nerdexam
GIAC

GCIH · Question #116

You want to integrate the Nikto tool with nessus vulnerability scanner. Which of the following steps will you take to accomplish the task? Each correct answer represents a complete solution. Choose…

The correct answer is C. Place the directory containing nikto.pl in root's PATH environment variable. D. Restart nessusd service. Integrating Nikto with Nessus requires that the Nikto script be accessible via the system PATH and that the Nessus daemon is restarted to load the new plugin configuration.

Reconnaissance, Scanning, and Enumeration

Question

You want to integrate the Nikto tool with nessus vulnerability scanner. Which of the following steps will you take to accomplish the task? Each correct answer represents a complete solution. Choose two.

Options

  • APlace nikto.pl file in the /etc/nessus directory.
  • BPlace nikto.pl file in the /var/www directory.
  • CPlace the directory containing nikto.pl in root's PATH environment variable.
  • DRestart nessusd service.

How the community answered

(53 responses)
  • A
    6% (3)
  • B
    17% (9)
  • C
    77% (41)

Why each option

Integrating Nikto with Nessus requires that the Nikto script be accessible via the system PATH and that the Nessus daemon is restarted to load the new plugin configuration.

APlace nikto.pl file in the /etc/nessus directory.

The /etc/nessus directory stores Nessus configuration files, not external tool scripts; placing nikto.pl there does not make it executable by the Nessus plugin engine.

BPlace nikto.pl file in the /var/www directory.

/var/www is the default web server document root and has no relationship to the Nessus plugin execution environment or the system PATH used by the nessusd daemon.

CPlace the directory containing nikto.pl in root's PATH environment variable.Correct

Placing the directory containing nikto.pl in root's PATH environment variable allows the Nessus daemon (nessusd), which runs as root, to locate and invoke the Nikto Perl script when the corresponding Nessus plugin is executed during a scan.

DRestart nessusd service.Correct

Restarting the nessusd service is required to reload the plugin list and apply any configuration changes, including the newly accessible Nikto script, so Nessus can recognize and schedule it as part of vulnerability scans.

Concept tested: Integrating Nikto web scanner with Nessus via PATH and service restart

Source: https://docs.tenable.com/nessus/Content/NessusPlugins.htm

Topics

#Nikto#Nessus#vulnerability scanner integration#web scanning

Community Discussion

No community discussion yet for this question.

Full GCIH Practice