Nikto is an Open Source (GPL) web server scanner which performs
comprehensive tests against web servers for multiple items, including
over 6100 potentially dangerous files/CGIs, checks for outdated
versions of over 950 servers, and version specific problems on over
260 servers. It also checks for server configuration items such as
the presence of multiple index files, HTTP server options, and will
attempt to identify installed web servers and software. Scan items
and plugins are frequently updated and can be automatically updated.
It uses Rain Forest Puppy's LibWhisker (wiretrip.net) for HTTP
functionality, and can perform checks in HTTP or HTTPS. It also
supports basic port scanning and will determine if a web server is
running on any open ports.
Nikto is written by Chris Sullo and David Lodge.
===> The following configuration options are available for nikto-2.1.6_1,1:
DOCS=on: Build and/or install documentation
SSLEAY=on: Use NET::SSLeay for ssl scanning
===> Use 'make config' to modify these settings
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security/nikto: set maintainership
Submitter becomes maintainer (already mainter of several ports).
Pet linters
PR: 252943
Submitted by: mbeis@xs4all.nl
Fix usage of ${PERL5}.
${PERL5} points to a specific version of perl, say, perl5.22.1, it is
fine to use it in a ports Makefile to do Perly things, but ports using
it must use ${PERL}, that points to /usr/local/bin/perl so that if the
minor version is updated, the shebang keep working.
While there, make some ports use shebangfix, regen a few patches, and
bump PORTREVISION where a shebang went from PERL5 to PERL.
PR: 205367
With hat: portmgr
Sponsored by: Absolight
- Remove the DESTDIR modifications from individual ports as we have a new,
fully chrooted DESTDIR, which does not need such any more.
Sponsored by: Google Summer of Code 2007
Approved by: portmgr (pav)
- make -update work by using the right path in plugins/nikto_core.plugin [1]
- respect TARGETDIR
- fix a PREFIX -> LOCALBASE mistake
- use my @FreeBSD.org address
- bump PORTREVISION
Submitted by: "Scott MacGregor" <shadowbq@gmail.com> [1]
- Un-BREAK by using version-ed file-name for DISTFILES
- Add MASTER_SITES mirrors
- Use USE_PERL and reinplace hardcoded path for perl
- OPTIONally run-depend on security/p5-Net-SSLeay and security/nmap
- Install config.txt as nikto.conf (and replace references to config.txt in
all appropriate places)
- Use INSTALL_DATA for plugins
- Bump PORTREVISION
- Pass maintainership to submitter
- Make some changes to preserve nikto.conf when it's changed and install
nikto.conf.sample [1]
PR: 90344
Submitted by: Ion-Mihai "IOnut" Tetcu <itetcu@people.tecnik93.com>
Reviewed by: garga [1]
Chase makesum; the author retar the current tarball by updating these
modules since its release (05.27.2003 - 08.18.2003):
nikto_outdated.plugin 1.08
- Fixed nasty regex bug in the version eval, and made more
efficient. Pointed out by fr0stman, thx Zeno for assistance
nikto_core.plugin 1.15
- Bugfix: only scanning port 80 when multiple ports are specified by CLI
argument. Thanks to Martin Macok for submitting a bug report.
nikto_headers.plugin 1.07
- Added Host header back after delete in IIS Content-Location check.
Thanks to Abdi Ponce for the bug report & debug.
nikto_httpoptions.plugin 1.04
- Changed PROPPATCH, TRACK, TRACE messages. Changed PROPFIND message,
thanks to Jericho for tracking down some good info on it. Added SEARCH message.
nikto_user_enum_apache.plugin 1.02
- Bugfix: some user names not tested (zz, zzz, etc.)
- Major rewrite for speed improvements
Obtained from: bento
