Web Application

Nikto

Classic web server scanner for dangerous files, misconfigs, outdated software.

beginner

Linux

Windows

Scanning

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

Quick noisy checks of web server hygiene on authorized targets.

Point at host; review items; validate manually (high false positives).

Still useful for classic misconfiguration coverage.

Commands & usage

nikto -h https://example.com

nikto -h 192.168.1.10 -p 80,443

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

ffuf

Fast web fuzzer for directories, vhosts, parameters, and more.

Gobuster

Directory/DNS/vhost brute-forcing tool written in Go.

Feroxbuster

Recursive content discovery tool with smart filtering.

dirsearch

Feature-rich web path scanner in Python.

Wfuzz

Flexible web application fuzzer for params, headers, auth, etc.

Nuclei

Template-based vulnerability scanner with huge community template set.