Nikto is pretty much literal shit-tier when it comes to scanning, better off doing it yourself manually or seeing if any plugins or frameworks or whatever running on your site are outdated/vulnerable. Check exploit0db and that should cover most of them.
Doing it manually takes time & way to much work. You also have to have the skills & knowledge which most people simply wanting their site scanned do not. That's why automated tools like ZAP & W3af were made, so programmer & non technical people could have a GUI interface to help them.
Anyways OP, you will be fine as long as you paid for the website, it's your website. If you are super paranoid (which you shouldn't be) send a ticket to your hosting provider telling that this will occur and not to raise any red flag if necessary.
(Dec 17, 2016 07:01 PM)๖ۣۜXe Wrote: Doing it manually takes time & way to much work. You also have to have the skills & knowledge which most people simply wanting their site scanned do not. That's why automated tools like ZAP & W3af were made, so programmer & non technical people could have a GUI interface to help them.
Anyways OP, you will be fine as long as you paid for the website, it's your website. If you are super paranoid (which you shouldn't be) send a ticket to your hosting provider telling that this will occur and not to raise any red flag if necessary.
Just saying, you need knowledge of how the vulnerability works/can be exploited before you can patch it.
humble rubyist in a world of pythonistas
(Dec 17, 2016 07:06 PM)Faith Connors Wrote: Just saying, you need knowledge of how the vulnerability works/can be exploited before you can patch it.
Very true, but we are assuming he already knows about the vunerabilitiy and how to patch it, he just needs an automated tool that can detect it and gives him a PoC link. Then he can further investigate and patch etc.
Go ahead and scan it. It would be ridiculous for your host to ridicule you for securing your website. The way I see it, it's better that you discover a vulnerability in your site than a not-so-nice black hat.
I whould prefer you to do this manually
By nmap or using NSE scripts
-snip-
Would appreciate if someone could help me out with this as well.
Like, I want to learn more regarding it.
I want to install ubuntu / kali on my VMare but have never succeed haha.
OT:
Sorry for stealing your thread <3 :(
Anything below HTTP is forbidden. Nikto is fine.
(Dec 18, 2016 01:52 AM)Last_viking Wrote: I whould prefer you to do this manually
By nmap or using NSE scripts You're special, aren't you?
Kali Linux has a whole section dedicated to vulerability scanning. If you use Kali, be sure to check that section out on the top left.
(Dec 17, 2016 04:00 PM)CrypticX Wrote: Hi there,
I own a website and would like to use nikto for scanning my website for any potential vulnerabilities. The thing is I do not know if I need to ask my hosting provider for permission to do this? Just for information I am using a shared hosting plan. So do I actually need any permission for this from my hosting company, or can I just go ahead and scan my website with nothing to worry about?
Thanks in advance 🤝
YOU can use sn1per it's awesome vuln scanner 😏
-snip-
|
