Nikto

Scan web servers for dangerous files, misconfigurations, and outdated software.

Updated Feb 11, 2026
One-click install
npx skills add https://github.com/zzw4257/security-skills --skill nikto
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Nikto
Source: https://github.com/zzw4257/security-skills/tree/main/skills/nikto
Command: npx skills add https://github.com/zzw4257/security-skills --skill nikto

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify security vulnerabilities in web servers by scanning for dangerous files, outdated software, and common misconfigurations.

Core Features & Use Cases

  • Vulnerability Scanning: Detects over 6700 potential issues including default files, outdated server software, and server configuration problems.
  • Misconfiguration Detection: Identifies common web server setup errors that could be exploited.
  • Use Case: Before deploying a new web application, use Nikto to perform a comprehensive scan of the web server to ensure it's hardened against common attacks.

Quick Start

Run a basic Nikto scan against the target website example.com.

Frequently Asked Questions about Nikto

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is web server vulnerability scanning and how does it detect misconfigurations?

Web server vulnerability scanning identifies dangerous files, outdated software, and misconfigurations by checking the server against a database of over 6700 known issues. It detects common setup errors and default files that could be exploited by attackers.

How do I perform a DAST security assessment on a web server before deployment?

To perform a DAST security assessment, initiate a comprehensive scan against your target web server. This dynamically tests the server to ensure it is hardened against common attacks by identifying outdated software and configuration problems before application deployment.

Can I scan for outdated server software and dangerous files using this approach?

Yes, you can scan for outdated server software and dangerous files. The scanning process checks the web server to detect over 6700 potential issues, including default files, server configuration problems, and outdated software versions that pose security risks.

Do I need the Nikto executable installed to run these security assessments?

Yes, you need the Nikto executable installed and accessible in your system's PATH to run these security assessments. The scanning functionality relies entirely on this external tool to perform dynamic application security testing and web server hardening checks.

What are the limitations of web server misconfiguration detection?

The limitations of web server misconfiguration detection include relying on a predefined database of known issues, meaning zero-day vulnerabilities or custom logic flaws may be missed. It primarily detects common setup errors, default files, and outdated software rather than complex application vulnerabilities.