Gavin owns a white-hat firm and is performing a website security audit for one of his clients. He begins by running a scan which looks for common misconfigurations and outdated software versions…

Armitage is a graphical cyber-attack management interface for Metasploit focused on launching exploits and managing sessions, not passive web server configuration scanning.

Nikto is an open-source web server scanner specifically designed to perform comprehensive tests against web servers for dangerous files, outdated server software, and common misconfigurations. It checks for over 6,700 potentially dangerous files and programs and reports version-specific issues, making it the standard tool for the type of audit Gavin is conducting. Its output-focused, non-exploitation design fits a security audit workflow rather than an active attack.

Metasploit is a penetration testing framework used to develop and execute exploit code against targets, not to passively scan for web server misconfigurations and outdated versions.

Nmap is a network discovery and port scanning tool used to identify open ports and running services across hosts, not to audit web server configuration details or version-specific vulnerabilities.