nerdexam
GIAC

GCIH · Question #272

You run the following command while using Nikto Web scanner: perl nikto.pl -h 192.168.0.1 -p 443 What action do you want to perform?

The correct answer is D. Port scanning. The -p flag in Nikto specifies a target port, so -p 443 directs the scan at port 443 on the target host rather than the default port 80.

Reconnaissance, Scanning, and Enumeration

Question

You run the following command while using Nikto Web scanner:

perl nikto.pl -h 192.168.0.1 -p 443 What action do you want to perform?

Options

  • AUsing it as a proxy server
  • BUpdating Nikto
  • CSeting Nikto for network sniffing
  • DPort scanning

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    8% (3)
  • C
    3% (1)
  • D
    86% (32)

Why each option

The -p flag in Nikto specifies a target port, so -p 443 directs the scan at port 443 on the target host rather than the default port 80.

AUsing it as a proxy server

Configuring Nikto to use a proxy requires the -useproxy flag pointing to a proxy address, not the -p flag.

BUpdating Nikto

Updating Nikto is performed using the -update flag, not -p.

CSeting Nikto for network sniffing

Nikto is a web vulnerability scanner with no network sniffing capability; no flag exists to enable packet capture.

DPort scanningCorrect

The -p parameter instructs Nikto which port to probe on the target host 192.168.0.1; specifying port 443 directs Nikto to perform its web vulnerability scan against the HTTPS service on that port, which constitutes port-directed scanning.

Concept tested: Nikto web scanner port specification syntax

Source: https://github.com/sullo/nikto/wiki

Topics

#Nikto#web scanner#port 443#HTTPS scanning

Community Discussion

No community discussion yet for this question.

Full GCIH Practice